Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/HpmsS2IoVoKo1sKZA8m6RqJao8c.roa
File: HpmsS2IoVoKo1sKZA8m6RqJao8c.roa (raw, json)
Hash identifier: PNCMPsFSRy0WyHgVig6VCDB6V+KoLZKiFB8wYjakgKc=
Subject key identifier: 1E:99:AC:4B:62:28:56:82:A8:D6:C2:99:03:C9:BA:46:A2:5A:A3:C7
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F9468A8E3F932ED1870AE3814495172E2
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/HpmsS2IoVoKo1sKZA8m6RqJao8c.roa
Signing time: Fri 24 Jul 2026 13:55:14 +0000
ROA not before: Fri 24 Jul 2026 13:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.66.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:68:a8:e3:f9:32:ed:18:70:ae:38:14:49:51:72:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 24 13:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e99ac4b62285682a8d6c29903c9ba46a25aa3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:ba:ee:77:8c:b9:b4:ca:1b:d5:31:61:73:
45:06:14:b9:c4:b5:fe:44:c8:b9:a4:87:f9:c7:a6:
1c:d1:89:56:00:85:67:c5:3f:0d:98:6f:51:2d:11:
e8:11:2b:b3:55:d2:57:0a:21:3f:7f:41:c5:ee:41:
ef:57:1c:de:9e:02:e4:83:b4:da:cd:9b:8d:2e:8c:
f7:39:46:b6:80:01:4b:41:8d:a6:98:3a:cd:c3:ab:
19:b3:7e:94:b2:f8:0f:05:f9:19:f1:87:e4:ca:60:
c0:56:70:c2:c4:ab:3b:07:fc:f6:f3:3e:8c:e8:dc:
df:72:1b:91:d3:c9:49:20:24:e6:e7:1b:65:12:cf:
45:5b:61:1b:86:b7:e7:bf:de:a7:6c:54:5b:9a:85:
6b:cf:fd:e4:dc:a3:59:30:a0:ee:c9:7d:47:59:45:
94:0f:ff:0d:94:05:d9:73:e0:3b:52:53:43:cc:90:
9e:20:30:52:d8:83:e1:e8:80:af:89:f4:2b:21:b4:
32:ac:21:ca:2b:12:bb:82:83:2f:6a:cc:3d:9a:a9:
73:b1:bd:3e:3e:e1:b8:3d:e8:34:18:67:c8:ba:79:
73:75:d9:78:b9:bd:ba:fb:ff:48:c9:9c:2f:d7:0a:
c4:32:65:1b:a5:94:4e:a0:f3:30:29:0b:2a:d5:21:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:AC:4B:62:28:56:82:A8:D6:C2:99:03:C9:BA:46:A2:5A:A3:C7
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/HpmsS2IoVoKo1sKZA8m6RqJao8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.18.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1c:17:0a:a3:7d:58:0b:43:56:7c:41:1b:aa:2f:02:c5:f8:
3a:4e:ff:48:1f:fa:17:5e:6c:84:f5:7e:58:a0:91:4e:8d:a9:
14:cc:84:51:c2:6d:70:ec:62:eb:f9:0b:45:7b:bc:6a:c2:48:
7b:c2:0f:0f:be:37:5d:1d:1a:db:a5:8a:e8:bb:2e:a0:c2:e2:
5d:47:4e:9b:b0:1f:9d:ca:c6:1f:01:1e:5e:4c:d2:bf:fb:b5:
16:55:39:59:6d:5e:2d:49:bc:94:45:49:c3:d4:ef:a2:45:5d:
36:00:6b:43:b5:18:72:a2:e2:75:fe:87:4a:95:3f:54:7a:4a:
97:8c:4b:d2:e8:f9:c6:11:4b:5d:55:5c:2b:af:e6:9f:b0:0b:
d1:cb:2e:dc:7c:19:7b:c6:a6:f9:92:99:32:4a:cf:a5:fa:58:
41:c4:a5:1d:aa:29:07:cb:28:b7:ab:16:73:ba:33:ab:30:b2:
a5:b2:6c:e9:c9:0e:f7:ee:c4:64:94:50:cc:e8:0b:df:f6:f3:
69:fa:7f:fd:18:ea:7b:f2:e3:20:7b:57:ce:45:40:59:e9:f2:
a0:f1:45:66:9a:7b:23:28:f2:d1:13:6f:d4:82:6f:41:25:01:
32:2a:5a:db:3b:a4:4c:05:bd:04:2c:18:91:c4:c4:b9:f9:0c:
f7:81:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:39 2026 by rpki-client