Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/hjSkcT4dUsQlkcGR3OpdzIdJHb4.roa
File: hjSkcT4dUsQlkcGR3OpdzIdJHb4.roa (raw, json)
Hash identifier: Fb23YmsCtrnbbYbPw2ty48vk03FuV8GOgY8t/uDWTmc=
Subject key identifier: 86:34:A4:71:3E:1D:52:C4:25:91:C1:91:DC:EA:5D:CC:87:49:1D:BE
Certificate issuer: /CN=0deb6343715dca6eeead71d428c89b3b3809cd47
Certificate serial: 019F2368F2191AC8AD1E70486E1383C4393D
Authority key identifier: 0D:EB:63:43:71:5D:CA:6E:EE:AD:71:D4:28:C8:9B:3B:38:09:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/hjSkcT4dUsQlkcGR3OpdzIdJHb4.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.169.80.0/24 maxlen: 24
185.169.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:19:1a:c8:ad:1e:70:48:6e:13:83:c4:39:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0deb6343715dca6eeead71d428c89b3b3809cd47
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8634a4713e1d52c42591c191dcea5dcc87491dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:39:ff:1d:f5:b5:d2:14:68:86:d9:d1:26:
ff:e2:44:37:c6:93:e5:c6:bd:06:f2:21:7b:91:a1:
4e:ab:57:76:96:15:61:b7:d8:cc:22:49:1c:4e:5d:
82:8e:f1:24:b4:5f:b6:3b:1f:91:e7:c8:64:e7:e2:
15:1b:75:e5:e3:09:f8:54:7e:bd:7a:d4:94:55:31:
b0:ea:3f:c1:34:37:0e:98:fe:8e:ef:05:16:97:d6:
48:ec:ed:d7:64:a4:20:77:97:c9:54:f2:da:28:d3:
dc:d1:42:ed:04:47:c4:61:eb:b1:37:ba:6a:f7:b4:
33:c6:f7:20:40:4e:3f:11:e7:c8:9d:1a:68:98:0f:
2d:1e:a7:74:9d:28:4e:e9:9c:d4:b3:31:f8:c5:0b:
0f:90:4c:28:45:28:c4:fb:81:f8:7d:60:1e:be:87:
73:6a:e8:c8:09:d9:7b:a7:15:d9:9b:d7:9e:81:84:
44:65:f0:2c:58:71:d4:2c:27:ed:e8:91:40:19:96:
20:d2:24:e7:41:38:bf:aa:5f:49:26:46:23:12:91:
51:da:25:a8:13:69:1a:1e:60:2a:33:1c:d5:81:be:
e7:9c:b3:9f:12:7e:b1:94:f9:b2:2d:1d:37:08:84:
7c:53:2d:db:c2:2b:46:3f:04:54:3c:b5:2d:f7:8b:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:A4:71:3E:1D:52:C4:25:91:C1:91:DC:EA:5D:CC:87:49:1D:BE
X509v3 Authority Key Identifier:
keyid:0D:EB:63:43:71:5D:CA:6E:EE:AD:71:D4:28:C8:9B:3B:38:09:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/hjSkcT4dUsQlkcGR3OpdzIdJHb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.80.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:aa:2f:7a:dd:7f:6b:64:84:fe:b1:10:38:c8:27:6a:81:8e:
07:e5:a7:e5:0c:23:21:0d:dc:82:8a:15:a9:e5:22:3e:0a:8c:
74:7a:5a:da:95:a2:19:b7:8a:a5:e8:77:c8:dc:13:c4:b9:30:
fb:8a:99:f4:f3:00:01:cd:27:98:23:db:08:7a:48:94:3b:d2:
3e:86:c8:47:9a:ff:ee:91:c1:6c:1c:bc:54:f7:bc:19:ba:86:
b5:79:26:be:21:15:d4:c0:1b:6a:8a:09:0f:26:e7:6f:03:1c:
17:d3:34:fd:4e:84:62:aa:36:a3:53:ab:14:72:a8:57:25:91:
d1:d9:40:3c:f9:c6:3f:d8:14:89:a5:31:a6:38:dc:bf:d7:95:
a3:8c:d0:4a:92:88:58:f7:7a:54:c9:59:0b:94:bf:12:1c:62:
c0:5b:3a:a2:64:b2:b4:3e:97:d0:76:20:7c:6e:f8:65:4a:6b:
31:d3:96:ef:73:42:2c:62:7f:28:7b:a2:22:68:9b:e3:c7:51:
de:4f:04:19:93:74:b9:ba:aa:d0:45:f2:15:55:8d:d4:3e:06:
9a:15:92:eb:de:5e:85:d9:25:2d:00:59:f6:fd:ef:0d:e3:78:
f0:a1:81:82:34:a0:fc:f0:27:09:25:bc:72:62:8b:96:08:f5:
f4:52:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:29 2026 by rpki-client