Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/hQVV4BaKVO0RcwRU1xZIrqWspdI.roa
File: hQVV4BaKVO0RcwRU1xZIrqWspdI.roa (raw, json)
Hash identifier: M8O0fjTuy4HD7k8iGHVQmJqaSZ9JfENx5xX4lrm3WxY=
Subject key identifier: 85:05:55:E0:16:8A:54:ED:11:73:04:54:D7:16:48:AE:A5:AC:A5:D2
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01A041CA8AC05B393D777F90F87AECCC1E0F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/hQVV4BaKVO0RcwRU1xZIrqWspdI.roa
Signing time: Thu 27 Aug 2026 05:56:27 +0000
ROA not before: Thu 27 Aug 2026 05:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204287
IP address blocks: 87.239.248.0/24 maxlen: 24
185.144.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:ca:8a:c0:5b:39:3d:77:7f:90:f8:7a:ec:cc:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Aug 27 05:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=850555e0168a54ed11730454d71648aea5aca5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:c5:8b:96:97:c6:4b:ca:27:ca:73:27:25:
a2:a0:57:f6:fd:8d:4a:c3:ea:0b:3a:51:9a:0d:07:
fc:6c:7c:28:04:61:06:fc:62:d3:45:3d:f5:e8:d0:
18:f4:83:b2:58:03:d7:97:93:69:23:b3:08:80:6d:
dd:08:8d:5d:50:79:63:79:92:e2:27:bd:24:6a:8d:
2c:be:d3:13:27:b8:23:b3:37:d4:00:c5:47:75:49:
6d:02:4b:0c:ea:46:f5:0c:f2:02:fe:df:1a:ea:58:
01:b9:d0:28:97:5c:cc:09:0c:2c:fc:e7:00:b9:74:
f8:30:7a:12:55:1d:8e:d3:0c:6e:fd:7f:a6:ef:ff:
7a:eb:20:ab:2f:42:af:d8:22:6e:64:6f:97:2c:52:
58:14:73:bd:18:a7:3a:d1:12:92:3e:64:30:d9:b2:
25:e9:40:e0:61:cb:8b:97:e8:af:ab:e1:58:82:85:
01:d7:ec:63:85:7a:71:1d:f1:0b:bb:14:76:f4:2d:
a6:ea:54:43:4f:22:be:50:9a:95:18:50:d9:c7:29:
c4:9a:86:c6:2c:71:d8:b7:22:16:c4:78:c3:86:a8:
bf:e0:27:5f:72:fb:71:be:4d:99:2f:90:06:05:93:
3d:d4:24:0e:33:68:6f:25:e1:0d:06:02:42:3a:1c:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:55:E0:16:8A:54:ED:11:73:04:54:D7:16:48:AE:A5:AC:A5:D2
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/hQVV4BaKVO0RcwRU1xZIrqWspdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.248.0/24
185.144.13.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b8:02:6c:5a:44:d7:79:b8:79:cd:2b:1f:82:b3:46:95:60:
a0:d0:a4:d9:99:bb:38:80:38:ed:11:4a:fe:71:b5:57:52:ce:
0e:6d:87:e1:3f:06:14:07:8a:34:2a:40:da:b5:a3:f1:6c:38:
4c:91:46:24:6f:bb:9c:88:fe:ad:5a:77:b6:b8:40:b8:79:0b:
fb:60:56:80:75:97:56:d6:25:0f:9b:9b:76:84:43:92:f8:dd:
d4:ed:ea:18:07:8b:6d:83:56:4a:21:15:1a:e4:9d:23:25:e9:
a8:29:7f:29:65:dd:de:c5:6e:06:81:74:82:fb:45:21:00:fa:
03:4a:f3:80:8d:f7:f4:03:54:46:b4:ba:22:03:19:f9:0e:1d:
eb:2e:f1:05:47:2c:31:60:88:04:b3:2b:1f:bb:66:d8:eb:5f:
2b:af:84:53:6b:96:e6:70:ed:02:69:07:ea:29:74:1f:5d:cd:
c9:98:2c:42:cc:2a:36:7f:20:2b:32:b6:fc:0b:ae:69:11:14:
38:ae:61:c5:62:0f:1a:70:cd:86:4b:a1:72:15:ab:e2:15:66:
b4:c0:14:0a:84:59:f2:02:4e:7b:f8:26:67:8b:18:8e:b3:3b:
24:62:c3:23:c4:59:40:14:2e:16:99:05:b3:78:4c:6d:58:07:
fc:38:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:01 2026 by rpki-client