Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hn-OAIddWZDBKDJFXCtdGlU7AsM.roa
File: hn-OAIddWZDBKDJFXCtdGlU7AsM.roa (raw, json)
Hash identifier: mrUQvlppMBDkCrgnFpGSqTImzplpE75Mlh2BqHEmDt4=
Subject key identifier: 86:7F:8E:00:87:5D:59:90:C1:28:32:45:5C:2B:5D:1A:55:3B:02:C3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8663D1699FB72EED123FDECCDCF08940
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hn-OAIddWZDBKDJFXCtdGlU7AsM.roa
Signing time: Tue 21 Jul 2026 20:35:16 +0000
ROA not before: Tue 21 Jul 2026 20:35:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216006
IP address blocks: 13.143.236.0/24 maxlen: 24
185.229.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:63:d1:69:9f:b7:2e:ed:12:3f:de:cc:dc:f0:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 21 20:35:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=867f8e00875d5990c12832455c2b5d1a553b02c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:eb:55:14:c9:f2:e9:d9:b2:68:9f:64:cf:
b0:92:d1:88:8d:c8:52:c2:3b:f9:2e:67:9a:ca:a0:
fb:27:be:b3:45:b0:bb:41:91:c0:a2:79:72:da:26:
2b:2f:eb:2b:08:c8:38:0a:cd:c0:4b:2c:12:06:53:
50:61:24:2d:55:13:41:8f:a8:b6:ee:e6:20:c1:8b:
87:bc:bc:c6:1b:de:fe:bd:fa:ad:f6:cc:aa:bc:0e:
ae:aa:dc:47:03:6d:8c:5b:1d:42:5b:c4:d9:7e:93:
84:d8:5b:59:5c:49:1e:bd:52:07:03:3c:04:66:13:
79:e0:43:5a:a3:56:06:c5:f2:78:80:6e:c7:07:bf:
b8:e8:60:01:be:3a:5a:6b:61:ed:e0:f3:9a:a3:e5:
87:63:2c:3b:27:f3:0f:42:9f:2b:d7:d2:59:6a:93:
6a:04:02:82:72:ea:92:c7:a4:82:bc:40:cf:cc:49:
14:9f:f2:0d:cd:2f:fa:3c:b8:50:ae:71:f7:a8:f4:
d2:1e:2d:59:16:df:aa:d2:52:35:de:f2:c3:1a:e7:
48:9a:81:f4:7d:f7:61:8c:9c:ce:d3:20:17:7d:09:
e4:42:49:8d:f9:a4:f4:e1:ed:a5:2a:62:00:ea:bc:
dd:d7:3a:a9:db:39:18:5d:9a:26:0c:9b:88:b7:a7:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:8E:00:87:5D:59:90:C1:28:32:45:5C:2B:5D:1A:55:3B:02:C3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hn-OAIddWZDBKDJFXCtdGlU7AsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.236.0/24
185.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:9d:3a:75:5a:b9:71:80:be:97:8a:1c:a7:3e:69:10:7c:
a7:e5:3a:6b:28:97:8b:5f:ba:a9:fb:34:95:ca:56:f9:2a:37:
58:52:f7:72:d3:d5:5e:9e:74:38:64:96:62:96:75:7f:2c:4e:
94:a6:85:cf:e1:de:28:64:6e:d5:c6:7e:32:1f:5c:8e:e3:10:
73:fc:2a:af:ee:be:b0:59:1e:08:34:2b:56:76:8f:89:f3:9d:
fe:01:ef:85:77:23:25:0c:ba:68:75:75:5a:a4:4d:d3:93:f9:
47:9a:4f:e0:2c:ef:bc:a9:36:e1:99:f5:bb:17:2b:51:a0:d8:
43:5f:4c:e2:ec:b9:39:35:90:10:e9:5f:5f:f8:93:3e:13:e1:
56:a4:21:3b:a5:73:d1:fb:a4:c9:3f:28:5f:04:f4:95:f0:e5:
50:46:c3:8d:da:ff:d8:12:23:ba:dc:5c:85:a6:2f:d5:ed:87:
41:bf:8b:04:2a:21:75:4f:6d:c3:58:95:2e:a6:6a:2d:00:31:
a1:7a:4c:a1:5a:ee:21:18:74:8e:05:1a:00:a0:1b:09:c4:55:
bc:54:da:72:6d:73:b6:28:90:29:79:9e:83:eb:3b:97:95:48:
5f:8c:cb:f0:84:ca:43:61:e8:8f:7b:94:7c:13:59:18:c4:f9:
7a:fe:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:28 2026 by rpki-client