Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/hLMrHZeDr1exS-w5Q__NBh2TEMw.roa
File: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (raw, json)
Hash identifier: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=
Subject key identifier: 84:B3:2B:1D:97:83:AF:57:B1:4B:EC:39:43:FF:CD:06:1D:93:10:CC
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 019F236889CE8C553486B035FA87639D1286
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/hLMrHZeDr1exS-w5Q__NBh2TEMw.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 213.109.176.0/24 maxlen: 24
213.109.177.0/24 maxlen: 24
213.109.178.0/24 maxlen: 24
213.109.179.0/24 maxlen: 24
2a00:de61::/40 maxlen: 48
2a00:de61:100::/40 maxlen: 48
2a00:de61:200::/40 maxlen: 48
2a00:de61:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:89:ce:8c:55:34:86:b0:35:fa:87:63:9d:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84b32b1d9783af57b14bec3943ffcd061d9310cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:88:ae:6f:79:5e:9f:cc:6b:9f:90:99:65:
4f:09:61:cb:6b:44:8e:52:55:55:7a:e3:fa:85:5b:
ae:96:88:40:40:14:72:ff:bd:bf:70:d0:b9:1f:88:
4b:e6:d6:02:55:c9:46:65:25:12:48:8b:4a:69:b1:
d2:76:19:fd:be:6e:de:88:4a:9b:e3:aa:95:35:a5:
4a:92:e3:64:d9:d7:43:e3:99:64:91:3e:d7:a3:b1:
0a:e7:6e:fd:1e:86:c7:40:ba:9f:b9:e1:53:2b:a5:
c3:e1:45:ef:10:91:27:cd:21:fe:f2:8b:d3:d8:45:
5c:b6:d1:a5:31:1c:1e:2d:e5:77:9e:17:6a:8f:9f:
cc:5d:cf:64:7d:da:81:db:ff:75:af:e6:e5:67:dc:
6c:5e:9d:05:43:4e:43:1e:e1:28:ad:35:f9:96:d8:
12:4e:a3:e8:67:61:3c:c1:e4:0e:22:a4:e7:13:a0:
f9:73:2f:17:c1:79:9e:bd:3c:6b:c4:58:0e:0f:02:
71:e1:6b:d2:ba:31:7a:95:ea:90:73:33:1a:a7:84:
96:0e:ee:fd:29:72:15:9a:6e:8d:f2:f7:6f:4e:1f:
a4:a4:2f:05:8e:52:aa:be:f7:e2:c8:ba:03:93:b9:
79:2f:c5:bd:8a:cf:cd:71:73:b4:fb:62:95:e4:f0:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:2B:1D:97:83:AF:57:B1:4B:EC:39:43:FF:CD:06:1D:93:10:CC
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/hLMrHZeDr1exS-w5Q__NBh2TEMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.176.0/22
IPv6:
2a00:de61::/38
Signature Algorithm: sha256WithRSAEncryption
96:57:dd:38:dd:3a:b9:e0:3e:a6:58:7e:b4:83:5a:d6:3a:db:
b5:b3:67:29:37:38:47:aa:45:3c:a5:59:ce:97:c4:3a:03:cc:
df:8d:2a:d1:14:ad:9f:89:81:cf:66:d0:01:2e:00:4f:05:82:
1b:0c:10:8a:75:ac:89:f1:ec:1f:76:0b:2b:b2:5c:dd:37:f9:
42:30:12:c7:99:78:2b:50:77:d3:aa:1d:fe:02:d3:e5:2d:9b:
84:1e:af:f3:f9:a4:d8:ab:87:c8:b9:73:0e:61:34:af:a4:68:
0c:09:d1:f1:d7:e2:c6:bc:43:f9:6c:61:55:78:af:a2:ab:0b:
f7:bf:1e:f7:93:3d:34:61:5c:53:91:9c:e8:04:04:d1:0e:95:
dc:48:df:32:f2:87:0f:6c:0b:44:56:eb:5c:18:38:64:ff:e3:
8a:eb:47:ca:0d:14:e9:a4:32:8f:96:88:c4:43:69:4a:66:b1:
44:06:37:10:98:54:95:9e:20:6d:e9:59:87:b9:c8:73:56:56:
20:57:56:f1:7c:5b:95:50:87:4f:2c:f4:f6:44:df:24:5e:d0:
57:7a:2e:15:3b:88:eb:dc:f6:7f:dd:b5:fc:1e:6d:53:60:3f:
92:96:51:f9:52:31:7d:88:09:2a:fb:72:7a:08:1e:48:8f:7a:
58:a5:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:50 2026 by rpki-client