Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hmoltk0MYPbXW0H7UZ3tHM0bLv0.roa
File: hmoltk0MYPbXW0H7UZ3tHM0bLv0.roa (raw, json)
Hash identifier: Zw31DRIi9+QgHc7szv591s9E9cIjI2f6hrflCKLuE84=
Subject key identifier: 86:6A:25:B6:4D:0C:60:F6:D7:5B:41:FB:51:9D:ED:1C:CD:1B:2E:FD
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0B451FDF19366B6DBBF106620DF77A220
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hmoltk0MYPbXW0H7UZ3tHM0bLv0.roa
Signing time: Fri 18 Sep 2026 11:41:07 +0000
ROA not before: Fri 18 Sep 2026 11:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:51:fd:f1:93:66:b6:db:bf:10:66:20:df:77:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 18 11:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=866a25b64d0c60f6d75b41fb519ded1ccd1b2efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:fd:09:39:e0:a0:63:87:7a:06:12:90:28:
4c:9b:36:51:a7:0e:fa:c6:03:ce:72:f2:d0:cd:58:
e8:f9:d0:23:af:20:f3:01:64:c7:2f:36:1c:5f:85:
67:cb:ac:84:d0:db:37:60:ee:c4:ba:9f:13:3e:c4:
45:38:f1:ec:c4:f6:db:ea:60:c7:5c:e4:88:4b:63:
d1:eb:de:d8:09:c4:5a:b9:64:28:b1:3d:c4:83:45:
f4:da:90:2e:d8:bb:ae:01:d7:68:64:85:e2:86:6a:
25:ae:e6:47:ba:2e:78:14:ec:f4:f6:07:7b:eb:dc:
d1:f9:fd:d4:c7:e6:e1:c3:38:2b:86:43:80:01:c1:
8c:ce:35:74:78:7f:11:24:8a:95:9e:34:87:bf:38:
7b:2c:ad:83:d4:bd:fa:d4:cb:1f:87:f7:cf:1a:3c:
f5:5c:22:36:5e:fd:f8:59:75:b9:a2:35:1c:31:e2:
bf:cd:32:74:59:c6:bf:54:21:0a:ba:7b:f9:3c:91:
4e:0b:d4:f6:b3:ed:31:c9:24:5f:3c:1a:78:42:81:
cf:e9:f4:19:93:b3:6a:5a:6f:88:8a:cd:e9:bd:0f:
2a:06:39:3d:da:14:a8:88:80:85:20:e2:77:73:e2:
31:a6:92:c1:f3:c2:c6:05:77:45:37:fb:12:d7:bb:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:25:B6:4D:0C:60:F6:D7:5B:41:FB:51:9D:ED:1C:CD:1B:2E:FD
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hmoltk0MYPbXW0H7UZ3tHM0bLv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
Signature Algorithm: sha256WithRSAEncryption
25:03:2f:20:6c:fc:79:d0:ac:b1:d9:fe:1d:2e:4a:d3:98:f3:
1e:73:3a:11:8a:88:1b:0d:a7:72:20:ae:3d:9b:ac:b0:59:7c:
10:50:d8:42:e6:ba:89:46:e2:f5:3c:46:bc:4e:f2:68:d7:99:
72:de:e8:db:f8:e8:54:d5:f2:73:9b:e6:e8:86:05:f7:71:71:
27:db:98:fe:1b:96:c4:75:99:e5:31:9c:8c:eb:f6:fc:ad:08:
44:4c:4d:65:a9:3c:3c:dd:e0:1f:2d:66:0d:1c:5f:ba:58:55:
17:d9:cb:b5:4d:b6:99:68:9d:ef:72:8d:37:7a:fe:0b:65:3d:
f7:c9:52:16:af:f5:7f:48:02:87:25:b5:11:1f:70:b9:36:9b:
d6:c4:47:8e:8f:c9:dc:a1:69:18:9d:06:70:d9:f7:de:7f:10:
f7:3b:4f:58:bb:dc:09:72:0b:65:95:55:ff:61:46:2b:1b:ae:
d4:b3:33:fb:c3:2a:57:bb:21:4d:0d:63:6d:24:66:a0:74:1b:
c1:03:67:8a:b4:e2:54:4e:35:fe:14:b3:86:10:e2:20:af:49:
5b:78:0d:b4:62:6c:a0:02:e3:49:91:ad:fa:0c:8b:f9:9f:13:
6c:03:0a:c9:64:74:a2:76:1c:1c:64:2e:b8:6c:d7:45:8b:87:
6f:d0:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:21:36 2026 by rpki-client