Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/hscVJa1zcFdyUccI8x5yH0qcNiw.roa
File: hscVJa1zcFdyUccI8x5yH0qcNiw.roa (raw, json)
Hash identifier: uNP1bqmcK4itRcnCcHmI+yjjtNKZn/HDFyPe+Myxey8=
Subject key identifier: 86:C7:15:25:AD:73:70:57:72:51:C7:08:F3:1E:72:1F:4A:9C:36:2C
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019FAFB88A8EBF00CFD04B7732192CE94D41
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/hscVJa1zcFdyUccI8x5yH0qcNiw.roa
Signing time: Wed 29 Jul 2026 21:12:14 +0000
ROA not before: Wed 29 Jul 2026 21:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206592
IP address blocks: 89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:b8:8a:8e:bf:00:cf:d0:4b:77:32:19:2c:e9:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jul 29 21:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86c71525ad7370577251c708f31e721f4a9c362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:81:e2:d0:e6:63:4d:59:e9:21:e3:31:09:
b0:b6:0f:70:64:40:2f:19:e5:6d:09:ec:84:38:92:
02:31:c7:a1:41:2a:2e:49:7a:7f:55:48:93:ad:57:
c2:d7:b4:b6:d7:2d:01:52:5f:47:91:aa:e0:d5:68:
25:db:ab:8d:71:e2:6f:2a:0f:5d:5c:bd:a4:58:00:
57:25:f2:e5:b7:28:56:74:ae:b4:48:99:22:b1:f3:
15:0b:0a:8e:2e:da:fa:b8:5f:40:a6:8e:3e:52:93:
ca:d9:9d:d8:9a:32:3c:42:c1:6c:40:ab:f4:0b:46:
4b:f9:2b:8f:27:22:39:53:0d:87:c0:a3:52:21:c9:
84:f5:46:dd:1a:46:84:cf:34:df:d8:b4:cf:e1:80:
d3:ce:83:2d:c7:af:a1:b5:65:90:50:14:4f:6f:cb:
7e:4a:b0:6c:c5:20:de:7b:dd:d4:42:b8:31:97:c7:
2a:29:e2:1f:5c:63:d8:c2:f5:89:bd:e5:db:da:c1:
5f:c9:70:a8:4e:01:ee:c5:29:5d:8c:74:81:cf:69:
8d:f9:ad:5d:61:a2:5d:73:f5:1a:49:72:63:e6:81:
6d:31:98:52:de:97:15:64:dc:d8:d7:4f:3c:b2:f7:
8e:c7:17:9d:0e:53:0b:d7:3c:9e:6e:82:1d:77:9e:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C7:15:25:AD:73:70:57:72:51:C7:08:F3:1E:72:1F:4A:9C:36:2C
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/hscVJa1zcFdyUccI8x5yH0qcNiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.155.0-89.252.156.255
Signature Algorithm: sha256WithRSAEncryption
30:1d:55:77:f3:ae:7d:23:f9:d4:f6:6e:54:95:19:1e:a1:b4:
53:f8:99:d6:bc:ac:de:5b:c1:6a:77:c9:33:6d:1c:23:67:d5:
64:6f:99:12:97:a5:e0:5f:60:05:04:66:1d:58:c1:6f:98:94:
e8:32:b6:8b:27:f4:a8:a8:23:ed:9e:31:02:80:60:85:1b:50:
70:42:ce:31:99:9d:6a:d1:8c:22:f2:fe:f9:59:69:c1:fe:bf:
5c:f3:ff:5e:b9:a8:bb:32:27:7e:a7:17:ce:42:d2:e3:60:1b:
b2:7c:19:23:3e:2f:6b:c7:35:77:49:5f:86:34:7f:56:f0:a0:
54:33:ea:1b:70:21:3b:c4:f1:af:17:b9:2b:98:1a:2d:c6:e0:
96:8a:0c:87:51:67:9d:20:52:d6:e8:86:5e:4d:f5:23:a4:a8:
6a:a4:14:3e:0e:b8:36:56:cd:de:64:37:52:7b:e9:f9:42:40:
88:f4:39:80:4d:90:33:82:82:c5:f9:ff:5e:4d:04:59:95:a4:
54:2f:30:48:4a:50:e9:78:40:af:7d:89:be:30:eb:14:1e:62:
a0:0a:0e:00:7c:86:61:3d:a7:96:64:90:6f:3a:31:f9:1c:a6:
45:13:72:60:0d:f8:c7:a8:76:1a:dc:d0:b0:e1:6d:c1:c6:31:
35:8f:49:ef
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ+vuIqOvwDP0Et3Mhks6U1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjYwNzI5MjExMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmM3MTUyNWFkNzM3MDU3NzI1MWM3MDhmMzFlNzIxZjRhOWMzNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p2B4tDmY01Z6SHjMQmwtg9wZEAv
GeVtCeyEOJICMcehQSouSXp/VUiTrVfC17S21y0BUl9Hkarg1Wgl26uNceJvKg9d
XL2kWABXJfLltyhWdK60SJkisfMVCwqOLtr6uF9Apo4+UpPK2Z3YmjI8QsFsQKv0
C0ZL+SuPJyI5Uw2HwKNSIcmE9UbdGkaEzzTf2LTP4YDTzoMtx6+htWWQUBRPb8t+
SrBsxSDee93UQrgxl8cqKeIfXGPYwvWJveXb2sFfyXCoTgHuxSldjHSBz2mN+a1d
YaJdc/UaSXJj5oFtMZhS3pcVZNzY1088sveOxxedDlML1zyeboIdd54aAQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIbHFSWtc3BXclHHCPMech9KnDYsMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvaHNjVkphMXpjRmR5VWNjSTh4NXlIMHFjTml3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZ/JsD
BABZ/JwwDQYJKoZIhvcNAQELBQADggEBADAdVXfzrn0j+dT2blSVGR6htFP4mda8
rN5bwWp3yTNtHCNn1WRvmRKXpeBfYAUEZh1YwW+YlOgytosn9KioI+2eMQKAYIUb
UHBCzjGZnWrRjCLy/vlZacH+v1zz/165qLsyJ36nF85C0uNgG7J8GSM+L2vHNXdJ
X4Y0f1bwoFQz6htwITvE8a8XuSuYGi3G4JaKDIdRZ50gUtbohl5N9SOkqGqkFD4O
uDZWzd5kN1J76flCQIj0OYBNkDOCgsX5/15NBFmVpFQvMEhKUOl4QK99ib4w6xQe
YqAKDgB8hmE9p5ZkkG86MfkcpkUTcmAN+Meodhrc0LDhbcHGMTWPSe8=
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:29 2026 by rpki-client