Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/hYM7beFU-i68zuT-E-AP85h8fdI.roa
File: hYM7beFU-i68zuT-E-AP85h8fdI.roa (raw, json)
Hash identifier: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=
Subject key identifier: 85:83:3B:6D:E1:54:FA:2E:BC:CE:E4:FE:13:E0:0F:F3:98:7C:7D:D2
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019F4AFB7E6AEE614F56F268624DE84C33BB
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/hYM7beFU-i68zuT-E-AP85h8fdI.roa
Signing time: Fri 10 Jul 2026 07:43:43 +0000
ROA not before: Fri 10 Jul 2026 07:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219238
IP address blocks: 141.0.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:fb:7e:6a:ee:61:4f:56:f2:68:62:4d:e8:4c:33:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Jul 10 07:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85833b6de154fa2ebccee4fe13e00ff3987c7dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:76:a5:b9:a9:57:e7:5c:95:51:98:8d:43:
eb:d5:c3:61:47:e7:00:d1:14:25:cd:d2:cd:94:9d:
36:a0:4b:5a:3f:2f:a9:1f:7e:97:4c:17:11:db:e2:
2c:6e:2b:9c:6c:bd:4a:13:0f:66:0e:03:5d:d7:f2:
47:f3:44:16:fc:99:d2:a2:cf:58:4d:3b:63:38:c1:
18:ba:08:b1:36:e5:73:df:71:0b:94:fd:fe:d0:30:
29:ff:97:d4:78:0e:9b:8d:35:50:a8:22:2a:dc:59:
48:62:6a:19:bc:c4:07:8d:f0:5a:9e:75:2c:7b:40:
09:55:bd:07:6c:25:c7:31:aa:f9:8c:1a:82:8a:ad:
e9:3c:51:26:13:4d:70:11:fc:9d:3e:33:e2:d3:7f:
ba:5c:df:40:35:5e:be:99:f9:75:02:a2:67:9e:23:
23:8b:3a:11:13:13:1f:a3:4a:16:e4:2e:55:60:64:
59:f3:af:ec:b0:fa:45:31:fb:f1:f0:31:60:8e:61:
1d:68:9f:4f:b1:c0:13:75:75:92:aa:7c:2e:06:4e:
3d:7e:2e:98:a8:34:36:98:49:7a:e2:45:6a:4a:1e:
a8:64:b1:96:89:bf:2f:ab:6a:1c:5e:ef:a6:20:56:
8c:41:b6:bf:b2:e0:53:30:31:17:a2:83:4f:ac:44:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:3B:6D:E1:54:FA:2E:BC:CE:E4:FE:13:E0:0F:F3:98:7C:7D:D2
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/hYM7beFU-i68zuT-E-AP85h8fdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8b:3f:10:02:e1:38:07:08:98:e6:45:be:96:3a:b6:3e:aa:
30:76:ae:eb:40:03:48:70:51:74:26:41:f9:04:70:a5:1f:6b:
3a:b0:97:1c:c7:61:8a:67:f8:de:4f:88:41:2b:70:40:ea:0d:
7c:a3:0d:f0:cb:9d:6f:c6:bd:a9:ed:b8:65:3c:86:0e:57:8e:
30:29:68:b1:14:e9:46:78:be:c7:e4:c9:55:f6:ac:7b:93:4e:
46:14:53:34:dd:35:e9:1b:54:8b:9e:d8:0e:34:72:cf:12:cc:
3b:b5:3c:87:69:ce:4e:2b:a8:68:a4:fa:86:90:7c:15:31:de:
c1:68:56:7a:4e:0e:a5:d0:75:41:17:7e:2d:ab:62:24:b5:04:
8e:72:02:67:ef:58:ea:25:d0:00:f2:eb:d8:2d:ec:0b:f2:4a:
38:2d:0b:24:dc:85:3e:5b:59:f4:30:7f:50:7b:58:ec:2a:ea:
1d:01:ec:cb:b9:29:06:dd:33:85:37:0d:45:bc:f4:b3:d5:29:
5e:5f:c3:ba:ef:0b:73:4c:8f:e8:c7:78:7c:5d:b3:5e:e9:9c:
19:54:49:db:df:4c:6b:eb:9f:fb:2e:b3:40:b7:32:53:a7:0c:
8c:cf:00:65:b4:22:ce:2a:e2:3b:cd:d3:25:cb:86:47:2b:24:
f9:a1:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:10 2026 by rpki-client