Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/hmsBFz-YyzRBrLpumBRqasGjH8o.roa
File: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (raw, json)
Hash identifier: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=
Subject key identifier: 86:6B:01:17:3F:98:CB:34:41:AC:BA:6E:98:14:6A:6A:C1:A3:1F:CA
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F236853DF8689C06795E2FE9F27BBFE7E
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/hmsBFz-YyzRBrLpumBRqasGjH8o.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60484
IP address blocks: 185.159.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:53:df:86:89:c0:67:95:e2:fe:9f:27:bb:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=866b01173f98cb3441acba6e98146a6ac1a31fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:89:ab:35:f2:68:64:fc:21:56:2c:a2:8d:
8f:32:55:f7:42:a5:bd:2e:6c:a8:87:23:7f:7f:31:
97:ee:2a:28:ba:f8:1f:2d:0f:e2:93:3e:c3:c4:f3:
fe:16:39:14:8c:fb:82:bb:66:3f:b8:58:4c:ba:b3:
59:66:1f:d1:4b:af:77:98:e0:9f:65:e7:30:d2:96:
a8:df:76:a0:27:6e:e8:47:90:7e:ee:7f:76:53:55:
97:c2:8c:a0:34:7c:cc:84:d1:a6:14:72:45:8c:72:
5c:32:93:78:b8:1d:90:08:8d:78:2f:31:f7:42:db:
1a:7b:29:26:cf:ab:4c:b7:e2:5d:78:fc:2e:f5:63:
ee:dd:f4:1a:ea:4d:96:81:ab:c7:02:f2:e5:59:f5:
71:3c:6b:a9:52:a4:0f:bb:c8:9b:47:a4:7d:95:1a:
d8:d7:38:62:02:80:41:63:19:83:1c:b9:92:81:91:
e9:b3:49:62:63:9e:75:e9:7b:dc:ab:81:1a:c1:f3:
90:85:75:f2:1b:59:d1:36:4c:7b:4a:0d:b8:52:20:
42:1c:7d:5e:5f:8d:5f:5b:17:c8:50:29:31:10:66:
24:c3:49:cc:9a:77:8b:9d:3c:59:8d:9a:a5:98:58:
7a:61:e6:1d:c0:dd:67:fc:eb:c7:cb:51:c2:f6:bf:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:01:17:3F:98:CB:34:41:AC:BA:6E:98:14:6A:6A:C1:A3:1F:CA
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/hmsBFz-YyzRBrLpumBRqasGjH8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:a9:95:2f:c8:63:f7:be:03:20:3b:c1:52:26:84:6c:6c:e8:
b6:1d:79:ff:d3:f2:8f:60:5b:70:a5:09:9a:5d:e8:c9:ee:bd:
4c:82:53:49:0a:99:bb:60:87:87:6d:c2:8c:8b:34:ad:a7:d9:
17:5b:ce:ee:77:06:d2:1f:94:88:d1:09:c0:2a:d0:a2:26:23:
9c:63:3b:fe:e3:1c:c4:cb:24:b1:15:91:f0:51:70:08:95:4f:
88:c6:49:0f:59:a6:19:31:73:b2:2e:aa:87:fe:c6:89:b3:64:
2c:37:51:8c:1b:23:89:01:bb:8a:d4:91:29:72:a1:70:0a:c7:
b8:0e:e4:10:83:77:ef:d6:ef:91:53:28:a0:f0:48:2d:ba:83:
29:dd:33:6f:cd:2d:15:dc:f6:3d:10:d4:a6:03:06:fd:2e:18:
c4:e7:88:6d:fa:77:94:10:cd:af:1d:dd:85:30:46:5d:96:cd:
1b:2b:7a:b8:d1:6d:cb:76:97:f4:1f:07:4d:92:e7:53:47:1a:
66:c5:de:04:c9:67:8e:81:cf:2a:00:7c:2d:fb:cb:fc:0e:2b:
ed:8d:16:cf:cd:c7:32:8b:1e:86:31:9a:61:6f:03:63:a9:c0:
41:43:31:17:8a:3a:cd:97:9e:02:e6:2c:bc:1c:34:cf:73:25:
a2:57:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:10 2026 by rpki-client