Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HNm-xfb3iqJlSduVzEHOuAjtyNo.roa
File: HNm-xfb3iqJlSduVzEHOuAjtyNo.roa (raw, json)
Hash identifier: DPPbkCAjWhKkvIn+TTqTOR0wrSg3eX3W/Ok8Lb0pakI=
Subject key identifier: 1C:D9:BE:C5:F6:F7:8A:A2:65:49:DB:95:CC:41:CE:B8:08:ED:C8:DA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A03A48DB8CFDE5E41B6720BB234E22405D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HNm-xfb3iqJlSduVzEHOuAjtyNo.roa
Signing time: Tue 25 Aug 2026 18:57:28 +0000
ROA not before: Tue 25 Aug 2026 18:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 77.67.88.0/24 maxlen: 24
212.189.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:48:db:8c:fd:e5:e4:1b:67:20:bb:23:4e:22:40:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 25 18:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cd9bec5f6f78aa26549db95cc41ceb808edc8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:f9:95:39:a4:12:84:7e:77:80:ef:b8:16:
f4:89:f7:55:77:49:5d:ad:50:91:4e:75:32:9c:3e:
55:3d:2a:50:98:ef:0c:3f:d9:54:06:89:2b:0e:87:
16:3a:1b:dd:7d:fc:62:70:7b:df:a9:b6:08:9f:fe:
0d:39:73:f8:89:a5:5e:9c:9d:36:9d:a7:48:28:cd:
7e:e9:1a:79:6f:6f:af:b6:16:1b:39:34:c9:aa:d2:
63:51:6b:8f:88:66:7c:54:1f:19:d6:29:a4:13:da:
72:80:74:93:a6:59:25:5f:cd:6d:c5:d5:fb:c3:35:
96:84:4a:9d:4f:b3:dd:cf:e9:f6:9b:8c:63:33:bf:
38:7a:9f:2a:79:23:d2:e6:25:41:41:0b:4c:13:36:
ad:da:8f:1f:79:2f:b4:f1:95:44:3e:9a:6a:58:1e:
79:3f:01:bd:51:af:8a:fc:64:cd:f5:15:85:c0:c1:
79:7e:6c:72:1f:1e:25:0d:c4:6c:8c:69:0b:f8:07:
6d:b2:21:c5:bd:51:dd:44:82:c8:8e:6e:c7:a1:d5:
ba:70:c0:4d:15:7a:fc:7b:b5:bf:a4:3c:1f:e6:12:
bb:2c:3d:28:e4:bf:03:57:00:5c:27:2d:3b:9e:c9:
c8:30:db:db:ca:93:c9:56:da:be:ac:e2:d3:fa:77:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:BE:C5:F6:F7:8A:A2:65:49:DB:95:CC:41:CE:B8:08:ED:C8:DA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HNm-xfb3iqJlSduVzEHOuAjtyNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.88.0/24
212.189.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f2:32:06:57:d5:21:9d:3c:62:fc:af:8e:f2:f1:f7:40:d1:
df:6d:f0:28:e6:d3:4c:68:35:a0:9b:4d:9e:c8:e5:e5:1c:37:
e1:c2:fd:2a:6e:78:18:a4:c5:a7:31:92:92:59:2c:92:28:39:
d6:ff:48:80:06:ef:39:7d:f3:e4:38:09:39:a4:7e:4e:27:10:
f8:15:da:74:7a:ee:b1:db:33:30:33:49:f7:26:e8:4e:85:ad:
a1:b9:df:98:31:71:18:0e:05:6f:80:37:fa:84:75:8d:34:60:
b5:1a:87:01:34:27:73:4f:10:6f:b3:3f:a4:d9:62:e7:a6:f4:
7f:ab:f3:be:9f:58:d8:09:d1:2b:da:fa:0e:c5:a4:86:ab:e9:
30:aa:c6:f2:29:09:ca:31:9c:2a:82:b8:a9:61:4f:fb:8a:a0:
c8:38:b1:54:f1:90:1c:4c:07:61:88:3f:50:8d:f4:bf:52:56:
a4:aa:c0:f0:b3:3f:d0:72:ce:76:82:d3:aa:88:04:15:f5:5b:
38:b1:a4:08:67:5d:5c:27:17:ff:e2:f5:33:90:ca:17:b0:1b:
03:d6:db:ca:a8:5a:a5:c0:15:de:04:df:6a:10:e9:6c:5e:ad:
96:06:c0:6f:76:e3:40:98:fb:bd:43:29:7b:70:ff:99:50:76:
1a:b7:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:44 2026 by rpki-client