Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/HMNBYYLQfpsMzv_7rdYah2AS6Iw.roa
File: HMNBYYLQfpsMzv_7rdYah2AS6Iw.roa (raw, json)
Hash identifier: w0wy6qQ5A9c/4pt/Egj09N/kZAm7UbNX6ayGa9wM2n0=
Subject key identifier: 1C:C3:41:61:82:D0:7E:9B:0C:CE:FF:FB:AD:D6:1A:87:60:12:E8:8C
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019FD235D2424EC81CBC2F2A11E45BE50F70
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/HMNBYYLQfpsMzv_7rdYah2AS6Iw.roa
Signing time: Wed 05 Aug 2026 13:56:10 +0000
ROA not before: Wed 05 Aug 2026 13:56:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199152
IP address blocks: 2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e82::/36 maxlen: 36
2a0a:2e83::/36 maxlen: 36
2a0a:2e84::/36 maxlen: 36
2a0a:2e85::/36 maxlen: 36
2a0a:2e86::/32 maxlen: 32
2a0a:2e86:1000::/36 maxlen: 36
2a0a:2e86:2000::/36 maxlen: 36
2a0a:2e86:3000::/36 maxlen: 36
2a0a:2e86:4000::/36 maxlen: 36
2a0a:2e86:5000::/36 maxlen: 36
2a0a:2e86:6000::/36 maxlen: 36
2a0a:2e86:7000::/36 maxlen: 36
2a0a:2e86:8000::/36 maxlen: 36
2a0a:2e86:9000::/36 maxlen: 36
2a0a:2e86:a000::/36 maxlen: 36
2a0a:2e86:b000::/36 maxlen: 36
2a0a:2e87::/32 maxlen: 32
2a11:7e41::/32 maxlen: 32
2a11:7e41::/48 maxlen: 48
2a11:7e41:1::/48 maxlen: 48
2a11:7e41:2::/48 maxlen: 48
2a11:7e41:3::/48 maxlen: 48
2a11:7e42::/36 maxlen: 36
2a11:7e43::/36 maxlen: 36
2a11:7e44::/32 maxlen: 32
2a11:7e45::/32 maxlen: 32
2a11:7e47:b001::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8482::/36 maxlen: 36
2a11:8483::/36 maxlen: 36
2a11:8484::/32 maxlen: 32
2a11:df41::/32 maxlen: 32
2a11:df42::/36 maxlen: 36
2a11:df43::/36 maxlen: 36
2a11:df44::/32 maxlen: 32
2a11:df45::/32 maxlen: 32
2a11:df46::/32 maxlen: 32
2a11:df47::/32 maxlen: 32
2a12:6700::/32 maxlen: 32
2a12:6703::/36 maxlen: 36
2a12:6704::/36 maxlen: 36
2a12:6705::/32 maxlen: 32
2a12:6706::/32 maxlen: 32
2a12:6707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:35:d2:42:4e:c8:1c:bc:2f:2a:11:e4:5b:e5:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Aug 5 13:56:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cc3416182d07e9b0ccefffbadd61a876012e88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:d8:1b:95:01:28:25:ba:49:af:ae:82:da:
7a:a8:c2:86:ed:fd:73:13:6f:e6:b4:a1:20:74:3e:
71:3b:4d:0b:d3:62:b0:c8:5e:7e:57:49:89:1c:da:
e0:6c:5a:08:df:ff:1d:3d:82:d2:d7:d9:6f:42:1e:
5f:b2:bc:2a:0f:5b:d4:06:70:a2:9a:76:68:fc:84:
99:df:61:af:7f:8d:db:ff:00:89:ed:f5:70:e2:e0:
5c:2d:d9:a7:4e:f7:fd:ef:fb:a5:af:f8:a5:fc:6f:
02:06:20:29:5b:84:72:01:d7:f1:6d:f2:ac:c5:38:
9c:16:a5:36:87:8f:ea:f1:f6:89:0f:b9:2a:f7:fd:
11:39:29:11:8c:4b:cc:1c:ad:00:67:62:c3:af:54:
ab:49:d0:97:f3:39:a9:42:f9:58:9c:81:93:ed:f4:
ee:9d:b9:a3:ee:51:20:c9:4a:64:59:af:36:2c:6b:
4e:1f:fc:f4:e9:27:50:32:4e:d2:26:fb:eb:9f:62:
77:35:05:f6:6f:f5:99:10:62:ef:3f:32:fd:b2:8e:
ba:91:c2:df:b5:f4:05:76:84:6d:4c:7c:ae:ac:ad:
b1:97:06:ac:bf:51:8b:c2:78:04:78:42:5f:97:77:
30:e1:bb:66:9b:01:7e:26:2e:30:40:ec:04:10:73:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:41:61:82:D0:7E:9B:0C:CE:FF:FB:AD:D6:1A:87:60:12:E8:8C
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/HMNBYYLQfpsMzv_7rdYah2AS6Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2e80::-2a0a:2e82:fff:ffff:ffff:ffff:ffff:ffff
2a0a:2e83::/36
2a0a:2e84::/36
2a0a:2e85::/36
2a0a:2e86::/31
2a11:7e41::-2a11:7e42:fff:ffff:ffff:ffff:ffff:ffff
2a11:7e43::/36
2a11:7e44::/31
2a11:7e47:b001::/48
2a11:8480::/32
2a11:8482::/36
2a11:8483::/36
2a11:8484::/32
2a11:df41::-2a11:df42:fff:ffff:ffff:ffff:ffff:ffff
2a11:df43::/36
2a11:df44::/30
2a12:6700::/32
2a12:6703::/36
2a12:6704::/36
2a12:6705::-2a12:6707:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b7:51:11:9d:9e:af:d7:2e:96:56:e8:d7:2a:b4:0a:7b:43:91:
ea:58:c4:02:f4:f2:ee:20:eb:b5:2f:f3:1e:8f:1e:7c:42:39:
d4:5f:a4:e4:57:3f:fe:4d:c6:a2:f1:c8:ef:b3:07:c8:bd:20:
99:12:1a:a9:7a:22:5c:52:ba:c8:13:15:be:f1:50:f5:4c:41:
84:2c:7f:1f:94:d2:cb:59:27:5e:4a:f5:d9:64:65:20:ec:fe:
21:4b:77:70:28:65:19:84:fd:d5:c1:15:51:c9:c2:5e:b5:96:
85:25:bb:67:b0:0d:7c:36:50:9a:1c:0b:24:04:5f:df:82:8d:
1e:a5:2b:02:c6:f0:bb:5c:47:aa:de:de:81:d4:b2:e2:66:51:
b7:71:2f:f4:fe:1c:66:0a:7f:a0:cc:dd:ad:b1:ca:ac:b2:37:
d0:66:39:91:b9:d4:a6:de:01:a4:d2:07:3c:f4:21:bf:2b:e4:
33:6e:fa:3e:f3:46:a9:48:ef:06:a1:23:0c:41:5b:bc:7e:0c:
f5:8b:f2:26:6c:bf:36:8f:83:21:01:8a:0f:ef:12:8e:c4:27:
01:3e:4b:87:cb:41:ae:1a:e1:16:35:53:78:f5:8a:62:e6:39:
a5:aa:7f:ce:d6:59:9d:10:19:24:42:81:9a:aa:4a:88:12:c6:
df:9c:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:38:10 2026 by rpki-client