Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/hwu5SvCgU59ShO9fogdURCv6AoU.roa
File: hwu5SvCgU59ShO9fogdURCv6AoU.roa (raw, json)
Hash identifier: nBkergd1LBGxB0QpkcjB5a9Defi7cKkNRW0IBJmar/M=
Subject key identifier: 87:0B:B9:4A:F0:A0:53:9F:52:84:EF:5F:A2:07:54:44:2B:FA:02:85
Certificate issuer: /CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Certificate serial: 01A06955E76101A1F8F52A5F2AB728C79665
Authority key identifier: 66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/hwu5SvCgU59ShO9fogdURCv6AoU.roa
Signing time: Thu 03 Sep 2026 22:13:52 +0000
ROA not before: Thu 03 Sep 2026 22:13:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35688
IP address blocks: 195.137.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:55:e7:61:01:a1:f8:f5:2a:5f:2a:b7:28:c7:96:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Validity
Not Before: Sep 3 22:13:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=870bb94af0a0539f5284ef5fa20754442bfa0285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:1e:91:9b:98:8d:e0:74:43:26:47:62:bc:
d4:08:f4:e6:16:54:06:08:94:5e:34:72:eb:b8:85:
58:f3:63:17:26:8c:81:62:59:ee:3a:cf:1d:07:1e:
90:76:7b:ca:5a:6c:76:da:ca:df:61:41:6a:27:c4:
dc:4c:c6:36:3b:c4:f4:47:ae:7d:7e:64:ca:7d:76:
36:47:6a:b9:f8:d5:9f:63:6e:a2:ac:8c:6f:c5:51:
34:b8:95:cd:98:54:57:b9:4a:60:33:41:c5:da:68:
1c:88:ca:78:82:f2:2c:be:19:f2:6c:b2:6a:ff:25:
ee:07:0c:60:5b:01:73:21:0b:04:9f:95:57:e3:a4:
31:a9:01:5f:46:bc:86:09:0e:95:3c:86:1d:a2:73:
95:3c:a2:1c:2d:7e:82:bd:ec:e2:3a:1e:1c:25:8d:
e6:93:95:ae:d0:ea:5b:14:f8:d6:de:01:a2:0f:94:
fe:63:3a:77:0c:42:a7:3f:3d:1d:51:9d:bc:48:9a:
39:dd:6c:4c:01:75:eb:ba:00:aa:65:ed:b0:82:1f:
97:23:c3:1a:c5:44:c2:36:54:fb:7c:a3:25:43:68:
e3:dc:c0:45:c8:d5:db:60:d6:11:79:4a:6a:7f:fa:
7a:29:81:b7:57:45:fe:93:48:a0:c0:30:03:22:0f:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0B:B9:4A:F0:A0:53:9F:52:84:EF:5F:A2:07:54:44:2B:FA:02:85
X509v3 Authority Key Identifier:
keyid:66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/hwu5SvCgU59ShO9fogdURCv6AoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.185.0/24
Signature Algorithm: sha256WithRSAEncryption
58:23:8c:5b:b5:a9:60:d5:b6:02:4c:ae:6f:5c:1c:2a:ee:7f:
18:90:03:58:80:5e:a5:22:72:76:e9:a3:3c:01:dc:55:c5:cf:
06:e5:71:d5:a4:97:2c:9a:02:88:50:fa:67:7f:60:d2:e4:c8:
fa:fd:c0:ef:8d:b5:1c:20:5b:79:a5:bb:61:b8:f9:69:19:63:
39:76:75:ac:f1:bc:66:ef:b1:a0:1f:c4:95:88:50:90:2d:11:
bc:94:2f:fe:0b:fa:5a:58:11:69:bd:12:98:d7:11:6f:89:fb:
b4:ff:04:3f:2d:94:f1:0c:33:db:90:c5:d3:58:a2:2e:65:17:
b1:05:9e:f3:9a:77:db:72:c9:10:31:39:ac:78:23:5e:5f:7a:
81:4f:f2:13:fc:43:f5:37:d4:60:f3:e5:ce:a5:f7:1a:dc:b8:
a3:d3:2a:7f:4e:7d:4d:aa:5c:5c:97:32:e4:21:c3:f0:2b:a2:
be:86:dc:2a:7e:b8:46:74:43:dd:04:b8:82:75:57:47:e2:9b:
65:8e:19:e8:ed:e2:3a:be:e1:5c:cc:4a:63:33:91:6f:3d:b3:
83:53:94:8d:07:7c:74:35:83:f3:b5:37:db:3f:8e:76:4c:ad:
43:d5:49:12:4e:eb:71:6d:6b:83:a8:59:85:8e:21:80:07:e1:
af:e5:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:02:34 2026 by rpki-client