Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/hoPDPLNiWu-9zpQhgukPEyLhtuM.roa
File: hoPDPLNiWu-9zpQhgukPEyLhtuM.roa (raw, json)
Hash identifier: XsLZob1RA7jolFvgyscIzhZR6yadd8m7VJ1KCp4ecOA=
Subject key identifier: 86:83:C3:3C:B3:62:5A:EF:BD:CE:94:21:82:E9:0F:13:22:E1:B6:E3
Certificate issuer: /CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Certificate serial: 01A042939D0396F4EDDEE792E0E160A6CC8C
Authority key identifier: 9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/hoPDPLNiWu-9zpQhgukPEyLhtuM.roa
Signing time: Thu 27 Aug 2026 09:36:05 +0000
ROA not before: Thu 27 Aug 2026 09:36:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 194.13.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:93:9d:03:96:f4:ed:de:e7:92:e0:e1:60:a6:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Validity
Not Before: Aug 27 09:36:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8683c33cb3625aefbdce942182e90f1322e1b6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:d1:13:e1:e5:6a:d6:97:75:10:f7:17:ae:
cd:02:a8:67:44:0b:9b:7f:56:28:09:68:83:8f:e1:
9a:cc:97:eb:83:bf:e4:70:04:16:bc:16:2e:63:80:
ee:b4:a1:04:26:5d:8c:97:e0:52:3c:b7:39:48:93:
70:76:57:84:a6:05:14:4c:4a:7d:0e:fe:f1:df:58:
a6:bb:4a:64:bb:72:57:d0:03:33:01:1b:21:e3:2f:
d5:a9:c9:5b:4a:37:93:96:81:18:fe:fb:a5:4a:e1:
35:b1:69:a3:9d:9a:32:bb:e7:85:d3:e9:73:99:dd:
b7:95:55:d8:a6:7b:ea:2d:25:92:50:72:1b:4e:74:
a0:84:a5:26:62:14:d5:ad:bc:e1:28:84:f8:97:bf:
cd:21:73:4e:4e:2a:e3:9b:36:1d:ba:38:35:45:07:
a7:c7:18:27:26:97:8e:24:e7:f6:75:8a:1e:c4:b3:
af:8d:ec:8d:a4:39:61:d5:1b:ef:cc:89:fc:5c:57:
e2:10:4e:de:77:16:5f:26:d0:b7:36:d9:f9:71:af:
3a:57:60:56:56:03:74:f2:31:3e:88:18:49:1c:e1:
26:cb:12:bd:be:3c:0b:55:da:47:67:31:74:bd:14:
95:49:17:c4:b4:07:1e:1e:f2:2e:3b:d4:e1:74:1f:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:C3:3C:B3:62:5A:EF:BD:CE:94:21:82:E9:0F:13:22:E1:B6:E3
X509v3 Authority Key Identifier:
keyid:9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/hoPDPLNiWu-9zpQhgukPEyLhtuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.176.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d7:b6:b2:a4:93:4c:74:ba:3d:64:04:a2:f0:1b:b7:0c:e3:
0a:da:17:f5:a8:75:27:cb:c9:57:4f:2c:71:a6:7b:40:2c:61:
a5:c0:11:8e:50:c8:54:64:f2:97:91:b0:97:f6:5b:49:c0:ba:
65:da:34:fe:23:0c:97:e6:4f:0b:cc:e0:24:7d:5b:81:04:1f:
9d:50:28:69:25:d4:68:ee:07:d9:67:44:b4:ea:01:13:69:cb:
a9:44:83:72:55:b9:f7:fa:5a:3b:0d:42:4a:fd:48:ef:f5:04:
d7:ff:a0:f6:7a:2c:2b:10:a2:3e:71:f2:b3:44:26:a4:90:e3:
a3:12:f5:45:70:d5:ca:90:84:c0:c0:2f:6b:7e:81:e5:1a:25:
46:4b:d5:63:38:f7:e6:0f:2e:ff:94:f0:09:fb:be:a7:f6:2a:
42:21:8f:0e:9e:44:9c:75:c5:3f:94:57:a3:74:b4:f9:36:1a:
5b:bb:94:62:5c:1e:e8:e4:fc:87:72:bf:92:24:4f:f1:29:8f:
d0:f8:63:67:8a:4a:f6:b9:07:2f:49:81:fe:cc:3c:09:d2:85:
c6:ee:7b:23:fb:36:4a:80:40:e1:15:e4:2b:25:64:de:9f:0a:
b3:c6:86:5b:9f:46:6f:17:06:2d:09:1b:19:61:04:b0:15:4d:
0b:07:b6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:14 2026 by rpki-client