Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/huXlbPqAA1b9i7ZmKbP4NUymuTI.roa
File: huXlbPqAA1b9i7ZmKbP4NUymuTI.roa (raw, json)
Hash identifier: 2yKN6PVua0m6pjdKSS6mAuCNTQE3dH0rSHmJAsGUQ2c=
Subject key identifier: 86:E5:E5:6C:FA:80:03:56:FD:8B:B6:66:29:B3:F8:35:4C:A6:B9:32
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368D9E00B9E7D1F800621E068859A01
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/huXlbPqAA1b9i7ZmKbP4NUymuTI.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197223
IP address blocks: 2a03:8c0::/32 maxlen: 32
2a03:8c0::/36 maxlen: 36
2a03:8c0:1000::/36 maxlen: 36
2a03:8c0:2000::/36 maxlen: 36
2a03:8c0:3000::/36 maxlen: 36
2a03:8c0:4000::/36 maxlen: 36
2a03:8c0:5000::/36 maxlen: 36
2a03:8c0:6000::/36 maxlen: 36
2a03:8c0:7000::/36 maxlen: 36
2a03:8c0:8000::/36 maxlen: 36
2a03:8c0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:e0:0b:9e:7d:1f:80:06:21:e0:68:85:9a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e5e56cfa800356fd8bb66629b3f8354ca6b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:b8:04:8c:a6:2f:5b:a1:ae:b3:27:f7:3f:
31:53:cc:43:31:6d:c8:34:1b:a3:7a:8f:42:dd:34:
15:1c:37:4a:31:82:e8:37:8e:46:fb:ac:46:9b:12:
5d:b8:6f:fd:a5:30:83:0d:63:30:e6:33:01:56:94:
49:d7:8f:5b:1b:2d:d0:59:a4:1f:84:4a:b0:85:73:
a2:84:c0:14:32:08:e2:69:ca:0b:6b:45:12:a8:6d:
b7:47:50:99:aa:19:28:45:04:15:29:bd:8e:0e:a9:
82:13:f1:b2:27:c3:ac:40:7a:2a:98:fc:ce:bc:4f:
87:50:65:37:86:0c:7c:b4:ea:88:49:25:01:86:37:
3a:76:a5:6f:cb:03:ff:ba:55:fb:2b:b4:32:01:64:
56:dc:d5:97:dd:99:4a:f5:86:6f:33:ba:4b:c8:fa:
1c:6c:90:84:45:95:89:3b:b0:f3:17:f5:15:9a:ab:
e3:3f:0c:42:72:65:98:64:f6:aa:d7:10:6b:d2:8c:
7d:24:50:2a:01:fc:a8:bd:8f:4e:c0:22:0d:d1:8c:
a0:8f:27:39:03:4e:41:38:80:3a:e5:53:64:36:3e:
af:46:a0:bb:32:16:a4:1e:78:24:b9:25:d6:7b:2c:
e6:4f:5f:5b:04:62:80:21:31:38:8c:1e:97:44:9b:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:E5:6C:FA:80:03:56:FD:8B:B6:66:29:B3:F8:35:4C:A6:B9:32
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/huXlbPqAA1b9i7ZmKbP4NUymuTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
10:47:52:8a:99:38:29:70:b5:00:f2:46:38:f9:43:6f:f3:46:
e5:4c:c4:11:32:62:6b:ae:06:b2:c9:7c:55:ff:48:22:d0:3a:
b2:51:4a:a1:f4:ca:12:44:6f:df:28:a3:38:c1:74:5e:64:bf:
4e:dd:db:24:5c:08:45:71:73:90:5d:7d:b2:4f:7f:b1:af:3f:
2a:8c:65:47:47:40:69:04:59:13:66:ce:80:36:55:48:a7:3b:
ed:91:e1:9d:50:3b:66:f4:ac:3c:98:11:ec:a2:56:df:3e:3e:
4d:5d:f6:50:61:fd:66:90:39:4c:ad:cf:74:22:45:df:4e:88:
be:db:c8:de:6d:da:67:59:4b:b8:3c:93:58:52:b0:0a:64:34:
23:48:90:12:9b:e4:ff:4f:4b:be:cb:04:54:1c:15:1b:23:1e:
5a:a1:0d:11:cd:45:7c:a7:8d:69:d9:6f:27:c7:ad:6f:a1:50:
02:c9:df:83:72:04:be:4c:cd:eb:fa:4e:a4:52:48:c7:2a:76:
ee:c4:e6:12:16:a6:03:99:ad:b8:11:7c:51:94:49:29:45:0d:
a3:79:3d:a0:3e:39:bb:01:2a:62:9a:ee:e5:a7:16:98:ce:99:
53:07:6e:1b:7a:5a:2a:3e:ee:d8:4f:79:bf:ea:a2:94:ec:e4:
bb:cf:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:43 2026 by rpki-client