Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/hA4LZGEpLGlLMjbHRVLskAR0nGU.roa
File: hA4LZGEpLGlLMjbHRVLskAR0nGU.roa (raw, json)
Hash identifier: VmVFGxtwjgzGgXnpNKA7htr01o6wk9c+gM+jTcxW2ok=
Subject key identifier: 84:0E:0B:64:61:29:2C:69:4B:32:36:C7:45:52:EC:90:04:74:9C:65
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019FE7C28043B2D09A73AD101D5537EB7266
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/hA4LZGEpLGlLMjbHRVLskAR0nGU.roa
Signing time: Sun 09 Aug 2026 18:21:51 +0000
ROA not before: Sun 09 Aug 2026 18:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219113
IP address blocks: 5.145.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:c2:80:43:b2:d0:9a:73:ad:10:1d:55:37:eb:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Aug 9 18:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=840e0b6461292c694b3236c74552ec9004749c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:02:a6:dd:47:ee:03:00:03:2f:68:4d:17:
62:5d:f5:38:f1:91:56:2f:25:73:5f:d9:e9:02:ef:
d2:52:7c:0b:7b:55:f1:9a:93:bf:8b:57:79:89:44:
df:6a:d3:87:de:c8:b3:cc:c4:8b:5e:5f:ef:1b:c6:
b1:7b:89:f1:40:6a:7b:26:64:e1:e1:9b:e3:73:8c:
f9:c4:ea:16:e3:b3:02:eb:69:2a:c8:02:fa:3e:2d:
2b:e4:24:2c:32:4b:43:25:d6:0e:55:4b:ee:63:2e:
0c:27:b5:11:5f:4f:db:da:35:49:29:48:16:ea:a8:
d5:66:17:e7:97:69:ef:e2:34:1b:bc:d0:9e:3a:ed:
85:ac:fc:ba:07:1c:4a:ea:49:2f:5d:49:bc:20:c2:
e6:8c:ca:f4:90:33:3f:da:de:a6:ae:0a:4a:a6:fa:
8b:3d:5e:94:f0:5f:4b:e5:92:ce:f1:61:ac:b1:bc:
18:f8:e5:1f:79:c7:96:ab:03:24:b3:e4:73:ae:3f:
ed:98:b3:72:2a:58:a6:96:42:5c:f5:85:95:c0:b6:
bd:70:dc:2b:64:e4:87:8b:1c:30:aa:d3:f1:1f:28:
5d:6c:07:47:95:7a:18:e2:5b:93:89:6f:19:e5:7f:
38:03:e0:46:85:29:4a:53:a0:6d:96:6c:00:b6:d3:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:0B:64:61:29:2C:69:4B:32:36:C7:45:52:EC:90:04:74:9C:65
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/hA4LZGEpLGlLMjbHRVLskAR0nGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6c:dc:52:2e:0f:ae:62:43:2a:4e:63:80:6f:4d:06:ee:55:
13:7b:e0:1c:eb:db:fd:3e:f5:8b:54:96:a6:9e:4d:77:07:a9:
e5:0e:57:2d:d1:19:b2:1f:f5:d1:48:aa:05:fb:41:aa:d9:99:
65:42:50:29:cf:4b:3d:ab:06:39:ee:7c:20:08:da:73:13:7a:
e7:4c:60:45:0a:82:f7:fb:ef:b5:8e:41:b2:81:55:41:21:63:
7d:25:b4:f5:cf:1b:e9:a4:8c:b9:70:47:63:2f:d9:dd:51:82:
53:63:9d:f0:87:58:5a:47:1f:15:ef:cc:b6:9a:7c:83:88:d9:
bf:00:80:20:db:bf:75:13:e3:ab:95:f0:2f:6b:7d:a1:41:d7:
a4:fd:6a:5f:d8:b7:1a:9c:dd:1e:5b:e0:d7:72:aa:c7:29:81:
b3:a6:09:44:b7:14:65:4e:64:b5:3a:58:ae:dc:23:f7:13:0c:
03:b9:56:73:96:4b:2e:27:82:a5:7c:67:0a:e8:9d:70:7a:9a:
6d:f1:c0:65:0a:3c:52:b2:f5:3a:b7:ff:ed:d1:c3:60:b6:b8:
a0:22:4a:31:0f:b9:da:68:9d:9d:4b:7e:69:ba:d2:24:53:60:
15:a2:8e:75:95:6f:88:8c:10:d3:21:3e:11:06:10:0b:24:67:
bb:c6:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:56 2026 by rpki-client