Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/HmeltJqoGqK5DZzHGOZCGQrGqZs.roa
File: HmeltJqoGqK5DZzHGOZCGQrGqZs.roa (raw, json)
Hash identifier: vtN0gPmhpBlauaDksKBhqQJB3xkxqncdATCbp7ofHWY=
Subject key identifier: 1E:67:A5:B4:9A:A8:1A:A2:B9:0D:9C:C7:18:E6:42:19:0A:C6:A9:9B
Certificate issuer: /CN=365f35901d7bf9391b56b034573b249574bae92d
Certificate serial: 019F236885056DEFF020F5598C0DF33F1967
Authority key identifier: 36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/HmeltJqoGqK5DZzHGOZCGQrGqZs.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214151
IP address blocks: 192.166.38.0/24 maxlen: 24
2001:3f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:05:6d:ef:f0:20:f5:59:8c:0d:f3:3f:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365f35901d7bf9391b56b034573b249574bae92d
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e67a5b49aa81aa2b90d9cc718e642190ac6a99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:8a:66:82:96:36:a3:e0:84:8b:f2:1d:61:
56:1d:87:32:b1:77:5d:8e:c6:dd:14:0d:af:8b:9d:
be:77:e0:b7:3f:7c:ac:17:0e:23:51:e4:b3:20:57:
2a:e8:87:e4:c2:28:fe:24:17:57:cb:5a:6d:fb:9b:
21:f5:f9:4b:08:40:30:39:bf:88:84:77:d9:69:86:
b5:6c:93:96:3a:0f:19:a1:01:44:01:f5:94:a0:a6:
37:32:c9:60:7c:7b:c0:eb:37:7f:7b:ec:18:16:97:
0a:5d:dc:3c:54:b6:91:a1:a3:fc:27:aa:44:35:98:
1e:41:e7:d0:d5:8c:37:4b:89:f2:32:1d:4b:6b:7d:
47:b5:09:01:56:87:4d:73:35:14:78:d4:ad:78:cc:
f4:af:8e:2b:dd:cd:dd:c8:ee:29:cc:57:06:6d:e8:
75:c9:3e:b1:8d:40:3d:21:57:2d:67:b0:44:ea:58:
b5:ee:1f:3e:96:f3:3c:2b:63:24:0a:3f:c6:86:33:
44:73:c4:c2:3f:f1:34:b4:8b:e3:77:8b:a2:83:c8:
e9:18:ed:9d:17:47:cf:06:c1:3e:50:94:ca:10:e3:
b4:e8:80:9d:c1:43:10:f7:01:c8:93:16:cf:72:68:
b7:ce:30:24:06:ec:b7:73:bc:ef:05:d9:15:57:91:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:A5:B4:9A:A8:1A:A2:B9:0D:9C:C7:18:E6:42:19:0A:C6:A9:9B
X509v3 Authority Key Identifier:
keyid:36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/HmeltJqoGqK5DZzHGOZCGQrGqZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.38.0/24
IPv6:
2001:3f40::/29
Signature Algorithm: sha256WithRSAEncryption
10:73:26:a5:04:f1:08:23:ba:69:b8:34:cf:a8:51:53:1d:23:
b1:aa:7c:7e:07:5e:4b:75:39:44:b6:a6:39:85:c7:a5:d9:90:
d9:f9:c6:78:5b:43:41:37:75:ff:29:fa:ea:d0:1c:a8:e7:9a:
78:e3:47:7b:d9:30:5b:e5:ab:60:64:af:ee:07:d0:56:42:67:
3a:ef:a9:20:0b:60:00:6d:ca:e4:1f:b3:c0:2e:d1:b5:87:75:
2f:8e:3b:f3:6d:77:a7:b9:dc:ef:0d:52:c6:75:c5:82:15:ab:
ab:bc:f1:50:26:de:cd:7c:54:85:ec:78:18:5f:16:df:23:b8:
ed:f4:61:60:8a:63:39:23:38:45:88:37:a6:d7:ed:28:d4:ad:
b6:b9:d1:3f:2c:72:e9:14:f8:6d:f4:d5:11:af:e2:bc:70:ad:
11:39:13:0b:ee:6b:c5:64:b4:2d:82:5e:40:2f:d9:6d:3a:e5:
6e:3b:99:b6:17:6a:87:24:ea:4a:f7:f4:bb:dc:d0:04:09:9f:
13:ab:f7:da:1c:9c:cd:af:bb:a9:4b:6a:51:c8:a0:ff:52:6b:
88:bc:dd:66:44:c1:41:85:61:86:32:38:40:c1:71:87:52:a1:
6a:45:d5:8a:f4:20:ae:18:0a:40:b4:40:b9:fe:e8:25:1d:e2:
fd:e2:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:13 2026 by rpki-client