Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/H6DUhBhOxxZZe2J_qjz_BpVA-KY.roa
File: H6DUhBhOxxZZe2J_qjz_BpVA-KY.roa (raw, json)
Hash identifier: 08CMfTVvWxESInw9rUkp0a63Q7izRPT3e1/+5AXf2I0=
Subject key identifier: 1F:A0:D4:84:18:4E:C7:16:59:7B:62:7F:AA:3C:FF:06:95:40:F8:A6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A17898D847A9E56D74F1C213C53115E883
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/H6DUhBhOxxZZe2J_qjz_BpVA-KY.roa
Signing time: Mon 26 Oct 2026 14:24:05 +0000
ROA not before: Mon 26 Oct 2026 14:24:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 45.74.176.0/24 maxlen: 24
212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:98:d8:47:a9:e5:6d:74:f1:c2:13:c5:31:15:e8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:24:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fa0d484184ec716597b627faa3cff069540f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:12:a8:6a:93:f2:98:85:98:eb:7e:63:19:
31:35:30:2c:3e:4a:6e:9a:eb:1b:5e:57:02:61:1e:
04:51:31:48:8c:22:a6:40:45:a2:81:a3:4f:27:a6:
30:f8:20:81:0d:74:c1:f1:41:ed:47:39:02:f0:a1:
87:dc:71:4d:ec:da:db:46:0a:53:de:23:98:5a:9f:
d7:22:eb:f1:62:b9:d0:c9:8f:e4:aa:12:88:97:1b:
84:34:a6:82:ab:2c:47:41:8b:85:98:85:f9:ca:af:
40:dd:7f:72:d2:77:e8:60:4f:04:15:d2:45:c6:76:
9a:ab:21:8d:74:1b:3c:02:52:a6:6f:dc:f4:a2:11:
c7:79:74:56:93:0a:b2:eb:34:36:4c:12:35:f3:8d:
03:5c:4e:a3:b1:a7:13:a4:04:91:d3:bd:ce:b9:38:
66:1c:f9:1c:f4:03:12:ed:da:de:12:83:f5:8a:2c:
06:09:19:67:8f:b3:c7:3e:d1:46:b4:e1:87:fc:69:
5c:aa:23:fc:8d:47:b3:fe:96:24:73:ca:28:17:63:
86:ee:d5:cd:4d:89:a7:a3:43:50:f0:ea:6c:95:4d:
c3:df:38:16:ec:eb:98:21:84:13:c0:9f:34:ab:fd:
97:dd:1e:dc:7c:22:c8:82:99:3a:3a:06:63:be:93:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:D4:84:18:4E:C7:16:59:7B:62:7F:AA:3C:FF:06:95:40:F8:A6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/H6DUhBhOxxZZe2J_qjz_BpVA-KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.176.0/24
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
41:28:42:99:88:61:f8:d7:28:35:6f:d4:f2:07:52:8b:59:be:
95:5b:12:68:7f:38:cf:c2:82:45:53:e1:93:b4:8e:45:44:57:
f4:c9:24:02:c7:f8:ce:ec:4f:eb:cf:45:d2:e2:7d:f8:5e:2a:
9b:43:98:3e:37:4d:89:8e:2b:26:8f:58:da:39:ef:37:80:bc:
e7:81:e1:60:c4:5f:ba:34:76:21:03:01:17:a8:38:8f:1e:77:
5a:82:b3:d4:6c:1e:de:1f:65:f5:f3:d1:02:c5:53:9e:bc:c1:
7b:0f:07:f5:e1:de:47:d5:7d:e2:37:3f:68:03:da:63:b9:28:
8e:7c:d0:b4:63:99:e6:34:3b:3e:1c:0a:48:6b:32:d2:63:ca:
93:4e:55:17:ad:60:31:5c:fc:06:60:60:4b:42:67:3c:89:b0:
c5:27:7d:d8:db:1a:ec:58:61:15:d0:54:62:7a:c5:88:9d:0e:
ea:c1:27:16:4d:c1:83:26:23:58:1e:88:e3:0d:04:44:ff:63:
53:32:e6:54:5d:29:1b:38:25:bb:12:be:0c:5d:fe:42:c3:42:
fa:67:83:98:66:b0:5e:54:87:f6:3e:07:c5:01:4d:bb:2c:8c:
12:6c:1f:2e:c6:03:75:9e:e1:e9:f6:98:b1:cf:9e:cd:b1:19:
b7:12:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:45 2026 by rpki-client