Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/HpsmFih_lnwftR2HEEogwWN7GK0.roa
File: HpsmFih_lnwftR2HEEogwWN7GK0.roa (raw, json)
Hash identifier: g5nLPNS0ilv5/mq0AtrPpZFUP5/WvWsQOVYMxHknzmc=
Subject key identifier: 1E:9B:26:16:28:7F:96:7C:1F:B5:1D:87:10:4A:20:C1:63:7B:18:AD
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01A163AAE76174F0D20813023ED14875AAF2
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/HpsmFih_lnwftR2HEEogwWN7GK0.roa
Signing time: Thu 22 Oct 2026 12:51:47 +0000
ROA not before: Thu 22 Oct 2026 12:51:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46636
IP address blocks: 88.214.192.0/20 maxlen: 20
88.214.193.0/24 maxlen: 24
88.214.194.0/24 maxlen: 24
88.214.195.0/24 maxlen: 24
88.214.201.0/24 maxlen: 24
88.214.206.0/24 maxlen: 24
88.214.207.0/24 maxlen: 24
88.214.208.0/24 maxlen: 24
88.214.250.0/24 maxlen: 24
88.214.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:aa:e7:61:74:f0:d2:08:13:02:3e:d1:48:75:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Oct 22 12:51:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e9b2616287f967c1fb51d87104a20c1637b18ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:53:c9:19:0c:18:21:4a:27:29:f5:20:e8:
d1:01:1c:ed:5b:f9:c8:32:84:f4:e7:05:c5:09:d7:
ac:52:94:ea:0c:46:bd:fd:c8:41:3f:64:b4:b9:a8:
2f:42:4a:44:df:28:1c:54:8e:b1:fd:7f:ea:63:b2:
79:bc:ae:e2:2d:77:ef:1b:87:64:a4:d5:b1:37:66:
fd:64:dd:5d:10:7f:53:49:e4:20:0a:b0:01:af:9f:
c1:df:cf:2b:06:99:cc:20:b0:2c:70:32:2a:00:95:
40:65:a7:f5:3c:1b:20:3d:6d:82:40:e1:db:e1:ff:
78:dd:cb:af:93:1d:ab:a4:47:19:c6:26:d3:5b:61:
6c:66:2d:36:98:cc:ff:02:25:5b:e0:41:62:74:9c:
fd:8b:cb:74:2a:5d:5b:88:ec:0f:2f:c6:ad:c0:15:
ad:d6:17:d1:2f:52:9f:91:ab:ea:83:fc:e8:0c:85:
44:61:b3:ed:6f:28:aa:ad:cd:d8:8d:f0:2f:6c:a3:
9a:4f:ef:b7:b7:e8:19:0c:1d:8b:ef:fb:14:47:6c:
c8:77:f6:05:e2:c3:28:46:91:e8:e4:e1:5a:ec:71:
09:ae:5e:70:07:87:33:1b:cb:1a:1e:33:50:6f:ef:
45:6d:43:cf:51:14:df:e7:94:b0:88:90:18:f8:2c:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:26:16:28:7F:96:7C:1F:B5:1D:87:10:4A:20:C1:63:7B:18:AD
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/HpsmFih_lnwftR2HEEogwWN7GK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.192.0-88.214.208.255
88.214.250.0/24
88.214.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2f:5a:26:99:07:3a:06:e2:ba:ee:d5:24:f8:d4:34:e1:9c:
73:7c:90:11:bd:79:8d:ca:42:7e:be:3c:0b:52:29:8d:76:d2:
6e:a9:7d:ff:12:65:b5:e1:e5:ea:4f:9c:56:1c:28:84:cc:c0:
db:0d:df:0c:3c:3f:2b:46:39:1c:85:88:d2:3b:6f:3c:6e:37:
44:78:e4:73:1d:53:a8:8b:bc:6f:2e:76:4d:70:e0:d3:ea:6d:
45:c7:37:35:cb:98:85:22:77:ad:43:d7:40:11:a5:e7:b3:ce:
8e:d6:9e:cd:c9:4c:d8:8f:da:5a:21:d2:26:a3:29:0a:f8:15:
5d:5c:46:aa:d9:d7:25:33:7c:95:29:91:4f:fb:1b:c0:6d:98:
61:3b:56:5f:ad:80:9d:58:ae:1c:4a:c8:e5:3a:fd:67:19:23:
53:80:57:39:f5:87:e0:2b:c4:b3:e0:c5:95:7a:ae:2f:e1:bb:
05:46:b9:4a:24:5f:aa:9d:ef:d5:44:f3:2a:43:ad:14:54:7a:
4c:fc:58:b6:57:c9:c0:90:e1:80:0d:18:7a:d8:65:7d:21:97:
ab:96:48:aa:c4:52:96:f7:d5:cf:47:86:78:0d:3e:c7:f7:3a:
ba:f0:80:27:ef:3f:d0:86:30:b6:77:2d:5b:b0:5b:25:76:fa:
fc:46:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 11:03:24 2026 by rpki-client