Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hmfvFvSmJVTf5zjcWEtWHK3xIgE.roa
File: hmfvFvSmJVTf5zjcWEtWHK3xIgE.roa (raw, json)
Hash identifier: xvO77tQDGtw05LZk8QiJ1lHmEOQURq2WzSRuYHle9So=
Subject key identifier: 86:67:EF:16:F4:A6:25:54:DF:E7:38:DC:58:4B:56:1C:AD:F1:22:01
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A178952EEF904099213A531607764FAEC0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hmfvFvSmJVTf5zjcWEtWHK3xIgE.roa
Signing time: Mon 26 Oct 2026 14:20:05 +0000
ROA not before: Mon 26 Oct 2026 14:20:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 141.98.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:95:2e:ef:90:40:99:21:3a:53:16:07:76:4f:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8667ef16f4a62554dfe738dc584b561cadf12201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:3f:c5:f7:97:9b:30:9d:3c:e3:ba:4a:51:
7e:e0:ac:6a:be:32:d6:17:5e:6c:e2:97:1f:59:6b:
64:fd:68:69:79:c1:6e:78:b0:c9:29:77:48:8a:5a:
f5:08:69:90:5c:98:14:2b:1a:4b:5e:90:01:78:57:
fe:bd:7a:c4:47:ab:4e:51:af:6c:e8:1d:10:29:5a:
8d:19:69:a8:4e:69:09:6f:2f:04:07:17:1e:1d:42:
b9:0e:c6:dc:84:fa:f6:99:53:1a:8b:89:d9:b5:60:
b5:e0:bc:f8:fb:4e:e0:dc:f7:da:a2:e4:e2:ad:33:
b6:dc:ce:4c:c0:74:85:aa:62:1f:17:f6:2c:5b:9f:
a6:07:e5:77:74:d9:8f:0d:fa:65:fb:c8:d3:6d:29:
89:d5:cb:65:99:16:be:04:53:82:c1:5c:60:87:81:
6b:1a:1a:c7:dd:68:38:7f:29:be:ec:be:6f:6b:14:
1b:46:76:7f:78:d7:8a:29:6f:cd:60:88:af:35:bf:
20:c4:df:d2:dc:f9:13:e7:fa:b9:71:60:5e:92:09:
fd:0e:20:84:8c:e6:d1:67:ef:23:7f:5a:b1:7f:45:
99:94:6b:cc:28:0e:b8:3c:90:d3:40:f8:5e:a0:e7:
21:9d:85:d1:1e:d5:a1:96:0a:a1:c5:bc:6c:e0:8d:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:67:EF:16:F4:A6:25:54:DF:E7:38:DC:58:4B:56:1C:AD:F1:22:01
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hmfvFvSmJVTf5zjcWEtWHK3xIgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.50.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ea:45:32:11:56:7c:24:84:47:51:1f:5d:06:a6:27:10:d0:
fe:db:db:3e:e9:97:bf:e2:05:50:a7:b3:c1:cc:b3:f7:2f:27:
7c:3a:4f:14:ed:55:30:4a:26:9d:10:7d:fc:90:79:33:09:d5:
df:6a:3e:57:18:c7:83:2d:34:f7:aa:0b:6a:41:70:50:25:7b:
8d:80:12:80:b0:80:ee:a1:50:a2:f5:a3:56:80:49:08:b3:3f:
e0:5b:ca:3f:44:f0:aa:c0:32:1f:b3:84:4b:99:86:55:45:60:
d4:2e:f6:67:38:b1:c1:7f:9b:ba:73:3a:2d:c0:2b:39:0e:a8:
9a:a6:db:b6:cd:5a:35:e7:52:bf:84:5c:99:5d:c2:fd:a9:f5:
2c:10:08:5d:e5:49:09:a6:9a:9e:ee:1c:ec:cb:c7:96:76:25:
84:45:8c:2f:12:66:9d:c2:e4:e1:0a:f1:b7:d8:a7:70:07:f6:
7c:0f:8f:62:51:fc:92:52:b6:86:ea:92:b5:7f:d9:a3:7f:da:
8b:fa:0c:d4:10:c6:6d:5a:23:c1:5d:e3:54:72:c2:49:49:67:
f1:78:05:35:15:ce:94:75:29:92:ae:f3:dd:a6:05:39:8f:c8:
01:ff:6d:2c:b5:46:c1:b5:c0:da:85:71:0b:bb:70:23:96:89:
09:19:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:46 2026 by rpki-client