Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/hmlejZ_FX0FZvNx16VyVzYTjxkY.roa
File: hmlejZ_FX0FZvNx16VyVzYTjxkY.roa (raw, json)
Hash identifier: NMO1m4MdWGSmLlnVbc99Q8SyuCuWKpfTdx+46vvsjXY=
Subject key identifier: 86:69:5E:8D:9F:C5:5F:41:59:BC:DC:75:E9:5C:95:CD:84:E3:C6:46
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 01A0C3D5C825CCF913D618AD62590A71508C
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/hmlejZ_FX0FZvNx16VyVzYTjxkY.roa
Signing time: Mon 21 Sep 2026 11:59:22 +0000
ROA not before: Mon 21 Sep 2026 11:59:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218688
IP address blocks: 95.85.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d5:c8:25:cc:f9:13:d6:18:ad:62:59:0a:71:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Sep 21 11:59:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86695e8d9fc55f4159bcdc75e95c95cd84e3c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:2d:a0:fa:e2:f4:e9:e2:c0:d8:8d:b9:e7:
83:3a:cc:c3:0f:44:56:f0:4c:de:94:dc:c4:9d:f9:
86:65:4b:7f:3b:c5:9e:c0:17:4d:05:65:b9:28:bf:
34:bf:e6:f2:40:b7:67:0e:99:0c:e4:62:d9:85:f1:
87:1f:e5:38:32:b4:4a:b3:c2:57:c4:c7:d7:06:be:
ef:fb:3e:15:1c:c4:6a:2e:95:42:44:ad:61:df:14:
84:27:9d:5c:53:c6:7c:e3:05:22:ca:e8:84:e6:8f:
af:98:45:f1:a4:22:4a:6f:bb:50:a7:9e:d8:9c:ee:
09:68:c9:99:01:92:45:37:9a:61:f7:6d:f6:66:ae:
76:0c:5a:ec:8d:a6:20:53:81:e3:e8:a2:d1:c9:f4:
00:28:02:3e:e3:bf:1f:73:4c:b1:66:9d:34:02:08:
fd:d4:c9:d1:48:47:94:61:e5:53:7d:85:e9:86:df:
f5:ec:b2:86:c7:c4:18:14:51:61:81:ad:91:2f:32:
75:b0:2e:86:1d:65:0f:cf:98:44:d8:fa:9f:36:56:
d6:0c:41:24:67:e9:29:c7:eb:96:94:e8:88:8e:7b:
22:c8:99:7f:73:7c:0c:c8:41:1c:90:df:9b:46:dc:
8d:74:3f:ad:10:df:8e:6b:64:ba:5b:2d:cf:40:90:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:5E:8D:9F:C5:5F:41:59:BC:DC:75:E9:5C:95:CD:84:E3:C6:46
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/hmlejZ_FX0FZvNx16VyVzYTjxkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.238.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a3:a7:c9:71:26:73:ea:fd:eb:fe:d4:58:0a:44:64:fd:0a:
8e:cc:7f:18:ca:19:8c:2e:bd:32:80:83:49:6b:7c:98:e8:27:
c3:86:64:b7:f0:02:0f:c4:ea:0b:3d:b1:b0:10:f7:b5:c1:39:
eb:4b:61:c4:cb:e9:13:1d:54:3f:38:e2:ed:30:f5:b2:84:ec:
ec:08:2d:29:f1:58:ef:ad:ed:8d:ac:e9:1a:c0:7a:af:9b:e9:
2c:ce:61:f4:7b:60:3f:0c:61:23:84:f6:ff:50:d1:0e:93:a0:
d5:2c:28:90:51:96:b6:fc:c6:1f:55:d1:b6:fe:3b:be:a7:97:
35:99:3e:4c:f9:f2:f5:ee:07:80:2b:0f:fd:40:6f:37:ac:b1:
c7:cc:71:b4:09:75:60:54:d9:8f:09:56:b8:4e:ca:93:3d:04:
2a:c0:75:aa:49:30:48:4e:a6:89:93:40:db:88:0a:7d:0f:9e:
9f:91:6a:76:f7:1e:c5:ce:34:15:1b:a0:60:02:18:e7:c0:00:
fc:4d:52:9d:a6:0d:f4:8f:5b:76:d2:67:59:27:da:1f:24:76:
43:b1:98:04:8e:53:5b:ee:60:89:77:d2:89:66:98:f0:e1:c5:
de:47:27:d6:1a:03:dc:9c:f6:cf:2b:0e:b3:2d:d9:27:aa:6b:
83:96:48:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDD1cglzPkT1hitYlkKcVCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjYwOTIxMTE1OTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjY5NWU4ZDlmYzU1ZjQxNTliY2RjNzVlOTVjOTVjZDg0ZTNjNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo8toPri9OniwNiNueeDOszDD0RW
8EzelNzEnfmGZUt/O8WewBdNBWW5KL80v+byQLdnDpkM5GLZhfGHH+U4MrRKs8JX
xMfXBr7v+z4VHMRqLpVCRK1h3xSEJ51cU8Z84wUiyuiE5o+vmEXxpCJKb7tQp57Y
nO4JaMmZAZJFN5ph9232Zq52DFrsjaYgU4Hj6KLRyfQAKAI+478fc0yxZp00Agj9
1MnRSEeUYeVTfYXpht/17LKGx8QYFFFhga2RLzJ1sC6GHWUPz5hE2PqfNlbWDEEk
Z+kpx+uWlOiIjnsiyJl/c3wMyEEckN+bRtyNdD+tEN+Oa2S6Wy3PQJCGxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZpXo2fxV9BWbzcdelclc2E48ZGMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvaG1sZWpaX0ZYMEZadk54MTZWeVZ6WVRqeGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1XuMA0G
CSqGSIb3DQEBCwUAA4IBAQAwo6fJcSZz6v3r/tRYCkRk/QqOzH8YyhmMLr0ygINJ
a3yY6CfDhmS38AIPxOoLPbGwEPe1wTnrS2HEy+kTHVQ/OOLtMPWyhOzsCC0p8Vjv
re2NrOkawHqvm+kszmH0e2A/DGEjhPb/UNEOk6DVLCiQUZa2/MYfVdG2/ju+p5c1
mT5M+fL17geAKw/9QG83rLHHzHG0CXVgVNmPCVa4TsqTPQQqwHWqSTBITqaJk0Db
iAp9D56fkWp29x7FzjQVG6BgAhjnwAD8TVKdpg30j1t20mdZJ9ofJHZDsZgEjlNb
7mCJd9KJZpjw4cXeRyfWGgPcnPbPKw6zLdknqmuDlkif
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:44:01 2026 by rpki-client