Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/hmqViEquWUswNU98B0WP5sYANn4.roa
File: hmqViEquWUswNU98B0WP5sYANn4.roa (raw, json)
Hash identifier: cdtwzuRgZBZSCCSKfbfF5U752ScIvmwq/6SJfzh37Kw=
Subject key identifier: 86:6A:95:88:4A:AE:59:4B:30:35:4F:7C:07:45:8F:E6:C6:00:36:7E
Certificate issuer: /CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Certificate serial: 01A0C7F1BA4A6422A5548B3489901942576A
Authority key identifier: 41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/hmqViEquWUswNU98B0WP5sYANn4.roa
Signing time: Tue 22 Sep 2026 07:08:22 +0000
ROA not before: Tue 22 Sep 2026 07:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 194.35.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:f1:ba:4a:64:22:a5:54:8b:34:89:90:19:42:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Validity
Not Before: Sep 22 07:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=866a95884aae594b30354f7c07458fe6c600367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:0e:d8:ba:71:71:25:b6:5a:bc:cd:0c:f1:
b7:1f:69:a6:6d:1d:2d:bd:4c:bf:87:04:e1:97:4b:
4a:9c:76:08:54:5a:f3:40:5a:87:43:bb:db:c5:47:
6f:fb:31:3b:d8:39:a2:3c:81:6b:fb:2a:4e:5e:71:
97:df:9d:ef:e5:6e:e8:d4:99:65:6d:13:0f:36:3d:
01:b4:e6:d9:e7:af:bf:3a:0b:a9:2c:1a:df:22:ef:
54:f1:ce:3d:bb:78:9b:14:da:6f:f0:93:0b:c0:0d:
95:62:b2:65:65:c1:99:44:15:5d:32:b3:04:81:c8:
ed:d4:b3:ca:c4:a7:63:a4:69:c3:1e:7a:61:16:81:
fd:a1:cc:b4:87:50:57:ca:f0:40:e5:81:97:4c:8f:
2e:cf:9c:60:73:48:21:6c:b6:f1:40:f4:8e:c8:ff:
a0:94:3d:2a:6d:fb:6f:86:1d:3a:e0:9f:b5:ac:df:
04:2b:eb:e4:02:d4:bb:f2:67:95:35:ae:d3:2f:6a:
c3:ff:64:ae:27:08:72:16:59:e9:c2:c0:a6:b7:ee:
d3:7c:80:a0:32:41:21:69:e9:01:9b:b7:d5:a5:2c:
5c:06:51:b2:58:1f:6b:11:82:9f:ef:91:8c:2e:21:
0b:28:d6:1f:0d:75:df:5c:a2:c7:d8:1d:17:67:42:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:95:88:4A:AE:59:4B:30:35:4F:7C:07:45:8F:E6:C6:00:36:7E
X509v3 Authority Key Identifier:
keyid:41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/hmqViEquWUswNU98B0WP5sYANn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.192.0/19
Signature Algorithm: sha256WithRSAEncryption
40:29:98:b1:c2:6e:c1:89:3e:06:a9:8b:c4:51:ee:21:f6:1a:
71:de:52:06:82:42:9c:e8:70:29:ac:4b:fc:e7:20:62:42:b1:
87:41:c5:d2:55:79:87:04:cf:b0:67:b1:36:4e:89:6e:88:33:
ef:e3:ea:b8:dc:df:c9:04:01:da:cd:ac:25:e1:12:19:b1:f3:
44:d4:1d:34:4e:f5:ee:74:28:e2:7e:33:59:7d:eb:65:d2:ab:
f4:7e:aa:f6:e9:f5:9e:e3:b4:80:c7:90:c1:2e:3e:0e:38:31:
3b:55:c0:db:f7:50:fa:d3:63:09:45:57:04:ae:ae:fc:36:1a:
f7:f7:c9:f6:99:3e:d2:8d:5d:08:17:e1:81:15:84:97:98:11:
ba:d3:85:f3:34:1b:8e:b4:54:19:98:74:f8:0e:4e:08:e1:5c:
14:48:a6:18:31:f5:3f:22:77:12:b7:8b:ae:39:db:1b:9a:03:
98:90:b6:c6:be:6e:02:82:90:f1:ee:2b:56:86:0b:7b:71:72:
6a:9b:3c:3e:74:d1:82:81:b3:db:cc:ae:dd:09:f4:e2:29:6f:
06:3a:0b:6c:9c:88:1c:a8:cb:33:63:da:71:1e:ee:5b:ff:f7:
e1:32:a0:b3:94:51:fe:51:0a:ee:32:55:b9:92:d3:95:23:8b:
f0:64:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:13 2026 by rpki-client