Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/hcA2sybzN1Ofj8kjdHY3enQPW4k.roa
File: hcA2sybzN1Ofj8kjdHY3enQPW4k.roa (raw, json)
Hash identifier: rk0UL1nQQuTNj/9/qA18tEhUOk3ka6xo77V2/KmRLF0=
Subject key identifier: 85:C0:36:B3:26:F3:37:53:9F:8F:C9:23:74:76:37:7A:74:0F:5B:89
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 01A11B3B06CE5DEC3B7B1088F4BE812C59AC
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/hcA2sybzN1Ofj8kjdHY3enQPW4k.roa
Signing time: Thu 08 Oct 2026 11:16:55 +0000
ROA not before: Thu 08 Oct 2026 11:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60476
IP address blocks: 185.30.176.0/22 maxlen: 22
185.205.76.0/22 maxlen: 22
2a14:25c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:3b:06:ce:5d:ec:3b:7b:10:88:f4:be:81:2c:59:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Oct 8 11:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85c036b326f337539f8fc9237476377a740f5b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:77:a4:16:0d:2b:48:3e:3b:1a:74:b6:ca:
36:e9:80:05:93:68:97:f7:1c:5c:c3:60:19:18:7a:
84:57:bc:49:00:a4:dc:5b:2d:50:f1:a7:fe:f1:f6:
53:c0:a9:5f:49:ca:46:3d:2c:f8:9f:3f:8a:ec:7d:
d9:fe:0c:75:12:ec:6b:89:2b:98:62:35:6b:45:7e:
8d:d5:91:ce:fe:1d:59:49:1b:56:27:f4:ee:bd:2e:
97:68:a4:49:b1:8b:ce:ff:f9:39:35:9c:cc:49:f0:
13:8d:cf:21:40:a8:a7:d6:38:8f:2d:77:91:7a:8a:
f0:97:72:91:a9:fb:c3:62:d3:c3:00:5a:9f:62:c1:
78:45:51:cc:59:98:23:cd:ae:05:60:0c:be:fd:af:
78:07:a9:d2:b9:3d:cc:c9:cd:9e:c2:b5:9a:b8:1d:
09:e9:31:ee:45:e7:26:b2:ca:fe:70:0e:d3:29:94:
16:68:ee:7b:8d:c9:c2:c9:26:43:8a:a9:49:d1:18:
72:30:3f:b1:9e:27:8e:e4:7c:22:6b:a2:e3:31:2c:
42:1d:b2:4e:ee:49:27:51:a8:b5:4d:7f:15:6d:d6:
ce:ef:b5:02:e2:d2:0e:b4:3c:41:32:a1:b9:e7:74:
b2:9d:54:5b:33:e0:ad:d6:71:9f:d8:1d:ea:57:f6:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:36:B3:26:F3:37:53:9F:8F:C9:23:74:76:37:7A:74:0F:5B:89
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/hcA2sybzN1Ofj8kjdHY3enQPW4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.176.0/22
185.205.76.0/22
IPv6:
2a14:25c1::/32
Signature Algorithm: sha256WithRSAEncryption
3e:2a:ac:38:67:25:c6:84:07:eb:28:17:46:f6:56:89:ce:70:
d7:66:a0:53:31:2e:2a:2d:a0:e2:21:5c:60:24:5a:c4:ff:08:
ca:67:45:db:9a:47:02:2d:f5:fb:f2:56:87:1a:b6:03:ab:3f:
4d:fe:4a:f3:30:25:07:0d:7a:29:28:02:d0:d0:6e:66:19:0b:
9b:75:bb:10:47:65:bc:fe:4c:67:c8:dc:0d:9c:51:f4:a6:d5:
30:9a:75:f2:87:45:49:eb:a6:0f:64:29:13:1b:e9:8c:55:fb:
9f:42:07:d8:ee:f1:04:d4:f2:a2:f7:e1:e8:be:75:71:35:f2:
29:15:4f:90:8f:47:51:0b:3d:28:fb:6f:46:71:75:44:45:c2:
3b:aa:d0:d2:0d:36:70:cb:70:86:da:ab:35:f1:29:4a:67:ce:
cf:3c:e6:39:ae:7e:7d:00:1f:16:d8:00:9b:9a:7d:06:ea:69:
58:50:00:89:6b:56:8e:ea:7f:49:a8:b2:fc:0f:1e:77:d6:a0:
54:56:0c:3f:1a:e5:0b:33:32:d9:d6:e7:e7:2d:fb:52:0e:ee:
27:7c:c0:62:7e:27:a9:ab:88:d5:03:2c:7c:04:54:98:64:30:
f0:06:3e:6a:33:c3:a9:b1:ab:58:46:aa:f0:22:70:53:83:8b:
a2:de:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:13 2026 by rpki-client