Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/HmTC1lc5UnzflFoVEOJG1b01Es4.roa
File: HmTC1lc5UnzflFoVEOJG1b01Es4.roa (raw, json)
Hash identifier: dNm+Vua122TY+iAUWR/dFsdPeIScuFHAlquTGZc/6Xg=
Subject key identifier: 1E:64:C2:D6:57:39:52:7C:DF:94:5A:15:10:E2:46:D5:BD:35:12:CE
Certificate issuer: /CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Certificate serial: 019E8C9974EEDDC246DFF1807938C6D65E5C
Authority key identifier: AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/HmTC1lc5UnzflFoVEOJG1b01Es4.roa
Signing time: Wed 03 Jun 2026 08:28:47 +0000
ROA not before: Wed 03 Jun 2026 08:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 185.10.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:99:74:ee:dd:c2:46:df:f1:80:79:38:c6:d6:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Validity
Not Before: Jun 3 08:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e64c2d65739527cdf945a1510e246d5bd3512ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:20:8f:81:41:52:cf:91:94:76:76:30:1c:
e2:b5:d4:f1:1a:4f:a5:63:1e:b4:c9:c5:07:38:a8:
2e:41:d9:b2:79:cc:e3:6e:3b:b1:d0:d8:23:84:77:
76:7c:54:b0:7e:8b:ca:40:e4:8b:d1:89:3e:0e:10:
ad:0f:41:60:9f:79:7d:ea:15:79:3c:43:c5:5e:cc:
fc:af:8b:d4:a6:03:8a:91:06:eb:a1:e9:ff:b2:c9:
34:a0:bd:31:5a:ba:fd:e3:bc:85:4d:69:26:47:b1:
77:b2:90:d2:04:6d:26:97:4d:f6:96:44:b7:01:7e:
10:ba:8d:63:bc:24:5b:5b:94:a5:1d:33:15:0d:82:
0c:7b:1a:ad:53:56:30:06:98:4e:2e:28:0b:f7:22:
27:68:28:68:2e:9e:37:55:ff:71:42:cd:8b:e6:bb:
ec:c6:ea:a1:0c:ab:09:bf:8f:9d:21:a0:27:14:af:
c8:00:99:c2:ff:7d:64:19:15:c2:67:6a:a4:4b:fa:
d9:a1:ab:c2:ab:e6:65:74:d5:d5:5c:df:74:65:49:
fb:bb:8a:14:ce:66:40:1b:a5:0a:6c:05:72:15:c3:
84:ac:53:78:be:03:c4:e9:c6:cc:ec:72:09:a5:c8:
0d:90:92:ad:9e:93:b4:bb:50:14:26:2c:44:c4:72:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:C2:D6:57:39:52:7C:DF:94:5A:15:10:E2:46:D5:BD:35:12:CE
X509v3 Authority Key Identifier:
keyid:AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/HmTC1lc5UnzflFoVEOJG1b01Es4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:40:92:e8:f9:21:1d:5b:0f:46:15:a8:14:84:f4:bd:f8:5b:
63:68:0f:a4:8d:80:91:39:75:5f:b7:c2:93:d1:f3:1b:1a:b8:
87:55:0f:78:84:54:18:74:1b:10:1a:72:a0:33:be:f2:e8:00:
2e:95:91:4e:3c:e1:48:82:e4:41:5a:ff:6b:35:e8:1e:8a:93:
9a:a0:3c:60:5f:34:a6:3d:50:5d:76:28:f9:b6:aa:0d:2e:d8:
eb:07:88:6d:f7:60:e7:6b:6d:a7:ce:90:95:e6:0a:63:40:19:
bf:e9:0f:6d:24:b7:4e:14:9a:e2:35:fb:40:73:49:60:7c:5b:
27:f2:ad:08:91:ed:c5:ec:36:0a:e6:b2:5d:31:19:87:68:d3:
07:6e:b0:1f:7c:e3:82:3e:3d:09:7a:32:e2:3f:49:9f:49:66:
53:7f:25:4a:d5:91:f1:b2:1e:48:68:3a:e4:8a:8d:d4:37:be:
23:eb:ac:42:c0:26:f9:d8:b5:da:93:2e:6e:04:34:43:07:f9:
7b:0d:5e:cc:d8:99:83:5c:76:d4:2f:d4:89:5c:4c:a9:4e:6b:
3a:d2:a2:04:ce:4e:23:45:0b:e4:4b:ea:49:3a:3b:a5:b8:da:
b8:67:8d:bf:cd:3b:cf:ba:4b:e0:f6:69:dd:99:f2:bb:68:bf:
51:55:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:38 2026 by rpki-client