Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/hMETGb9VAC5A2KuzQKg4WmxFmJA.roa
File: hMETGb9VAC5A2KuzQKg4WmxFmJA.roa (raw, json)
Hash identifier: rjUrw2hE9fEw4IxQF4Ze8WeXj/DO7a6kjsn9RA2w4Os=
Subject key identifier: 84:C1:13:19:BF:55:00:2E:40:D8:AB:B3:40:A8:38:5A:6C:45:98:90
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A0A5319DBE3D9089350425722E2F170450
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/hMETGb9VAC5A2KuzQKg4WmxFmJA.roa
Signing time: Tue 15 Sep 2026 13:11:27 +0000
ROA not before: Tue 15 Sep 2026 13:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12876
IP address blocks: 78.232.0.0/16 maxlen: 17
78.232.0.0/17 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:31:9d:be:3d:90:89:35:04:25:72:2e:2f:17:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Sep 15 13:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84c11319bf55002e40d8abb340a8385a6c459890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:1e:fb:fa:3c:aa:41:69:89:a6:e9:0c:da:
12:b2:ee:14:07:56:d7:b0:3c:e4:a9:7f:66:d3:e4:
d1:99:81:e5:23:c8:9b:8e:03:c0:b4:a3:b8:53:3d:
85:05:6e:5a:5a:1e:61:c8:53:d7:a9:17:83:d0:7f:
65:9a:f6:65:f7:c5:55:a8:b7:2f:c0:32:c7:8c:03:
96:e3:cc:ea:9a:9c:02:57:dc:5d:3c:19:2e:cc:ac:
54:15:d9:c3:c1:ca:12:69:cc:ee:7a:1f:1e:76:a6:
3c:70:d0:da:29:3a:cf:34:e6:17:2c:1e:4f:c2:42:
43:26:e7:ff:2b:60:0a:cf:83:a7:b3:82:b1:b4:a9:
63:26:ac:73:8e:36:35:43:37:1e:d4:5c:7d:d2:29:
60:f9:aa:94:73:98:05:6a:d4:11:49:fc:be:e6:3f:
68:8f:c8:f7:33:d7:cc:ff:6c:cf:98:b6:34:66:72:
15:f5:d3:d3:34:3e:f8:53:26:8f:c9:88:0a:75:d1:
1e:82:0a:51:bb:65:0b:4a:73:9a:70:9f:d4:57:ef:
65:f8:df:b4:20:81:da:b5:66:b8:70:60:eb:fa:3d:
9e:c0:3d:3a:e5:d3:38:87:d8:76:88:4a:52:a1:54:
72:11:c5:4f:64:44:77:71:f7:e2:c3:c7:1e:54:fb:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C1:13:19:BF:55:00:2E:40:D8:AB:B3:40:A8:38:5A:6C:45:98:90
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/hMETGb9VAC5A2KuzQKg4WmxFmJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:56:f8:33:76:7f:b9:40:8e:e8:dd:3e:c3:3a:a0:dd:d8:6e:
3f:fb:09:44:52:87:b9:03:17:5b:e6:42:ae:fe:e1:b2:66:1e:
bc:12:6c:02:2c:ac:86:84:ac:1a:bd:2a:ef:e2:e9:7d:1e:73:
02:0d:c6:68:e5:6b:a6:e5:a5:d0:12:78:db:98:0d:33:c7:4d:
ca:f4:2b:71:d5:92:a4:fa:bb:13:af:69:d9:a5:b6:1c:c8:fe:
40:30:1a:7e:e4:26:52:7a:43:8d:c5:8c:b5:2f:45:bc:05:97:
b4:50:f3:9c:6c:36:b1:73:08:9e:da:a0:e4:45:4c:31:40:9a:
07:bc:32:d8:1b:cc:6d:72:05:5f:80:a9:cb:26:36:aa:d1:4c:
3f:a2:06:90:9e:25:d8:4b:58:f5:d0:c5:12:48:23:7c:8b:97:
21:77:f4:ed:c2:91:9f:33:79:c0:70:d9:65:78:d4:ef:c9:94:
47:f7:12:bc:cd:e4:3e:33:df:ef:19:88:32:78:82:93:5d:52:
e3:72:ed:68:0c:84:c1:e3:68:c6:c5:75:2c:21:1d:52:f0:da:
bc:96:ff:85:bf:55:b5:22:8d:11:03:b9:d5:33:31:eb:21:c9:
03:26:0e:30:eb:63:91:e2:bc:c5:13:9c:d3:22:f9:56:56:da:
52:e9:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:04 2026 by rpki-client