Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa
File: aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa (raw, json)
Hash identifier: ogzaNg6aZ7diJ0sN2cYk/78mRgYs+1QRi/kMrxIJaB8=
Subject key identifier: 68:73:99:1E:85:4D:E5:01:67:04:10:D2:EA:BA:4B:37:77:62:5E:14
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01A05F4E94A1947599EB65A71046B5063A0F
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa
Signing time: Tue 01 Sep 2026 23:29:40 +0000
ROA not before: Tue 01 Sep 2026 23:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.106.0/24 maxlen: 24
146.247.112.0/23 maxlen: 23
146.247.114.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:4e:94:a1:94:75:99:eb:65:a7:10:46:b5:06:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 1 23:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6873991e854de501670410d2eaba4b3777625e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:0b:8e:12:79:00:24:d2:2a:eb:fb:14:98:
de:60:39:83:f1:ee:1d:9f:45:0a:6e:cd:25:80:1c:
66:71:69:58:91:b8:51:f0:9d:b2:80:d3:20:a7:98:
7f:10:b3:64:68:ae:cd:55:58:65:4d:b8:c8:a6:a5:
96:c5:81:35:9e:ca:7b:cd:f5:5e:c2:12:4e:ce:d2:
ca:17:c3:61:ed:d0:65:88:c0:c8:a8:58:aa:6c:39:
47:3a:78:ba:13:3d:49:23:af:3b:70:f3:ec:e1:66:
48:33:c8:80:25:55:b6:74:b4:cf:e9:1d:c5:ff:14:
7e:f4:5e:37:2e:d1:13:4d:11:92:f2:8a:ce:a4:42:
1d:9e:0d:bb:7f:85:40:d6:fa:71:f9:8a:26:15:ec:
2e:f2:82:0a:f0:b8:06:c3:a7:d8:12:62:2e:9f:49:
3e:88:84:ec:70:c2:01:39:61:ca:84:fd:aa:bc:81:
f9:37:21:27:52:8f:2b:85:12:0d:96:3d:8c:91:de:
14:94:a2:5f:07:7a:ef:cf:5d:cd:c4:7a:67:1a:bc:
28:a8:13:fb:5c:88:ce:15:02:3c:22:7b:2c:56:13:
a6:f5:88:01:09:30:c8:bf:03:08:05:21:7a:40:22:
bc:70:56:28:08:e0:43:44:0b:d5:ea:af:8a:45:e8:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:99:1E:85:4D:E5:01:67:04:10:D2:EA:BA:4B:37:77:62:5E:14
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0/24
146.247.112.0-146.247.114.255
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0f:48:1f:4e:8f:96:d8:54:8d:89:6a:38:a0:81:b3:55:db:
9b:95:04:b6:28:d2:da:99:38:4a:78:c9:fd:b0:11:a1:10:ef:
2a:ee:22:b0:9b:8e:a6:9b:2d:92:ba:56:98:08:38:07:b0:01:
6d:83:d4:80:ea:f3:eb:7b:49:ca:a1:97:89:88:88:02:95:f2:
a1:6a:95:8a:0a:47:88:2f:99:f4:71:ea:72:67:60:b9:25:5d:
e2:cd:26:d1:e5:0f:6c:15:e9:3b:07:9a:50:cb:22:37:04:f9:
ae:b6:67:28:67:d7:7a:4f:ba:4a:f4:ea:7d:bd:75:0f:8b:3c:
da:28:e9:fe:d0:8a:79:b0:81:29:bb:41:0d:49:40:71:93:87:
ce:e7:e6:07:69:0b:1d:7c:ad:04:bd:6c:27:3b:e9:2a:6d:54:
c3:e2:bc:39:c7:4c:f1:1a:87:1f:19:7a:47:87:46:a8:15:b3:
1a:22:1b:f5:6d:18:5f:1b:53:2f:ec:16:a0:71:7c:12:d4:c4:
1e:8d:91:3d:33:fb:c3:43:9c:ba:3f:a2:46:c7:eb:d7:8e:30:
21:44:88:33:b0:0f:7d:f1:84:11:c2:da:bd:e1:76:da:11:b8:
39:72:95:ba:c1:7d:a7:5b:72:ba:ae:dd:a9:bb:36:e8:07:59:
2b:0e:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:47 2026 by rpki-client