Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/Hks-5VHAwOrk-BqJuLiyn8kst2E.roa
File: Hks-5VHAwOrk-BqJuLiyn8kst2E.roa (raw, json)
Hash identifier: ethhLTnOCZWZczMv9i9nCEbQ+wRwj4sUBk1rkm1Qu2Q=
Subject key identifier: 1E:4B:3E:E5:51:C0:C0:EA:E4:F8:1A:89:B8:B8:B2:9F:C9:2C:B7:61
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019FF55D9355816F2BCD55DBEEAF2696AE0E
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/Hks-5VHAwOrk-BqJuLiyn8kst2E.roa
Signing time: Wed 12 Aug 2026 09:46:18 +0000
ROA not before: Wed 12 Aug 2026 09:46:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 78.155.64.0/20 maxlen: 20
79.141.224.0/20 maxlen: 20
185.196.144.0/22 maxlen: 22
185.225.40.0/22 maxlen: 22
193.43.140.0/24 maxlen: 24
193.43.145.0/24 maxlen: 24
193.43.149.0/24 maxlen: 24
193.43.159.0/24 maxlen: 24
213.217.32.0/20 maxlen: 20
213.217.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:5d:93:55:81:6f:2b:cd:55:db:ee:af:26:96:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Aug 12 09:46:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e4b3ee551c0c0eae4f81a89b8b8b29fc92cb761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:7a:57:17:fa:89:f8:42:38:3e:b6:03:96:
99:1d:e0:ad:aa:d5:58:7e:c1:d1:14:2f:6d:e9:6b:
c7:6b:f2:b3:7f:b3:74:1c:49:71:33:6a:a9:50:76:
d5:d3:50:7b:5d:13:86:8a:fd:f0:5a:27:04:f3:17:
4d:96:23:42:fe:8c:73:df:79:96:81:56:42:f4:52:
0b:05:96:21:a5:e7:da:fc:86:be:38:85:3b:e3:67:
5d:83:67:97:77:4d:07:f1:b0:8e:46:74:38:ba:20:
eb:9f:fd:53:b3:fb:30:24:15:70:a0:02:12:c7:c4:
79:c7:ac:82:7f:9e:9c:5c:28:35:45:4a:68:6a:b5:
4f:6f:a2:12:63:09:63:ad:99:7c:17:d1:6c:8b:e1:
9c:9d:38:d0:5c:df:c4:1c:33:90:30:f3:34:ac:bd:
48:5a:a3:90:7a:f4:98:34:9c:8a:3b:59:03:9e:77:
1a:d9:ea:66:29:b1:f2:a0:88:3c:3a:f3:29:d8:0a:
f7:48:4b:a1:11:4e:95:5b:e5:9a:94:32:e8:e7:8e:
e7:49:ba:3f:d9:40:87:67:f0:36:54:b8:1f:4d:1e:
31:36:0b:9e:6c:8f:02:48:a5:70:6d:62:e5:a1:53:
85:a9:d4:ff:8a:dd:db:82:f8:4d:fc:eb:33:e3:1f:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4B:3E:E5:51:C0:C0:EA:E4:F8:1A:89:B8:B8:B2:9F:C9:2C:B7:61
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/Hks-5VHAwOrk-BqJuLiyn8kst2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.64.0/20
79.141.224.0/20
185.196.144.0/22
185.225.40.0/22
193.43.140.0/24
193.43.145.0/24
193.43.149.0/24
193.43.159.0/24
213.217.32.0/19
Signature Algorithm: sha256WithRSAEncryption
75:30:08:5a:ff:d8:33:a4:a4:2e:e8:d1:54:b2:dc:9e:79:5e:
e8:81:8e:a0:f4:bf:0b:fc:3f:67:90:b1:15:ee:54:6b:2d:5f:
12:8b:0b:39:9c:d6:75:27:f5:7b:73:97:e4:04:84:1f:0f:bd:
58:a5:57:73:d2:a1:f1:23:56:a3:60:99:b4:76:0e:c4:30:5e:
d7:0f:25:34:af:ef:dd:91:dc:8b:1e:f2:4d:f7:f4:ae:59:83:
9f:bd:87:7f:75:b7:80:a2:53:51:b9:5f:2f:0c:56:96:12:7a:
ed:94:b6:43:e6:87:a6:04:75:b4:ff:58:32:c0:95:7e:4d:42:
f7:14:31:72:42:47:0b:7f:42:6c:df:62:0a:c6:6f:61:1e:4b:
ec:a6:fb:a0:9f:bf:0c:7b:8b:64:21:8d:47:11:2e:07:a9:5a:
23:6b:e5:2e:15:8b:f7:50:29:42:58:f7:bc:3b:a6:34:22:2e:
ef:cc:2a:8f:4c:86:15:17:05:10:4b:55:15:8f:33:99:fe:da:
57:88:e0:77:08:c4:d1:e0:f5:ed:9e:26:f4:a8:f7:2f:5a:3b:
37:7e:d7:88:64:57:cb:83:b3:bb:b1:f8:17:ae:18:64:30:95:
c6:d9:79:4c:b2:27:0a:7b:90:74:8b:2b:2e:f4:ea:47:b6:fc:
08:f7:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:44 2026 by rpki-client