Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/HRIVcDy9x8WWp3RXj6f3AguRUok.roa
File: HRIVcDy9x8WWp3RXj6f3AguRUok.roa (raw, json)
Hash identifier: BOH+EjtYaTwsY5uYSux2w7s+HwMPsGQwIHv5RprW8ZI=
Subject key identifier: 1D:12:15:70:3C:BD:C7:C5:96:A7:74:57:8F:A7:F7:02:0B:91:52:89
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789706DC78BF2521B304AD0298794628
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/HRIVcDy9x8WWp3RXj6f3AguRUok.roa
Signing time: Mon 26 Oct 2026 14:22:05 +0000
ROA not before: Mon 26 Oct 2026 14:22:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219390
IP address blocks: 185.231.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:97:06:dc:78:bf:25:21:b3:04:ad:02:98:79:46:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:22:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d1215703cbdc7c596a774578fa7f7020b915289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:fe:0a:5d:b8:e2:3b:8c:3d:48:18:25:6c:
56:fb:6b:f7:f3:c6:e6:ed:22:42:62:d8:4f:88:f7:
36:7c:95:cd:9a:ae:8e:0c:a9:f9:fc:0b:eb:58:99:
4b:2b:6f:26:52:8b:0c:4b:5a:23:c3:d6:e2:07:b2:
5b:af:3e:ec:a8:1a:c2:cd:25:11:78:5d:55:a2:75:
a7:40:71:8e:8f:50:92:be:53:ae:eb:f9:35:9e:f9:
77:02:f3:ba:35:57:56:9d:32:52:d6:5b:60:d5:80:
ef:4f:b1:09:3c:ec:3e:6d:d0:01:61:df:60:60:e2:
76:74:d7:64:0c:89:b0:d4:c7:63:1b:8c:79:96:8f:
f0:ab:99:89:62:76:22:d2:6d:3d:23:ed:da:61:f1:
9c:4c:32:1f:5f:1d:1b:1b:db:ed:35:15:44:c8:dc:
28:d5:ab:37:61:8c:07:7c:09:c8:d3:30:9d:1e:63:
2b:ee:d5:6e:84:7d:d0:97:57:b1:09:f6:0c:62:9f:
78:04:06:41:e0:4c:ff:e4:00:03:50:ab:86:d8:8c:
f9:cc:cc:39:11:25:9d:94:39:08:16:07:16:3b:30:
4f:c0:01:25:60:3a:89:95:9e:16:b6:9b:4d:23:c9:
c4:99:9a:fb:6e:80:4d:06:00:f8:ef:78:1a:75:55:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:15:70:3C:BD:C7:C5:96:A7:74:57:8F:A7:F7:02:0B:91:52:89
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/HRIVcDy9x8WWp3RXj6f3AguRUok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:28:87:2d:b0:13:74:04:5d:55:17:23:b7:24:11:c8:6a:57:
c9:2c:2d:1d:e1:35:cf:eb:45:83:9a:4b:65:b9:2e:92:42:2a:
77:07:0f:5f:ca:4a:9e:9a:bf:39:0e:2b:6a:61:7c:0e:38:51:
ea:a0:b6:0d:8e:53:13:db:c6:59:af:4b:a6:57:82:9d:78:49:
92:07:6b:b5:d2:15:b3:90:cb:fb:c8:40:ef:41:ff:ba:f3:00:
67:41:d0:a9:69:76:c8:e1:6b:0e:58:74:04:28:4e:7e:2c:99:
64:48:65:5d:7d:dd:37:ae:8d:c5:7b:6e:18:54:66:8f:23:1d:
c9:76:b4:c4:4f:67:4d:4a:26:d4:85:32:7f:1b:46:2a:68:6c:
06:4a:2b:ba:04:fe:45:3b:37:2f:d8:67:cc:38:e8:5b:2c:b6:
19:20:e9:f4:eb:8a:ab:86:66:25:2e:70:fb:62:b5:f6:74:2f:
6a:30:c6:88:6b:0a:75:dd:99:4f:1b:c1:cd:89:96:28:17:77:
46:b9:46:fb:86:a5:cd:37:0d:2e:57:00:07:d7:f7:28:19:67:
e7:07:48:0e:a1:52:0a:68:ff:7e:58:8c:f0:c4:c2:71:39:59:
fc:24:3d:e6:59:39:70:b2:bd:51:b7:8c:e2:85:c8:87:5f:ea:
a0:0d:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:56 2026 by rpki-client