Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/hbo0pySSCroIegSOSs5RlRjwFvg.roa
File: hbo0pySSCroIegSOSs5RlRjwFvg.roa (raw, json)
Hash identifier: rU41ZGReAnZrPd0NAsMdD2ONr+HjXb57K3ZbIW856j0=
Subject key identifier: 85:BA:34:A7:24:92:0A:BA:08:7A:04:8E:4A:CE:51:95:18:F0:16:F8
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A0DD507B7715DAC21D58E74B9CE1836EE7
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/hbo0pySSCroIegSOSs5RlRjwFvg.roa
Signing time: Sat 26 Sep 2026 10:43:54 +0000
ROA not before: Sat 26 Sep 2026 10:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 185.42.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:50:7b:77:15:da:c2:1d:58:e7:4b:9c:e1:83:6e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 26 10:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85ba34a724920aba087a048e4ace519518f016f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:8c:ba:27:c8:86:5b:41:75:ca:8b:4f:f7:
17:56:ca:1e:02:47:be:89:40:9b:98:a9:a4:2b:24:
07:d9:02:2a:7b:3f:04:91:06:26:4d:7f:4e:35:08:
64:2f:ac:24:0c:2d:96:70:28:48:fa:bd:34:df:de:
f2:4d:08:df:bf:26:62:b0:95:49:64:03:bc:50:89:
80:e9:cd:99:ee:97:55:06:2a:87:e5:bc:ee:b6:88:
47:99:d9:5f:af:e0:94:5c:57:49:f8:b5:bf:7b:5a:
c8:35:b0:3d:73:b8:a4:64:10:f1:3c:0d:b1:f3:c1:
83:0d:1a:fa:3c:8b:43:ba:27:5d:da:58:08:0f:52:
4a:af:15:3e:a6:c3:47:a8:e9:9d:f4:1f:cc:ee:65:
78:82:20:0c:b9:07:37:40:50:10:be:42:27:6d:b0:
23:c8:13:8f:70:6f:ab:30:58:36:dd:92:52:f0:68:
61:9a:82:bf:5b:e8:4f:b6:f0:c2:4b:73:7d:92:ca:
64:c3:fe:d9:15:f0:db:3a:3a:5b:ac:a1:2a:05:15:
45:a7:36:b4:1e:cd:d9:f2:40:49:81:0b:b7:bc:9f:
a8:4b:6f:64:13:8c:0f:3c:ca:0d:87:eb:57:2f:52:
98:12:97:7c:68:c5:6a:ad:c1:1c:35:8c:05:1f:5b:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:34:A7:24:92:0A:BA:08:7A:04:8E:4A:CE:51:95:18:F0:16:F8
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/hbo0pySSCroIegSOSs5RlRjwFvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.163.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6a:1a:e1:3d:f6:b7:fd:92:15:fa:a8:fe:cd:df:b0:23:46:
d5:8e:c3:43:75:81:c9:b1:37:99:c3:1b:81:69:90:d7:f0:66:
c9:ae:52:85:66:88:bd:f5:46:9c:13:73:1f:ac:71:ae:f7:e4:
82:3a:53:40:b2:b2:8f:ca:82:3e:da:e7:99:77:f5:2b:6d:f7:
53:f5:5a:dd:b7:77:85:fe:29:ed:79:3a:ec:99:97:62:15:98:
69:3e:49:b0:2d:e0:38:83:7a:34:c4:ee:fd:0d:17:6e:35:80:
dc:66:2c:ef:1c:12:5f:0a:61:5a:a5:04:ee:db:8a:3c:63:6e:
d4:61:8c:99:ec:ff:92:51:b9:86:cd:e1:2b:64:84:e8:66:ee:
7a:8d:6d:a6:e7:52:9f:9c:06:7d:01:ed:e1:0d:0b:f4:c3:2e:
bb:d5:31:7d:f1:87:c2:82:8c:ae:d7:4c:24:d7:2f:fa:74:54:
3c:32:5a:c8:2d:04:a0:66:e9:e6:35:64:15:b3:da:23:c8:c6:
b4:5a:a5:53:3f:2c:90:9a:bb:d6:cc:9a:84:41:9c:db:39:e6:
8a:00:9e:dd:9e:04:7a:08:13:0c:a8:1c:29:74:bf:e5:29:8b:
75:24:b6:4f:c9:d8:10:f2:4c:cc:40:08:b1:37:d3:e3:7f:21:
ac:46:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:56:49 2026 by rpki-client