Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1hTbXiXqURMHfT_3cf_5_wditXc.roa
File: 1hTbXiXqURMHfT_3cf_5_wditXc.roa (raw, json)
Hash identifier: QaVtq/BvGJQS3X3q0F0yQ9lZV47+S5VCwhODYAuVhIE=
Subject key identifier: D6:14:DB:5E:25:EA:51:13:07:7D:3F:F7:71:FF:F9:FF:07:62:B5:77
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A163227F1E6ED3B4956AF042886910032A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1hTbXiXqURMHfT_3cf_5_wditXc.roa
Signing time: Thu 22 Oct 2026 10:22:47 +0000
ROA not before: Thu 22 Oct 2026 10:22:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 109.236.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:22:7f:1e:6e:d3:b4:95:6a:f0:42:88:69:10:03:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:22:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d614db5e25ea5113077d3ff771fff9ff0762b577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:f0:e3:8f:77:94:7e:6c:7d:04:35:c2:7f:
45:79:70:dc:36:e2:8c:2f:5e:68:52:f6:42:50:b0:
63:b2:3b:b8:cc:fd:0b:8f:b5:12:68:1d:d3:5d:b2:
bf:70:ca:92:fc:f3:50:a6:3a:be:f5:8e:4c:11:47:
09:ac:21:e5:94:89:fb:56:cd:60:47:11:ed:39:ed:
e8:f1:95:ce:0d:60:1e:fe:4e:1c:3d:ce:12:a3:a4:
56:d4:c9:6b:2d:22:7d:ba:02:2b:e4:af:33:4d:c3:
cf:a4:da:b8:e7:6a:07:1b:d2:f1:bb:6f:f2:a1:aa:
d7:ff:87:a4:fc:04:f4:68:5f:64:4b:ac:ea:bc:03:
e0:6d:0f:6f:f4:4d:6a:50:03:bc:4f:e4:a7:cd:3d:
64:da:cf:39:61:6c:34:bd:35:23:a5:ff:d5:5c:e7:
3c:4b:2d:64:90:82:33:95:6f:1c:94:84:0d:0b:70:
7a:29:93:f1:ca:93:7a:7a:ff:af:6f:bc:98:97:c2:
7a:db:42:63:0b:04:3c:aa:d0:42:95:23:9a:27:12:
d9:8a:11:69:52:d8:90:8e:99:4b:2a:8e:90:02:75:
6a:c5:6a:a7:68:6d:d8:9a:e8:22:89:2f:b8:26:84:
c1:2f:52:44:ce:71:2d:e5:03:a6:08:cf:d8:c4:21:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:14:DB:5E:25:EA:51:13:07:7D:3F:F7:71:FF:F9:FF:07:62:B5:77
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1hTbXiXqURMHfT_3cf_5_wditXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:79:4b:f3:ae:23:e5:6a:fe:c0:3e:3a:3a:0b:bd:bf:f4:96:
0e:9a:96:44:cf:66:f2:fd:84:ee:b9:84:8f:84:7e:9f:f9:aa:
95:0a:25:72:c9:20:ff:4a:40:e3:e9:99:73:0f:22:10:cf:c9:
0c:0d:d4:9b:ac:a6:27:93:49:eb:ef:39:1d:34:f5:bb:9e:81:
83:df:c8:bd:96:91:b7:4c:a7:45:72:77:09:6e:06:b2:74:bb:
3b:22:32:61:4a:81:60:3a:f1:8f:7f:c5:8f:2b:78:a6:41:f4:
59:8b:29:4a:c5:a6:a4:7e:c9:22:16:8f:f9:61:f1:47:c1:e5:
be:19:db:5e:4e:f1:df:28:d8:60:d9:9b:0f:dd:3e:82:32:1a:
df:11:59:e4:17:df:e4:da:4f:93:a1:f3:7a:19:b7:d0:88:5d:
06:80:51:95:f9:17:6e:6f:a9:8f:f9:a3:ab:52:1c:9f:88:79:
8c:96:3c:83:c7:c4:ba:55:46:14:e2:21:45:a0:8f:f9:be:4f:
06:a4:4b:d0:57:7a:bd:a9:33:94:7f:78:55:9d:e4:19:50:f9:
37:d7:e5:3e:51:2d:9e:f1:72:b4:64:d7:98:b0:c4:bf:12:b8:
52:f5:e8:9d:fe:c0:a5:21:1a:72:c3:57:ee:a9:2d:a8:ae:50:
11:a6:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:50 2026 by rpki-client