Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hpLmsb9Hy7pZmhXeDib_2XTyO1Q.roa
File: hpLmsb9Hy7pZmhXeDib_2XTyO1Q.roa (raw, json)
Hash identifier: QSWqVZZknAznYtnkjAMR6wQOMbu0S23SFjRWErscdcQ=
Subject key identifier: 86:92:E6:B1:BF:47:CB:BA:59:9A:15:DE:0E:26:FF:D9:74:F2:3B:54
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019CB3D157CB27B8D4D4D906D1EC898A8DC1
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hpLmsb9Hy7pZmhXeDib_2XTyO1Q.roa
Signing time: Tue 03 Mar 2026 13:09:27 +0000
ROA not before: Tue 03 Mar 2026 13:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.224.0/24 maxlen: 24
131.222.248.0/22 maxlen: 22
131.222.254.0/24 maxlen: 24
203.202.233.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a00::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0a:37c0::/30 maxlen: 30
2a0a:37c4::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0b:a280::/30 maxlen: 30
2a0b:a284::/30 maxlen: 30
2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0d:88c0::/30 maxlen: 30
2a0d:88c4::/30 maxlen: 30
2a0f:1180::/30 maxlen: 30
2a0f:1184::/30 maxlen: 30
2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/30 maxlen: 30
2a0f:5584::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
2a0f:7c80::/30 maxlen: 30
2a0f:7c84::/30 maxlen: 30
2a0f:9fc0::/30 maxlen: 30
2a0f:9fc4::/30 maxlen: 30
2a0f:a140::/30 maxlen: 30
2a0f:a144::/30 maxlen: 30
2a0f:a500::/30 maxlen: 30
2a0f:a504::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a0f:c780::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
2a14:4380::/30 maxlen: 30
2a14:4384::/30 maxlen: 30
2a14:4480::/30 maxlen: 30
2a14:4484::/30 maxlen: 30
2a14:4980::/30 maxlen: 30
2a14:4984::/30 maxlen: 30
2a14:4a80::/30 maxlen: 30
2a14:4a84::/30 maxlen: 30
2a14:4b80::/30 maxlen: 30
2a14:4b84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:d1:57:cb:27:b8:d4:d4:d9:06:d1:ec:89:8a:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Mar 3 13:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8692e6b1bf47cbba599a15de0e26ffd974f23b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:ef:df:f4:94:63:80:e1:58:65:7a:7e:13:
b7:49:1d:e2:c7:84:76:6f:55:b7:c1:6b:cf:96:b7:
eb:10:0b:4f:0d:43:11:9c:6c:8e:d8:2a:6f:fc:08:
3c:bb:f7:5f:f5:33:ce:e4:2d:f5:46:4a:48:e6:23:
d3:d5:db:53:21:55:8a:b9:89:d9:bd:d2:bc:7b:ca:
1f:b1:3f:da:c5:ec:72:c3:a1:49:c9:e2:32:48:7c:
82:df:c7:f4:9c:67:b6:10:04:3f:a8:b2:a0:14:c5:
b1:28:59:19:95:cb:cf:e2:bc:4d:3e:4b:30:d9:64:
ac:3a:9e:f6:52:cb:fc:d8:a6:cd:ae:12:68:18:6e:
d7:ce:13:0b:8b:5d:5d:a6:c3:d3:0c:fd:52:68:8c:
d4:a0:5d:cd:9b:cf:00:c1:20:b0:ca:8d:24:27:d0:
19:7f:61:15:1e:2e:0d:dd:16:c8:3b:98:78:82:2a:
dc:e5:6c:21:d4:b0:29:31:3d:78:ee:4f:98:ff:3f:
c0:d4:d0:9e:e6:ad:c4:93:9a:c9:5a:8a:1c:97:2b:
60:76:15:f4:07:ab:91:ce:ac:94:dc:9f:72:4b:94:
11:93:a6:a5:86:08:b4:68:f3:59:99:a2:fe:68:5c:
d3:ce:d5:3c:5b:87:d4:1b:48:31:21:a8:23:9c:94:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:92:E6:B1:BF:47:CB:BA:59:9A:15:DE:0E:26:FF:D9:74:F2:3B:54
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hpLmsb9Hy7pZmhXeDib_2XTyO1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.224.0/24
131.222.248.0/22
131.222.254.0/24
203.202.233.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a00::/29
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
4e:2c:83:b5:9c:09:4f:a0:68:de:a4:10:2c:b6:2d:d2:52:d2:
8d:8c:59:16:3c:c3:b3:41:f3:6c:43:81:c7:0b:ba:0b:6f:98:
30:6d:f3:9e:48:5d:48:a9:28:60:04:39:75:51:7e:0a:d2:63:
66:5e:2e:5f:c4:4b:3f:23:53:c9:95:c1:db:01:d9:b8:b5:4b:
38:2e:83:a0:71:ec:9e:96:6c:70:e1:80:eb:53:c9:1c:07:2e:
72:b5:46:d3:5a:7d:4b:cf:03:f6:6c:36:8b:b0:77:bd:d7:df:
74:c5:9e:c8:a7:38:b2:80:47:65:d5:2d:32:bb:9c:c4:18:c6:
19:13:45:70:7f:8d:78:0d:ff:6d:56:58:7e:a7:1c:05:cd:2e:
41:42:2d:5b:8f:f1:ba:be:c6:54:1d:12:7b:a1:00:9a:ce:4f:
1b:f9:e0:99:ba:c8:40:38:9b:fd:14:aa:ed:b1:09:e3:02:9d:
86:98:5a:1f:28:e5:5f:b7:30:05:be:82:2d:20:74:5f:45:58:
dd:3b:80:ea:d7:9c:a9:11:eb:c2:b0:dd:1e:ed:d9:a6:21:d5:
56:d5:58:40:a1:ef:f6:7e:63:a1:98:04:85:37:17:4d:f3:bc:
18:8e:1c:c5:7a:b4:a9:bf:41:1a:82:6a:bf:2a:4b:44:15:6a:
22:31:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:47:02 2026 by rpki-client