Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/hbykg__8f6GXjFLIzKyMaJMyn7c.roa
File: hbykg__8f6GXjFLIzKyMaJMyn7c.roa (raw, json)
Hash identifier: 1KqYWBw9/FhnOFQv5caFDqVWOd1aKgqEH62TWf3ifEc=
Subject key identifier: 85:BC:A4:83:FF:FC:7F:A1:97:8C:52:C8:CC:AC:8C:68:93:32:9F:B7
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE2533E2FEA37B083AB9EC9C9D33A
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/hbykg__8f6GXjFLIzKyMaJMyn7c.roa
Signing time: Tue 15 Sep 2026 21:49:28 +0000
ROA not before: Tue 15 Sep 2026 21:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 142.228.234.0/24 maxlen: 24
198.33.93.0/24 maxlen: 24
198.34.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e2:53:3e:2f:ea:37:b0:83:ab:9e:c9:c9:d3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85bca483fffc7fa1978c52c8ccac8c6893329fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:ee:d4:ba:01:d0:67:61:98:13:94:dd:d2:
b8:d7:a7:f2:44:01:b2:a1:32:74:64:1a:a3:36:d2:
94:bc:f0:46:8a:78:dc:be:f0:95:75:b4:38:b2:a4:
a0:aa:de:db:3f:19:5f:4b:63:23:01:89:df:a9:27:
87:fe:dd:1c:27:ce:69:0a:5d:de:5e:21:0b:d6:21:
63:b0:17:5d:a4:66:81:12:70:62:a7:ac:32:1b:cc:
24:5a:11:1f:36:bd:a0:7c:d7:b5:4d:f9:fc:d3:b7:
39:70:51:4e:e5:5f:16:7c:9c:4d:a6:6c:8c:6b:e0:
0f:62:c3:35:5c:60:68:b0:16:46:eb:53:06:c7:87:
3d:e4:29:66:b4:14:2a:dc:ed:e7:7c:d2:d6:b8:cd:
e6:c1:b1:51:30:63:e7:6e:29:08:11:fb:ac:4a:83:
44:e1:ab:62:d4:57:67:2e:33:9a:ee:b0:f0:5a:86:
47:68:02:85:dc:cd:bf:b0:d8:02:65:56:86:a2:bb:
a2:16:50:82:a7:29:60:95:4e:2e:ca:44:b9:99:0f:
eb:92:33:38:9d:d7:d5:b7:52:b8:82:c1:c7:60:ae:
90:a4:e0:a2:2a:be:c7:96:0d:33:7b:d0:62:a6:a2:
c3:e0:0d:b7:90:a8:80:31:66:bb:b5:13:a2:e2:e5:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:A4:83:FF:FC:7F:A1:97:8C:52:C8:CC:AC:8C:68:93:32:9F:B7
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/hbykg__8f6GXjFLIzKyMaJMyn7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.234.0/24
198.33.93.0/24
198.34.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a3:4b:05:c6:e2:d3:1b:0d:20:ef:16:3f:4c:23:52:10:84:
97:28:d7:da:4d:09:7b:b3:f9:a7:2a:08:be:0a:81:27:c7:d0:
4b:df:7f:bd:9c:0d:88:26:f8:8b:cd:57:69:82:fb:ec:68:46:
99:52:02:19:ed:7a:5e:b2:d5:de:a6:61:be:8c:73:46:81:08:
c3:56:6b:52:af:91:ff:d9:d5:5d:5b:47:e8:2f:ee:96:f3:9a:
18:4e:d9:54:9e:bc:c1:cd:28:ee:cc:43:10:17:f0:db:57:5e:
c1:94:41:33:aa:2b:5b:cf:ba:d6:7b:52:3a:f9:85:80:83:d3:
ac:1b:23:5a:88:1b:81:d2:40:7f:fb:3f:78:1d:c1:79:d7:bd:
84:1f:11:a3:31:b4:8a:00:9e:95:fb:a1:22:e8:6b:9f:6f:dc:
f9:b7:ac:e9:d6:f0:4e:5a:86:17:07:48:0b:35:fb:89:a9:a2:
29:6a:fb:f6:c9:49:38:c3:c9:19:69:0c:e7:d1:9d:6b:d4:cd:
3e:27:32:19:1c:34:0d:35:a8:cd:a9:61:f2:67:c3:70:67:49:
be:a1:ff:1b:76:03:3f:fa:23:2c:e0:18:ab:60:a9:5f:9a:cf:
31:ac:59:55:27:de:f2:ab:38:5a:64:f0:6f:df:56:31:90:2f:
64:37:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:54 2026 by rpki-client