Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/hchG7caJpD9W6F09IoEq2bxHBQQ.roa
File: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (raw, json)
Hash identifier: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=
Subject key identifier: 85:C8:46:ED:C6:89:A4:3F:56:E8:5D:3D:22:81:2A:D9:BC:47:05:04
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019D9C57EBA42925334305DA3B47EF154EBE
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/hchG7caJpD9W6F09IoEq2bxHBQQ.roa
Signing time: Fri 17 Apr 2026 16:48:20 +0000
ROA not before: Fri 17 Apr 2026 16:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208686
IP address blocks: 185.244.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:57:eb:a4:29:25:33:43:05:da:3b:47:ef:15:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Apr 17 16:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85c846edc689a43f56e85d3d22812ad9bc470504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:c5:c8:9e:15:72:1d:a0:ad:a2:76:10:df:
20:1d:12:cc:97:a4:7f:85:39:85:f2:ee:4a:8c:ea:
eb:17:ad:29:7a:2f:b7:06:7b:9b:19:42:7f:c1:48:
e6:d1:d5:89:29:a8:c0:ef:5e:f8:e1:fd:57:72:80:
c3:dd:13:f1:56:52:1b:55:05:5c:88:a2:f2:a4:b9:
6d:83:8f:4d:7a:91:2b:2a:24:79:cb:c4:66:e7:d1:
69:61:41:47:60:3e:e7:8a:76:f1:e4:ed:da:6c:c3:
b8:ac:0f:c5:a4:3d:8e:d8:97:ce:e0:dc:48:bb:ed:
80:c6:64:bd:e8:a9:38:bb:1a:39:5e:a8:25:6c:cc:
a8:8c:61:3f:e8:83:02:03:81:41:a5:82:72:0d:05:
55:c9:0f:8c:bd:67:6c:bd:cc:76:a6:69:fe:3b:d2:
e8:b2:e7:3d:e3:ba:db:38:df:a7:50:67:a9:57:39:
1e:85:fd:0d:e8:37:56:80:c9:69:58:26:11:3f:e3:
ae:c2:94:16:17:c1:9a:d8:c5:f0:e3:87:41:e0:ca:
82:6e:8e:62:83:75:45:e1:b7:22:47:a5:d6:88:52:
eb:32:de:ed:44:c4:78:dc:fa:9e:7f:89:a5:5b:1f:
7d:e0:0f:1e:06:51:6c:09:4c:33:5e:7d:6e:03:a5:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:46:ED:C6:89:A4:3F:56:E8:5D:3D:22:81:2A:D9:BC:47:05:04
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/hchG7caJpD9W6F09IoEq2bxHBQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cd:c5:7c:63:fd:85:7a:39:a7:7b:a9:62:6d:1a:c1:10:dc:
29:81:93:f5:e0:23:da:72:79:81:71:8f:13:c3:2e:67:ad:71:
d4:e2:45:88:cf:cc:04:0d:69:fd:91:88:1b:15:4e:b1:45:fb:
aa:25:dd:70:84:c0:89:46:31:43:4d:3b:c2:16:24:20:d2:8a:
86:38:29:8e:95:45:71:76:29:e5:e8:74:74:9c:d3:b9:3b:8a:
e2:98:f8:4a:bc:87:e2:22:db:89:b4:3b:f0:67:99:3d:b2:ff:
6b:5d:fb:0e:a9:62:0b:28:a2:bd:f0:26:35:e6:1c:16:57:04:
00:30:88:45:a9:15:bb:92:54:a1:36:97:f0:2a:e7:cd:de:b3:
ef:41:66:8e:67:21:7d:f7:c3:b0:44:b3:1f:e5:52:ab:74:a5:
43:f5:c0:b8:4c:75:17:ea:1a:82:cf:d7:50:62:30:7b:c0:7a:
c3:e8:4b:6b:e5:92:8a:dc:b1:89:a3:da:2e:33:97:47:58:6c:
32:6f:0a:71:5e:dd:df:52:e4:de:f9:bc:d9:37:13:c3:8f:33:
73:12:d0:c4:4d:e9:05:96:45:e5:a0:6a:0f:c3:43:fb:25:f1:
33:db:54:88:eb:af:5c:2f:9d:dd:5d:88:66:57:3a:ed:cb:14:
21:6e:7b:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2cV+ukKSUzQwXaO0fvFU6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwNDE3MTY0ODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWM4NDZlZGM2ODlhNDNmNTZlODVkM2QyMjgxMmFkOWJjNDcwNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/XFyJ4Vch2graJ2EN8gHRLMl6R/
hTmF8u5KjOrrF60pei+3BnubGUJ/wUjm0dWJKajA71744f1XcoDD3RPxVlIbVQVc
iKLypLltg49NepErKiR5y8Rm59FpYUFHYD7ninbx5O3abMO4rA/FpD2O2JfO4NxI
u+2AxmS96Kk4uxo5XqglbMyojGE/6IMCA4FBpYJyDQVVyQ+MvWdsvcx2pmn+O9Lo
suc947rbON+nUGepVzkehf0N6DdWgMlpWCYRP+OuwpQWF8Ga2MXw44dB4MqCbo5i
g3VF4bciR6XWiFLrMt7tRMR43Pqef4mlWx994A8eBlFsCUwzXn1uA6WrVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIXIRu3GiaQ/VuhdPSKBKtm8RwUEMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvaGNoRzdjYUpwRDlXNkYwOUlvRXEyYnhIQlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQAMA0G
CSqGSIb3DQEBCwUAA4IBAQBezcV8Y/2Fejmne6libRrBENwpgZP14CPacnmBcY8T
wy5nrXHU4kWIz8wEDWn9kYgbFU6xRfuqJd1whMCJRjFDTTvCFiQg0oqGOCmOlUVx
dinl6HR0nNO5O4rimPhKvIfiItuJtDvwZ5k9sv9rXfsOqWILKKK98CY15hwWVwQA
MIhFqRW7klShNpfwKufN3rPvQWaOZyF998OwRLMf5VKrdKVD9cC4THUX6hqCz9dQ
YjB7wHrD6Etr5ZKK3LGJo9ouM5dHWGwybwpxXt3fUuTe+bzZNxPDjzNzEtDETekF
lkXloGoPw0P7JfEz21SI669cL53dXYhmVzrtyxQhbnuf
-----END CERTIFICATE-----
Generated at Tue May 5 21:18:45 2026 by rpki-client