Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/hlSTINC_KpLJH_012cszF50XrrM.roa
File: hlSTINC_KpLJH_012cszF50XrrM.roa (raw, json)
Hash identifier: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=
Subject key identifier: 86:54:93:20:D0:BF:2A:92:C9:1F:FD:35:D9:CB:33:17:9D:17:AE:B3
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 019C4C8E7255991C453E05E1387E9BC0AB3A
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/hlSTINC_KpLJH_012cszF50XrrM.roa
Signing time: Wed 11 Feb 2026 11:55:29 +0000
ROA not before: Wed 11 Feb 2026 11:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57077
IP address blocks: 185.88.248.0/22 maxlen: 22
188.95.56.0/21 maxlen: 21
2a03:3ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:8e:72:55:99:1c:45:3e:05:e1:38:7e:9b:c0:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Feb 11 11:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86549320d0bf2a92c91ffd35d9cb33179d17aeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:fc:d3:30:cb:15:5f:d2:25:d0:75:40:89:
52:46:d9:4c:54:27:d4:90:1a:1c:82:74:b6:bb:e3:
43:9d:9d:57:ce:87:3e:72:93:f2:2d:84:4c:84:f7:
a6:3a:7d:46:19:05:7d:74:c6:c5:bb:79:f3:00:25:
69:d6:f7:8b:8d:8b:3f:95:9c:1a:8b:a3:b3:ad:48:
a3:af:a8:41:88:d6:73:5c:00:82:90:55:3e:dc:58:
e0:2a:79:6a:54:57:27:f2:6c:85:e7:59:44:3f:1a:
63:e5:8c:4c:88:43:c1:dd:25:96:60:28:77:fd:2a:
6d:4f:3d:d5:f0:2c:5a:dd:13:1d:ee:0e:45:da:61:
ce:36:d8:39:39:63:72:7d:72:a7:bf:b2:d5:2d:29:
8b:e0:b7:2c:c2:74:ef:b5:dc:f7:8f:52:3c:9c:d2:
7f:fa:29:7b:f5:2c:77:c4:41:86:28:37:00:70:3e:
3c:1b:2c:04:5a:06:2e:28:16:02:8c:90:e5:0b:07:
8c:b0:f9:3d:69:84:04:26:b8:1b:e4:00:5b:de:d8:
8c:bd:6c:5d:3e:7a:28:e1:30:db:7a:bb:37:eb:3a:
c8:68:39:47:78:0e:29:a9:47:76:98:a3:4f:8d:78:
7d:a7:7a:75:d3:2d:d1:68:dc:28:71:40:ca:b6:ac:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:93:20:D0:BF:2A:92:C9:1F:FD:35:D9:CB:33:17:9D:17:AE:B3
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/hlSTINC_KpLJH_012cszF50XrrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.248.0/22
188.95.56.0/21
IPv6:
2a03:3ac0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:cb:24:a0:39:a9:22:ef:56:60:a4:0b:02:0b:b0:b7:e0:63:
8a:dc:f2:9d:25:33:e5:c0:19:42:15:bf:9f:53:82:19:53:d4:
e9:40:94:d5:c3:53:6a:3b:68:7f:e3:76:73:06:98:be:87:87:
d7:07:1f:89:bc:94:89:13:1a:ca:b3:c3:9e:3c:ce:d6:4a:b6:
5d:04:b8:45:f4:4f:37:53:d6:4f:9f:86:bb:95:68:45:bd:e3:
86:53:04:16:13:26:7a:f1:20:c7:c4:a8:8a:cc:9b:59:de:02:
50:a5:45:ab:87:64:62:63:c4:73:50:71:fc:7e:a7:1f:a7:07:
47:4e:03:24:1d:d7:dd:e6:81:5a:96:c8:87:4a:7e:fe:d1:ba:
ad:b3:8c:5a:bb:d8:63:2a:f7:da:23:93:23:60:8e:84:3e:5c:
cd:2f:d3:20:de:39:1c:68:4b:38:71:0a:8a:4b:1b:c7:52:cc:
96:db:d4:9e:ea:cd:2b:ce:2c:a6:ca:78:d9:dd:72:9c:e2:21:
42:5c:c1:8d:11:32:73:ac:3f:b7:87:1e:7c:a9:d7:ca:14:dd:
f2:60:e2:d4:30:53:64:7c:0e:22:25:2b:9a:05:6c:49:17:e6:
a7:a8:0a:52:79:d9:bb:76:44:e5:f8:ca:32:53:d9:32:f6:a3:
86:fe:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:02:27 2026 by rpki-client