Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RmHnEpoqXwlWmZ9CSfuB7Z4Nf2A.roa
File: RmHnEpoqXwlWmZ9CSfuB7Z4Nf2A.roa (raw, json)
Hash identifier: 9C3jCvHQjCtZ1/VN0bjOK/nYVZXOwAH6nD790WVrV4c=
Subject key identifier: 46:61:E7:12:9A:2A:5F:09:56:99:9F:42:49:FB:81:ED:9E:0D:7F:60
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A296BDAB40196E8F9D4944080C38A954
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RmHnEpoqXwlWmZ9CSfuB7Z4Nf2A.roa
Signing time: Tue 03 Nov 2026 18:05:50 +0000
ROA not before: Tue 03 Nov 2026 18:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50131
IP address blocks: 77.239.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:96:bd:ab:40:19:6e:8f:9d:49:44:08:0c:38:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 18:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4661e7129a2a5f0956999f4249fb81ed9e0d7f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f2:8e:08:fd:81:13:d1:e3:11:24:09:ed:72:
98:49:b8:89:a4:6e:df:c5:b6:e0:b6:ad:ea:89:b0:
5d:e2:03:43:e4:b0:92:58:41:5b:be:ba:cb:bc:c8:
95:4e:de:81:fe:24:b0:4b:dc:3a:14:f5:15:ee:1d:
18:15:ff:df:83:97:3a:f2:ab:5a:78:e8:7b:37:58:
27:04:07:33:2d:d9:f7:bd:33:eb:ba:f7:70:3d:89:
e4:13:a3:eb:15:c7:b5:a1:be:22:da:fb:49:f8:00:
91:57:09:90:ac:b9:78:4b:a4:26:14:7b:99:78:73:
12:68:76:ca:db:22:b4:6b:c6:47:b2:41:37:23:4c:
24:13:3c:92:05:51:d0:5c:3b:e8:19:f1:02:e7:44:
51:e8:26:a0:c1:ce:ed:4b:92:f5:09:2e:8a:dd:a9:
c5:10:02:d8:89:3d:bb:6d:5e:5e:23:1d:6c:f2:0c:
2c:d8:c3:44:1b:e1:08:09:dc:82:bd:0f:f9:69:54:
88:a4:5b:e0:d2:ca:ea:25:ab:bd:eb:8a:c4:9f:ef:
0e:68:36:73:5b:0d:62:63:90:ca:f4:90:1c:0e:e6:
57:1c:d9:64:a8:d2:65:49:cf:11:af:cf:4e:5b:c4:
3c:be:0c:fa:9e:e5:36:c6:18:e1:b9:74:37:c9:e7:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:E7:12:9A:2A:5F:09:56:99:9F:42:49:FB:81:ED:9E:0D:7F:60
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RmHnEpoqXwlWmZ9CSfuB7Z4Nf2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.116.0/22
Signature Algorithm: sha256WithRSAEncryption
30:d9:43:b0:ce:8a:25:6c:6d:46:05:e9:bc:e0:18:50:86:b1:
06:b0:53:42:60:f6:89:97:90:be:5f:ac:af:a0:6c:e6:f7:39:
39:8d:a2:0a:6d:da:5f:c8:db:ef:2e:89:2a:a1:ea:85:0c:42:
ce:75:53:e8:8b:42:c0:bf:b2:98:ab:b2:a7:e4:36:87:c2:52:
24:dd:d1:ad:d4:40:96:ac:b0:3b:fb:8f:4e:33:92:de:b7:d2:
75:ea:fe:4a:45:bd:85:81:d4:3b:60:2d:8f:99:63:5a:a1:22:
16:58:32:b2:f3:36:8e:04:53:f4:d3:9d:1b:a8:90:ac:e1:1a:
17:fc:53:73:e6:c7:de:02:be:f3:db:23:55:03:47:5d:94:ab:
73:da:6c:12:dc:05:42:e2:3f:83:34:bc:43:18:65:9e:ff:8e:
2c:27:56:5a:28:6e:fb:34:67:1a:2f:a0:c8:bc:c3:9d:74:88:
b0:4a:b4:db:4f:f6:ba:8b:22:0c:46:63:d7:a7:8f:df:88:c9:
82:d4:c0:4d:3a:31:8c:cb:73:2c:a7:cc:f9:c4:b5:f5:12:cb:
bc:1d:a0:2e:15:1b:3a:ce:fa:04:16:1e:77:49:02:0e:84:d2:
35:17:b2:eb:d0:46:da:71:78:f7:f4:61:4d:90:ea:b7:56:60:
e2:4d:b1:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGilr2rQBluj51JRAgMOKlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMTAzMTgwNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjYxZTcxMjlhMmE1ZjA5NTY5OTlmNDI0OWZiODFlZDllMGQ3ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PKOCP2BE9HjESQJ7XKYSbiJpG7f
xbbgtq3qibBd4gND5LCSWEFbvrrLvMiVTt6B/iSwS9w6FPUV7h0YFf/fg5c68qta
eOh7N1gnBAczLdn3vTPruvdwPYnkE6PrFce1ob4i2vtJ+ACRVwmQrLl4S6QmFHuZ
eHMSaHbK2yK0a8ZHskE3I0wkEzySBVHQXDvoGfEC50RR6Cagwc7tS5L1CS6K3anF
EALYiT27bV5eIx1s8gws2MNEG+EICdyCvQ/5aVSIpFvg0srqJau964rEn+8OaDZz
Ww1iY5DK9JAcDuZXHNlkqNJlSc8Rr89OW8Q8vgz6nuU2xhjhuXQ3yefLWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZh5xKaKl8JVpmfQkn7ge2eDX9gMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUm1IbkVwb3FYd2xXbVo5Q1NmdUI3WjROZjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTe90MA0G
CSqGSIb3DQEBCwUAA4IBAQAw2UOwzoolbG1GBem84BhQhrEGsFNCYPaJl5C+X6yv
oGzm9zk5jaIKbdpfyNvvLokqoeqFDELOdVPoi0LAv7KYq7Kn5DaHwlIk3dGt1ECW
rLA7+49OM5Let9J16v5KRb2FgdQ7YC2PmWNaoSIWWDKy8zaOBFP0050bqJCs4RoX
/FNz5sfeAr7z2yNVA0ddlKtz2mwS3AVC4j+DNLxDGGWe/44sJ1ZaKG77NGcaL6DI
vMOddIiwSrTbT/a6iyIMRmPXp4/fiMmC1MBNOjGMy3Msp8z5xLX1Esu8HaAuFRs6
zvoEFh53SQIOhNI1F7Lr0EbacXj39GFNkOq3VmDiTbGA
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:23 2026 by rpki-client