Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/NH6Kxbw3owXkcn71mMgtvz0Y0hk.roa
File: NH6Kxbw3owXkcn71mMgtvz0Y0hk.roa (raw, json)
Hash identifier: 9K/OKUGyyv+EkjvXSN956FdqTIF+oPfgyQZUcSZZM2w=
Subject key identifier: 34:7E:8A:C5:BC:37:A3:05:E4:72:7E:F5:98:C8:2D:BF:3D:18:D2:19
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 01A10AA5A691FD1BD498723C7D57A7057996
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/NH6Kxbw3owXkcn71mMgtvz0Y0hk.roa
Signing time: Mon 05 Oct 2026 05:59:50 +0000
ROA not before: Mon 05 Oct 2026 05:59:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 2.58.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a5:a6:91:fd:1b:d4:98:72:3c:7d:57:a7:05:79:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Oct 5 05:59:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347e8ac5bc37a305e4727ef598c82dbf3d18d219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:f2:b4:38:d9:08:0e:cc:ea:bb:83:bf:7c:
e4:09:56:b5:02:ab:ce:71:73:cc:e1:e9:26:3a:ff:
ba:93:3e:d5:9f:61:a7:4d:9e:32:59:10:df:8d:cf:
c4:b4:91:3b:b5:5b:1b:25:ba:be:a5:ef:87:7b:49:
39:0c:0b:17:8b:05:e2:62:51:71:b9:7a:4b:13:6a:
40:6b:4f:2c:97:bf:df:77:6a:97:33:28:e1:26:f7:
06:75:ad:2a:06:7b:a6:b8:60:8c:2a:47:08:ce:40:
99:65:68:6e:54:fd:f2:52:bc:7c:41:ba:a8:19:af:
fe:2c:7c:fe:54:a6:76:07:30:13:0f:ab:2d:cb:2c:
21:df:87:c3:2d:14:b8:eb:10:7a:7e:05:b7:b8:62:
8a:e1:71:36:46:e8:9b:b8:7a:4d:48:83:94:8e:08:
c2:38:9a:b2:c5:bc:b5:57:e1:3f:ac:bf:06:f8:c1:
51:f3:b3:f1:88:14:0a:d6:f4:c2:19:f7:e3:25:ad:
f8:e5:e3:ce:87:47:49:25:2e:a3:0c:bc:85:15:95:
d1:2d:c8:44:65:28:c3:d6:82:e7:c1:2c:1c:5d:c1:
62:0f:12:8c:02:6d:e1:c0:b0:37:81:84:8a:58:f0:
ee:43:f2:eb:c5:04:3b:26:9b:4a:00:2d:ec:85:92:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:8A:C5:BC:37:A3:05:E4:72:7E:F5:98:C8:2D:BF:3D:18:D2:19
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/NH6Kxbw3owXkcn71mMgtvz0Y0hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.115.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5e:02:2a:d8:12:3d:5f:04:30:21:72:b0:83:1c:ed:2a:bc:
05:b2:15:a5:58:4d:15:21:10:12:1c:c9:26:5f:57:ba:ea:14:
52:15:93:4f:88:a3:b9:82:6e:49:ef:a2:81:d4:fc:3c:00:1b:
c5:46:5b:17:19:c3:3b:77:e5:2e:2a:4f:4d:e5:9f:96:9e:82:
46:04:3a:ee:84:8d:5c:14:62:e4:22:7e:4d:54:78:eb:95:04:
19:46:1c:ec:9e:0a:c5:68:d9:2f:c2:1b:c4:a5:0e:c8:f2:ce:
b4:e5:5c:dc:1e:04:60:a5:9b:e3:11:f2:21:3d:2c:7a:fc:f8:
98:f6:8e:56:fd:bb:32:32:6f:84:69:3f:1d:7d:75:b7:e3:79:
e8:30:06:9c:7a:ed:1b:3b:37:43:39:87:63:f5:ef:14:99:34:
b6:4d:57:81:3f:0b:ef:51:02:88:3e:f8:41:dd:d6:81:d0:66:
63:7f:3c:d8:04:53:9e:44:61:b7:3e:de:e4:21:72:aa:26:0e:
2d:c2:68:63:72:0f:57:ab:4f:a0:9d:ce:28:c6:f4:d4:e2:3b:
c5:2f:5e:06:35:1f:66:bd:a1:96:df:99:48:e9:e1:82:c1:58:
2e:34:5b:1b:f8:a5:ea:b7:1e:80:25:f8:25:c6:d8:69:7d:2a:
33:59:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:46:16 2026 by rpki-client