Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/hmqNUnS2MSk2jfDXOQgdE8qpkrI.roa
File: hmqNUnS2MSk2jfDXOQgdE8qpkrI.roa (raw, json)
Hash identifier: YU/VVYSAMlqe4gZqWwNk+tl498u80FBo5gd16Hj+Hzw=
Subject key identifier: 86:6A:8D:52:74:B6:31:29:36:8D:F0:D7:39:08:1D:13:CA:A9:92:B2
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A1B9BA7ABFE29230892CB873C1A98D2CF1
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/hmqNUnS2MSk2jfDXOQgdE8qpkrI.roa
Signing time: Sun 08 Nov 2026 05:56:08 +0000
ROA not before: Sun 08 Nov 2026 05:56:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 189.13.179.0/24 maxlen: 24
189.13.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b9:ba:7a:bf:e2:92:30:89:2c:b8:73:c1:a9:8d:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Nov 8 05:56:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=866a8d5274b63129368df0d739081d13caa992b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:c2:c1:c9:f2:da:93:1d:80:2e:2c:cf:c1:
c9:1e:ee:54:a9:72:95:d8:58:c6:dc:93:4a:32:dc:
ac:bb:c8:96:a3:c4:5f:4b:4b:c7:cc:37:a4:cc:ac:
ec:ae:79:5f:17:3d:05:48:f3:ca:66:a2:53:5f:dc:
74:3c:57:b1:6e:d9:d7:aa:a5:6b:25:db:17:d2:22:
f4:1c:e5:ce:81:d8:f6:fd:cf:c2:7e:b1:61:95:d1:
e3:69:54:50:aa:b8:3d:aa:f6:79:25:e3:6f:7d:70:
c0:26:b4:d2:56:ab:67:0b:8b:5d:cd:45:b4:1c:42:
ba:e5:73:b9:cc:c9:17:19:8f:69:89:cf:a5:9c:8a:
f1:19:5d:39:44:cd:21:24:60:1c:ea:52:91:f4:0f:
64:a2:1c:8a:73:07:57:5e:10:64:2d:19:62:11:0b:
10:ab:07:9e:e5:21:07:82:a4:15:ab:81:36:07:ec:
5a:06:0d:de:b8:5b:55:5b:67:b5:3e:d0:c8:b0:94:
da:44:3a:27:66:86:e0:80:f4:ee:1b:b6:3c:0d:56:
8b:3b:6c:3d:b8:97:ca:9e:b1:17:03:b0:ce:ed:eb:
e6:e9:52:18:de:c9:46:b7:e5:63:14:f0:c8:18:67:
1f:90:bc:76:c4:19:2f:8a:53:53:3f:b1:59:84:cf:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:8D:52:74:B6:31:29:36:8D:F0:D7:39:08:1D:13:CA:A9:92:B2
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/hmqNUnS2MSk2jfDXOQgdE8qpkrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.179.0-189.13.180.255
Signature Algorithm: sha256WithRSAEncryption
90:b7:59:e9:82:79:7b:d1:4e:4d:09:68:ef:e8:a1:6c:ee:84:
69:d2:78:54:a7:96:04:56:94:7a:cb:3d:72:fd:a7:7a:c7:0f:
21:6f:7a:6e:2c:93:3a:51:c3:28:48:fb:9f:a5:8f:da:1f:c0:
21:19:e7:2e:99:b0:76:94:ab:24:90:a1:aa:1d:76:4f:55:7c:
15:fa:74:20:67:fe:4b:49:72:25:39:88:3f:9e:a7:1f:10:5c:
2e:14:d8:90:f4:d2:a2:a0:58:7e:41:6e:69:de:24:1e:83:7a:
70:cc:5c:62:32:1a:d7:e4:d2:5d:c2:f3:e8:8a:ab:1f:3f:cd:
99:69:24:ce:96:b1:75:df:f3:09:19:ae:d3:d4:7a:43:b8:77:
6b:6b:f3:c2:a0:98:af:6a:f3:d3:32:74:12:50:13:ec:e8:6e:
57:46:b3:d2:cc:4d:70:ae:08:8b:d2:0e:66:4a:7d:e2:3b:e4:
d9:74:78:ea:9e:5a:99:0f:44:76:aa:b0:b0:76:34:b1:63:aa:
d1:29:2d:5b:11:3f:99:5b:d3:da:a6:fc:cd:7e:60:ef:15:cc:
9b:7c:de:f4:ae:73:ce:8f:14:75:5d:b4:63:8a:2d:1b:a3:9f:
73:d7:a6:65:08:5f:cc:fd:e8:41:c1:2d:90:9d:1b:2e:a9:12:
99:40:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:28 2026 by rpki-client