Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/hmpZvaBGorcwo_ralAJScd3sWh8.roa
File: hmpZvaBGorcwo_ralAJScd3sWh8.roa (raw, json)
Hash identifier: lO3WbcBjBpqfFUJQMuuBp8iE0hr0b0CpOm1IZoQZmOA=
Subject key identifier: 86:6A:59:BD:A0:46:A2:B7:30:A3:FA:DA:94:02:52:71:DD:EC:5A:1F
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F1F775B6C82FCDF4DECBB4F6DA0210716
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/hmpZvaBGorcwo_ralAJScd3sWh8.roa
Signing time: Wed 01 Jul 2026 20:55:43 +0000
ROA not before: Wed 01 Jul 2026 20:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219365
IP address blocks: 2a09:3f05:10::/48 maxlen: 48
2a09:3f05:11::/48 maxlen: 48
2a09:3f05:12::/48 maxlen: 48
2a09:3f05:13::/48 maxlen: 48
2a09:3f05:14::/48 maxlen: 48
2a09:3f05:15::/48 maxlen: 48
2a09:3f05:16::/48 maxlen: 48
2a09:3f05:17::/48 maxlen: 48
2a09:3f05:18::/48 maxlen: 48
2a09:3f05:19::/48 maxlen: 48
2a09:3f05:1a::/48 maxlen: 48
2a09:3f05:1b::/48 maxlen: 48
2a09:3f05:1c::/48 maxlen: 48
2a09:3f05:1d::/48 maxlen: 48
2a09:3f05:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:77:5b:6c:82:fc:df:4d:ec:bb:4f:6d:a0:21:07:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 1 20:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=866a59bda046a2b730a3fada94025271ddec5a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:73:31:5a:4f:54:87:45:cc:66:d0:3f:97:
e0:b2:8a:fc:1b:c8:18:3c:73:47:3f:90:3d:fa:12:
ff:c6:51:3d:1a:31:b6:7d:f9:d2:4e:cb:2e:d4:c0:
29:c3:b0:df:c6:19:0d:b8:2d:92:62:16:0b:28:e1:
15:c7:05:a0:26:4b:ac:47:0b:d1:2b:bc:59:fa:f2:
55:87:6c:b2:9c:f8:14:9d:af:a7:2c:1f:12:af:c9:
04:14:d4:3c:0f:1b:60:34:60:16:e3:bc:ba:6d:28:
3a:3c:d4:2c:04:e3:a0:6a:e3:7a:f8:4b:74:4c:cf:
a2:73:99:6b:d0:15:8b:7c:70:e8:79:3f:d8:82:12:
cb:d3:a0:d2:61:b9:b5:e4:75:f9:89:87:20:49:13:
5f:43:5f:59:85:8f:13:40:7b:55:8a:94:9b:4a:61:
6b:60:12:07:e4:23:d6:4f:0e:cf:14:50:a5:36:7b:
48:d7:a8:db:c0:2d:30:9c:55:77:67:d6:76:cc:f0:
f4:8f:95:2f:05:f3:04:67:7a:00:1b:f4:1d:ee:7a:
9c:0b:b6:4c:80:84:67:a5:de:bd:eb:f6:6c:5b:4a:
07:77:45:de:93:3b:ba:1e:26:0b:94:b2:f4:7d:41:
9b:7e:09:32:ff:cf:22:f5:76:7e:e8:78:79:1b:78:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:59:BD:A0:46:A2:B7:30:A3:FA:DA:94:02:52:71:DD:EC:5A:1F
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/hmpZvaBGorcwo_ralAJScd3sWh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f05:10::-2a09:3f05:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:76:2f:44:d1:48:1d:96:75:3a:36:5c:d4:11:7a:70:6f:3a:
a5:76:3b:fc:59:b8:f5:3c:d1:85:12:7e:c5:85:2d:6b:8a:c3:
dc:b0:aa:e9:ee:e4:ea:fe:27:c2:4e:cc:88:05:0e:a6:83:b1:
ff:96:35:46:2a:d8:2d:e0:b3:db:85:d7:19:6a:e8:0f:90:f1:
22:65:07:fe:d3:f6:e1:4d:93:a9:74:7f:e0:ff:ef:44:60:ad:
91:43:bc:64:18:af:5f:b5:c0:7d:3a:71:0f:16:16:08:2b:e0:
c4:5d:88:b1:6b:43:e0:a8:54:a2:97:e0:b0:3a:23:d6:43:4d:
79:15:69:52:c2:ff:0d:f7:8d:58:a7:65:dd:78:cc:3b:55:ef:
2a:f6:b8:31:f5:46:36:49:9d:12:c4:f8:9b:df:d8:2e:84:97:
a4:54:b7:ec:e5:32:4e:68:dd:a5:d8:7a:2c:c8:6e:54:63:f6:
f0:8b:29:c2:21:68:7f:03:b5:b1:89:eb:29:1c:af:aa:16:1d:
a1:eb:79:8b:17:be:74:15:46:a9:5c:9a:a3:8a:55:0c:bc:45:
11:60:be:cc:8c:dd:12:f8:e9:48:ab:19:4a:6b:1b:6d:45:ee:
eb:05:03:57:0a:f0:00:10:58:cc:7f:97:0b:d5:a6:9a:18:e2:
ad:bb:e4:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:20 2026 by rpki-client