Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa
File: hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa (raw, json)
Hash identifier: EYq3/vGPN6jy3lzOn8yHeB4uOnE5CknSB12P3oGEmTQ=
Subject key identifier: 86:66:F7:4A:3D:8A:59:40:0C:4D:F1:98:71:65:4B:93:42:8C:46:18
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019D9A30C747C3DC8CD0B77677E5BFF6C9A9
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa
Signing time: Fri 17 Apr 2026 06:46:21 +0000
ROA not before: Fri 17 Apr 2026 06:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 213.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:30:c7:47:c3:dc:8c:d0:b7:76:77:e5:bf:f6:c9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 17 06:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8666f74a3d8a59400c4df19871654b93428c4618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:34:f4:1f:09:59:d9:80:39:99:4e:b6:5c:
6e:1f:58:56:3a:8a:8d:cc:42:69:a8:67:75:ae:81:
29:f7:d4:e1:62:1e:81:65:06:50:1f:e4:2e:f3:db:
8e:b1:5e:eb:4a:0e:20:a2:2f:9b:15:41:27:fd:9d:
b2:42:b6:09:ff:8a:b6:0f:23:6b:9b:4e:51:78:9b:
9f:bb:f7:45:e4:01:bf:87:6b:8c:fe:30:9c:1d:0f:
31:da:03:63:a5:1e:f3:9b:a2:37:7d:15:46:7a:01:
e2:6e:ce:ae:9b:2b:35:2a:8d:41:b0:b7:94:d4:e9:
e7:05:87:f8:51:90:1e:b7:8e:6f:db:15:87:ff:29:
f6:61:17:a4:7c:be:21:bc:b2:11:e5:3e:58:1c:5d:
b0:c5:d0:3a:38:c9:0f:f7:10:8e:2d:83:7e:c5:95:
ed:86:d0:f3:54:7e:7c:81:45:33:cf:69:c1:f1:1e:
ab:e3:05:a0:f4:a3:df:46:3a:46:51:db:f0:25:97:
8d:62:52:84:90:17:c4:38:cc:c9:11:ca:33:48:2d:
31:04:68:f2:b5:95:eb:a5:2f:f0:ce:c0:06:c5:e3:
bc:67:84:5f:bd:bd:7a:65:0c:93:f2:d0:73:6e:2f:
1d:8a:f5:70:8b:d9:d2:8b:79:b9:b1:85:5f:c0:a7:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:F7:4A:3D:8A:59:40:0C:4D:F1:98:71:65:4B:93:42:8C:46:18
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9b:44:f4:38:9c:a5:ff:37:d0:d4:0b:59:c2:7a:25:e4:af:
c7:40:89:77:bc:38:7f:4c:ac:7b:0e:c3:34:be:de:e6:fc:c5:
77:b1:86:b1:a8:25:47:e1:81:19:7b:76:f5:40:62:87:c6:17:
60:d8:53:a9:0f:7b:0a:53:37:b8:57:3b:0c:a1:ce:0f:c6:cf:
e8:d4:90:97:96:19:f0:31:b9:74:85:b9:2e:0e:7b:4b:2c:ea:
a4:5d:b4:40:cb:e1:48:85:03:35:2b:b8:cf:07:70:aa:b1:b7:
4b:ed:fe:1f:b9:e0:d9:ac:90:fc:86:27:3f:b0:de:96:bc:a3:
35:9a:d6:f3:18:f8:ce:a5:52:72:ae:3f:04:43:c4:e5:66:cc:
c9:cd:08:c5:d5:94:3a:23:f8:59:3b:14:33:2a:bf:99:a3:cb:
af:da:f6:54:de:57:a6:f0:10:a2:27:2c:20:7f:85:68:2f:07:
e6:8b:f1:2f:82:30:84:37:7f:d0:61:49:18:e1:91:82:0c:c3:
31:98:98:a1:02:d0:f6:60:83:5e:ea:df:f7:33:8d:e0:12:42:
3a:1e:9e:06:6a:ae:c1:37:ef:22:2c:3f:3a:12:d2:78:28:83:
ba:a4:cf:67:1f:3a:b7:a3:6c:6e:c0:86:a4:04:b2:52:6b:a9:
13:e5:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:54 2026 by rpki-client