Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/hmbiAgILODH-19HoC5IuydkCSIc.roa
File: hmbiAgILODH-19HoC5IuydkCSIc.roa (raw, json)
Hash identifier: QWw9cp6g2MsHGOQThqrJzqfLHaqPLS5ug0EanzJlcKA=
Subject key identifier: 86:66:E2:02:02:0B:38:31:FE:D7:D1:E8:0B:92:2E:C9:D9:02:48:87
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019C569728A60985E0F3ABAAA132D2D3F252
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/hmbiAgILODH-19HoC5IuydkCSIc.roa
Signing time: Fri 13 Feb 2026 10:41:12 +0000
ROA not before: Fri 13 Feb 2026 10:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35266
IP address blocks: 46.30.8.0/21 maxlen: 24
185.69.12.0/22 maxlen: 24
185.69.12.0/24 maxlen: 24
185.69.13.0/24 maxlen: 24
185.69.14.0/23 maxlen: 24
185.81.188.0/22 maxlen: 24
2a01:b000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:97:28:a6:09:85:e0:f3:ab:aa:a1:32:d2:d3:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Feb 13 10:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8666e202020b3831fed7d1e80b922ec9d9024887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:5f:f5:99:f9:bd:cf:f8:59:1a:6d:10:6e:
6d:6b:46:63:b9:9d:4c:06:57:90:bf:b5:54:e4:c8:
a4:28:52:5b:b2:a5:19:f5:09:d4:56:87:d2:a1:93:
e2:b5:0d:0b:9c:b5:7b:29:6b:49:77:87:2a:d8:13:
ce:34:ea:37:67:36:52:67:ba:2c:25:47:ac:22:e5:
54:73:4f:50:b3:84:da:fe:ab:f7:79:74:02:f1:4d:
be:69:8c:89:0e:b1:25:15:75:41:e7:38:94:04:da:
ac:c2:5c:1d:10:36:de:cb:c8:98:2c:84:97:93:c9:
a9:92:5d:8c:8f:51:62:1d:8d:29:90:4f:44:1c:c8:
fc:60:28:20:b0:e6:6c:98:1a:56:63:ee:e5:e1:ab:
28:49:15:9a:0b:9b:62:6e:0b:6a:34:90:d4:b1:0b:
3c:26:ed:4a:d0:0f:79:be:56:a5:c4:51:d4:93:4b:
59:bd:4d:bf:e6:fe:22:d2:77:e6:fd:fb:c6:12:69:
cb:e5:0f:ec:ee:f1:77:06:f7:bf:d2:10:b9:9c:d1:
4e:bb:d7:ce:92:46:91:35:7c:02:c4:8a:6d:56:c4:
9d:08:62:11:98:c0:4b:15:34:95:74:bb:1d:53:82:
71:ba:a7:0e:ff:ac:7b:6d:b4:f2:8b:95:60:e0:3b:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:E2:02:02:0B:38:31:FE:D7:D1:E8:0B:92:2E:C9:D9:02:48:87
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/hmbiAgILODH-19HoC5IuydkCSIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.8.0/21
185.69.12.0/22
185.81.188.0/22
IPv6:
2a01:b000::/32
Signature Algorithm: sha256WithRSAEncryption
8d:8b:f8:4c:b6:16:1d:4c:92:07:41:c3:0e:f5:94:32:7d:ce:
0b:16:e5:7a:c6:59:ac:2f:02:24:7a:97:d7:77:ec:35:af:10:
1f:4a:86:e0:3c:96:8c:84:0a:bc:7d:05:8f:c8:cf:5c:f4:3f:
32:12:ea:d9:10:ce:ae:25:c7:4a:3c:e7:1f:e1:53:f0:e5:7a:
a6:ac:d3:65:51:2b:f2:6f:fb:ac:fd:35:67:00:20:f6:68:45:
75:a6:ce:29:6a:c0:6f:41:f8:e3:d5:e5:e4:a1:2e:80:9f:ea:
7d:fa:66:a5:39:56:ab:14:98:c7:7c:ca:a6:c7:c0:1e:e6:f6:
85:b9:48:d5:4a:78:83:92:f4:16:9e:e1:2a:28:83:96:4e:0e:
a6:e0:29:77:3d:f2:1b:03:ab:7e:73:31:17:ac:44:25:61:b1:
29:85:4b:87:ee:c3:da:b2:81:97:b2:88:09:b9:23:87:3d:d5:
bc:ac:d9:67:02:d3:74:b8:a4:94:e0:62:d0:b3:28:39:06:6d:
48:83:65:0d:af:b2:a3:f4:cb:d7:ce:57:2c:09:9f:6f:b3:d8:
79:36:09:fb:db:0d:c7:bc:17:54:d1:94:4e:7d:5d:77:8e:3f:
3d:ba:95:dd:2d:85:97:44:09:b6:d9:92:bb:d0:bd:3e:37:45:
6d:3f:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:52 2026 by rpki-client