Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/HvPOQZKDgwmKWi2B6Okgt-1RwTg.roa
File: HvPOQZKDgwmKWi2B6Okgt-1RwTg.roa (raw, json)
Hash identifier: TsDVgiHQk6MTChOacVguR2X46T4ir2Plfn7OSyPlgeY=
Subject key identifier: 1E:F3:CE:41:92:83:83:09:8A:5A:2D:81:E8:E9:20:B7:ED:51:C1:38
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019C2866C5440CE61A464B98F9C4707989E4
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/HvPOQZKDgwmKWi2B6Okgt-1RwTg.roa
Signing time: Wed 04 Feb 2026 11:25:49 +0000
ROA not before: Wed 04 Feb 2026 11:25:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 188.246.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:66:c5:44:0c:e6:1a:46:4b:98:f9:c4:70:79:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Feb 4 11:25:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ef3ce41928383098a5a2d81e8e920b7ed51c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:71:11:3b:20:3f:56:76:cc:0a:8e:6a:ff:b2:
74:4f:29:87:0c:39:fc:d0:bd:7e:36:26:01:56:3c:
b9:66:e2:c2:f7:21:80:5e:30:2d:65:bb:59:f4:a6:
db:06:8c:b1:83:49:e5:90:89:3d:3d:aa:5c:77:21:
4e:b0:78:27:3a:13:82:b4:b6:d5:87:8f:bf:cc:0e:
3a:f1:a2:f3:be:0b:d4:1f:3a:59:3d:7c:83:cf:87:
25:74:bd:19:d5:9c:35:02:7f:ca:a4:f0:d8:d8:48:
16:03:42:f4:e5:df:74:1e:60:f2:e8:c2:24:1e:09:
4c:a4:6a:38:29:4b:2f:e9:59:37:4a:c0:39:7b:f9:
fc:6b:55:42:f8:fe:71:82:f0:59:8e:c9:a6:18:30:
5a:45:13:b3:f7:9f:28:db:36:30:05:c7:fd:a3:cb:
46:b4:67:2e:40:b0:fc:00:9d:09:5f:93:b3:f5:93:
4d:16:55:0e:fc:97:33:04:3d:79:51:78:28:cd:8d:
af:8b:88:57:98:ab:f3:35:f1:1f:a2:15:e4:18:8b:
4d:7d:91:c4:2e:6b:f5:07:62:32:21:e2:3f:72:fb:
d2:ed:9f:b7:82:7e:13:f3:28:24:2e:5b:46:d7:07:
e1:51:b7:d8:1b:83:c0:2c:16:c5:17:16:a7:bc:5d:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F3:CE:41:92:83:83:09:8A:5A:2D:81:E8:E9:20:B7:ED:51:C1:38
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/HvPOQZKDgwmKWi2B6Okgt-1RwTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.208.0/20
Signature Algorithm: sha256WithRSAEncryption
54:8b:bc:b1:b6:a8:46:92:4b:b7:0c:fa:b9:63:5a:56:34:64:
0f:bf:51:97:61:3c:40:fa:33:02:ef:f7:91:89:27:b9:e0:a6:
8f:92:1c:81:8f:10:6c:c7:1a:4d:b3:ec:f3:e3:12:09:d9:5e:
31:f5:02:d5:c4:70:d9:f1:81:fd:0b:f6:28:3e:ae:4e:c4:b3:
4d:f6:e8:27:48:45:5e:e1:b9:eb:84:fc:ba:18:63:01:50:e8:
78:90:23:3a:83:8d:69:0e:5b:b2:75:13:c0:b3:d1:61:44:be:
f9:3b:f8:7a:12:c0:51:1c:0f:e9:1b:66:f0:de:34:48:22:41:
65:1b:84:7d:19:4b:4a:1d:92:3c:c8:0a:d2:0a:ca:87:b8:56:
07:e3:d9:8a:be:ca:bd:18:64:85:80:45:fa:74:d7:e1:e9:20:
82:4a:87:40:cc:09:b6:9c:2b:66:6d:e8:2c:17:a0:89:c8:86:
24:7e:2c:b2:a6:cd:89:42:e1:fc:34:57:54:54:41:f5:85:61:
a4:03:e9:46:2e:e6:4e:53:a7:6b:f0:62:1c:fe:02:a1:f6:a6:
fa:41:3b:45:8f:f5:e0:e0:a9:06:7e:62:64:8d:cf:49:27:88:
e8:33:9b:13:f5:ae:d5:22:e5:54:71:21:ba:83:95:d6:1b:ef:
04:74:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:57:02 2026 by rpki-client