Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/HmaDVO93kCilzrscy5mDDvKknYg.roa
File: HmaDVO93kCilzrscy5mDDvKknYg.roa (raw, json)
Hash identifier: hKNI5/YgMfXNRemJ92hVq+H0wO+ayDvT2BBbLVeh6Ig=
Subject key identifier: 1E:66:83:54:EF:77:90:28:A5:CE:BB:1C:CB:99:83:0E:F2:A4:9D:88
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A16F5D45D38D0838CE39036F46C9AD7237
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/HmaDVO93kCilzrscy5mDDvKknYg.roa
Signing time: Sat 24 Oct 2026 19:22:25 +0000
ROA not before: Sat 24 Oct 2026 19:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218537
IP address blocks: 201.3.120.0/24 maxlen: 24
201.3.121.0/24 maxlen: 24
201.3.237.0/24 maxlen: 24
201.7.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:5d:45:d3:8d:08:38:ce:39:03:6f:46:c9:ad:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 24 19:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e668354ef779028a5cebb1ccb99830ef2a49d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:51:9b:cb:71:69:3f:6a:95:2d:fb:0c:13:
5d:12:07:be:fa:9c:37:ba:a2:5a:f7:1b:f0:20:4b:
6e:8e:54:64:3a:0e:4e:ca:51:eb:a1:35:eb:35:65:
aa:d2:ce:49:e6:12:e9:8a:58:36:86:79:ff:82:a6:
ba:1a:49:ab:9b:44:de:d1:be:b2:a4:0f:f0:69:f5:
c2:5d:0b:85:61:4b:71:1e:d0:2a:0e:d1:87:aa:2a:
16:66:a1:f4:fc:1a:7d:62:7e:8a:7e:54:d5:e5:ee:
14:0f:f0:6c:d5:da:52:18:1a:0d:92:87:dc:d5:c9:
c4:3e:6e:cb:bc:9b:b6:29:85:90:12:1c:78:0b:83:
02:56:6f:cb:72:13:29:cc:1c:b4:52:92:e5:ed:f8:
dd:87:f6:40:82:23:f4:76:83:46:bd:3c:18:f4:37:
80:7d:30:3d:24:d7:26:c8:fd:ae:f2:5f:0c:d0:5f:
fd:89:76:c3:45:e9:6f:fe:c7:ca:02:ac:07:22:22:
3d:78:98:70:0a:5e:d9:e7:8b:60:cb:5f:c4:1d:43:
67:bd:77:1e:0c:25:82:c5:27:2a:2c:1f:ca:d9:32:
83:62:b4:8e:2c:55:fc:ba:ea:7c:48:d8:5d:e5:12:
a4:7a:c6:43:56:bf:99:a2:9f:bc:fb:2d:62:a5:20:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:83:54:EF:77:90:28:A5:CE:BB:1C:CB:99:83:0E:F2:A4:9D:88
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/HmaDVO93kCilzrscy5mDDvKknYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.120.0/23
201.3.237.0/24
201.7.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:a9:7b:1a:de:e2:d1:5c:0c:21:fd:8f:ff:c0:19:6f:99:
82:1b:69:de:8a:80:d6:53:f0:23:af:f5:8a:32:37:ca:ca:21:
d6:b5:a4:d7:be:56:12:62:b2:9e:d1:6e:fd:bb:e9:8e:7e:84:
ac:1d:33:dc:9e:45:83:77:56:df:c5:33:37:a1:ac:94:19:91:
b0:42:af:1a:73:10:e1:32:60:dd:9f:65:40:93:c4:28:9b:c5:
07:ff:f7:65:aa:07:20:af:10:ce:d0:58:bb:de:0c:94:6f:23:
d3:9a:b2:44:22:ff:bb:ee:db:22:56:4b:ca:c0:27:41:a1:f6:
6b:e0:61:14:44:36:10:41:aa:4a:67:9d:43:72:a9:61:04:dd:
ae:3b:48:0f:27:2f:35:57:cd:8f:ce:49:8a:99:80:9d:c7:ed:
09:1a:ba:53:c4:aa:46:34:d9:72:73:0e:cc:d8:8d:0c:af:f9:
32:88:60:5b:6a:ac:78:a2:1a:bd:0f:2f:0a:5b:9c:6c:bd:63:
47:d0:da:56:ea:63:4c:c2:58:8c:f5:4a:e3:e6:68:ed:7a:73:
81:63:ed:99:56:58:a4:b2:e1:8b:50:74:da:86:4a:f9:9d:fc:
b4:05:51:96:46:ec:16:21:07:17:51:62:ed:30:0d:18:20:58:
b6:a5:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:21 2026 by rpki-client