Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/HhTFj39XJ-U0T_CAmtgoO1NitJI.roa
File: HhTFj39XJ-U0T_CAmtgoO1NitJI.roa (raw, json)
Hash identifier: Xg+8JzKBp7rIlCBWKngktHXXH54GZuJRQRMldgMtANE=
Subject key identifier: 1E:14:C5:8F:7F:57:27:E5:34:4F:F0:80:9A:D8:28:3B:53:62:B4:92
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A135350AE8E08CEF5B5CC3C86C4B057D56
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/HhTFj39XJ-U0T_CAmtgoO1NitJI.roa
Signing time: Tue 13 Oct 2026 12:20:31 +0000
ROA not before: Tue 13 Oct 2026 12:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.211.0/24 maxlen: 24
5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:35:0a:e8:e0:8c:ef:5b:5c:c3:c8:6c:4b:05:7d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Oct 13 12:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e14c58f7f5727e5344ff0809ad8283b5362b492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:6f:14:e1:46:b7:7f:d5:6e:b3:ba:9d:39:
d7:db:c2:5f:55:ef:b9:d4:df:d2:e0:b4:a2:cb:57:
0d:05:22:d6:2c:6e:d0:f0:46:4e:25:15:71:b4:c4:
d1:c1:97:30:26:e9:11:64:ff:c8:ad:4f:27:e0:f2:
fb:a2:ec:9d:c0:a1:2c:2c:56:f0:39:ec:93:d6:83:
6d:4e:e0:91:e1:ae:cc:1a:a0:a3:13:f4:72:f1:98:
58:38:63:48:0e:3a:36:cb:b6:a4:a2:c3:30:79:73:
09:82:eb:ee:94:d1:cf:56:37:d1:17:19:cf:df:ae:
d2:87:a5:7a:5d:e4:05:20:4a:e1:dd:fc:4b:02:6c:
55:0f:aa:f8:2b:cf:cf:06:9b:6e:c2:75:95:2f:2e:
4c:ba:8c:13:24:2d:05:39:f8:c1:4f:24:fb:cb:ec:
16:39:50:9b:16:9c:33:06:08:25:47:8e:eb:05:32:
91:fb:d9:83:dd:c6:15:87:4c:19:7b:0b:d8:ff:79:
1b:f9:0a:2c:3c:11:68:86:13:71:59:d6:ac:1e:cb:
a0:b6:0a:cc:2b:c8:4f:9f:e1:7c:77:11:5b:cb:37:
17:53:b5:e8:b6:9e:46:44:55:5f:cd:57:f1:88:44:
a0:bf:7a:2a:da:f3:31:e8:22:fb:48:4f:3a:31:85:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:C5:8F:7F:57:27:E5:34:4F:F0:80:9A:D8:28:3B:53:62:B4:92
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/HhTFj39XJ-U0T_CAmtgoO1NitJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.211.0/24
5.10.216.0/24
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
10:11:60:cd:ff:7e:95:5e:48:1d:4e:0b:30:ba:70:50:e5:83:
5e:96:74:03:33:ea:91:f5:c8:24:f4:ba:28:e6:d1:b6:25:8c:
df:28:0d:1b:d2:e6:91:27:b5:ac:25:33:57:f3:62:a0:c8:29:
7e:02:30:12:31:84:6c:80:1b:0e:ab:9f:00:4d:05:58:ca:b9:
5b:8e:f4:65:d8:53:9e:02:90:44:44:16:b3:46:fd:c7:f0:30:
a1:c3:9e:4c:99:bf:4c:61:06:e6:ed:94:0e:a2:3a:33:1b:cd:
6a:ae:83:be:69:71:0d:2a:ca:ec:a9:6c:9c:7a:cd:2c:31:d2:
92:af:43:0b:bf:cc:af:bf:f5:d2:ad:5d:e7:53:c6:26:d2:57:
0f:0f:13:ed:29:65:f4:b2:23:37:85:15:b2:e9:ad:60:cb:70:
ec:ec:1b:47:9d:22:23:60:e3:cd:31:bf:74:e9:09:b0:b0:61:
64:26:30:8b:45:96:a4:f8:2a:fa:8d:71:7a:9e:bc:39:31:98:
44:c6:ac:29:90:6a:66:b7:36:bb:0e:9e:df:35:e3:28:f3:b6:
10:9d:9b:18:36:0a:30:d5:4a:1e:1f:20:7d:fa:52:47:ae:eb:
da:4d:5a:c3:66:8d:d7:74:03:e5:61:24:06:48:29:98:93:9f:
e1:b3:7c:b0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaE1NQro4IzvW1zDyGxLBX1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjYxMDEzMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTE0YzU4ZjdmNTcyN2U1MzQ0ZmYwODA5YWQ4MjgzYjUzNjJiNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb5vFOFGt3/VbrO6nTnX28JfVe+5
1N/S4LSiy1cNBSLWLG7Q8EZOJRVxtMTRwZcwJukRZP/IrU8n4PL7ouydwKEsLFbw
OeyT1oNtTuCR4a7MGqCjE/Ry8ZhYOGNIDjo2y7akosMweXMJguvulNHPVjfRFxnP
367Sh6V6XeQFIErh3fxLAmxVD6r4K8/PBptuwnWVLy5MuowTJC0FOfjBTyT7y+wW
OVCbFpwzBgglR47rBTKR+9mD3cYVh0wZewvY/3kb+QosPBFohhNxWdasHsugtgrM
K8hPn+F8dxFbyzcXU7Xotp5GRFVfzVfxiESgv3oq2vMx6CL7SE86MYUNCwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB4UxY9/VyflNE/wgJrYKDtTYrSSMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvSGhURmozOVhKLVUwVF9DQW10Z29PMU5pdEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABQrTAwQA
BQrYAwQABQreMA0GCSqGSIb3DQEBCwUAA4IBAQAQEWDN/36VXkgdTgswunBQ5YNe
lnQDM+qR9cgk9Loo5tG2JYzfKA0b0uaRJ7WsJTNX82KgyCl+AjASMYRsgBsOq58A
TQVYyrlbjvRl2FOeApBERBazRv3H8DChw55Mmb9MYQbm7ZQOojozG81qroO+aXEN
KsrsqWyces0sMdKSr0MLv8yvv/XSrV3nU8Ym0lcPDxPtKWX0siM3hRWy6a1gy3Ds
7BtHnSIjYOPNMb906QmwsGFkJjCLRZak+Cr6jXF6nrw5MZhExqwpkGpmtza7Dp7f
NeMo87YQnZsYNgow1UoeHyB9+lJHruvaTVrDZo3XdAPlYSQGSCmYk5/hs3yw
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:46 2026 by rpki-client