Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HbCeJBlNOa4nOhj7uR7M65GufrI.roa
File: HbCeJBlNOa4nOhj7uR7M65GufrI.roa (raw, json)
Hash identifier: THZ26mGYpoyOATkYc5QPVMFVUx8uaekgHr/ilk6Fcoo=
Subject key identifier: 1D:B0:9E:24:19:4D:39:AE:27:3A:18:FB:B9:1E:CC:EB:91:AE:7E:B2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A06BC70737B2F61B3412D49338786A0E79
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HbCeJBlNOa4nOhj7uR7M65GufrI.roa
Signing time: Fri 04 Sep 2026 09:36:40 +0000
ROA not before: Fri 04 Sep 2026 09:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63025
IP address blocks: 88.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:c7:07:37:b2:f6:1b:34:12:d4:93:38:78:6a:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 4 09:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1db09e24194d39ae273a18fbb91ecceb91ae7eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:ae:d8:27:f6:3c:0d:30:3a:7b:20:2c:5c:
95:98:d1:e9:15:75:ce:c3:65:c5:70:26:e4:cf:13:
a3:53:59:52:a1:f6:6e:19:a3:39:b6:3d:42:80:86:
b0:f4:0c:54:80:0b:f2:7d:21:9f:03:b6:f7:d1:56:
2b:77:37:9c:d3:e2:89:4e:40:0c:1e:54:73:9e:ee:
02:86:b4:d9:99:70:55:ec:48:75:d4:ac:34:ef:eb:
c4:63:6b:62:92:1d:70:e0:40:72:c2:b4:cd:f1:db:
5f:5d:e8:6d:12:11:95:a7:0a:8a:87:98:57:e6:5a:
97:28:d4:e6:14:1a:44:9b:bd:69:b4:fa:ec:92:26:
8e:2f:3c:5c:90:f8:ba:52:7c:46:d7:73:c5:7a:f0:
4f:28:78:a3:1e:ea:9b:df:5d:d8:13:41:5c:b6:4b:
0d:dc:fe:26:87:67:ff:0d:61:41:2e:e0:4d:76:90:
61:74:c4:71:df:13:cd:6a:39:78:e7:db:89:2f:db:
59:81:1e:1b:cc:d0:c9:1f:df:83:30:30:44:bb:68:
21:c3:18:b5:28:4c:62:95:cd:0b:40:2a:64:6a:cd:
70:a1:1f:47:ba:2b:cc:1d:91:df:a3:91:8d:b0:bc:
72:1f:76:65:7b:3d:ad:0a:cc:42:d0:c9:28:c1:ce:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:9E:24:19:4D:39:AE:27:3A:18:FB:B9:1E:CC:EB:91:AE:7E:B2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HbCeJBlNOa4nOhj7uR7M65GufrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f9:f5:52:d7:a0:4f:cc:19:08:0b:ba:6f:26:e4:d5:6f:d4:
14:e1:b3:aa:01:af:44:e3:7d:b7:1f:1f:af:5a:66:95:82:40:
b2:0c:01:3d:de:c4:50:42:bd:b2:6b:05:4d:70:89:35:c3:3b:
d9:f2:64:c6:f4:98:de:fa:8b:d8:d6:59:4d:0d:43:36:00:49:
f7:1e:89:b7:72:04:f6:ff:18:01:92:ec:0f:e1:b9:c6:f9:27:
f6:2f:0b:56:38:8c:bc:2c:cf:f5:ed:42:c1:65:ea:d8:0a:29:
5e:f1:9c:49:ff:f2:37:85:cd:27:59:e0:57:c5:c8:62:db:fc:
f9:ce:7f:e1:14:68:e7:6b:ce:fc:5f:16:79:62:a8:7d:2b:5a:
4b:be:2f:0f:eb:8b:98:94:eb:b4:81:b3:3a:30:d2:99:64:30:
1b:aa:da:2b:35:78:3b:4a:e7:00:ef:0c:5c:00:62:57:9a:3c:
3b:49:61:84:fb:d8:e0:b6:54:0d:d6:04:d2:78:5e:7f:bb:43:
7c:d7:e3:06:62:04:bd:ed:0c:ef:f9:8a:14:2a:11:55:9c:94:
53:b3:8b:73:91:c1:a2:a2:25:46:15:1f:75:ef:de:cb:13:3c:
0f:67:5d:81:7f:cf:b9:46:f6:c9:75:95:14:4c:f9:5b:5e:1f:
38:4d:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:56 2026 by rpki-client