Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1HWLWKAH81ZT8FqcjP1SBuGtW5k.roa
File: 1HWLWKAH81ZT8FqcjP1SBuGtW5k.roa (raw, json)
Hash identifier: fg11glBNzaw/ElQVDT01E4qpG0/NcDn/GhjVa/l2Ev0=
Subject key identifier: D4:75:8B:58:A0:07:F3:56:53:F0:5A:9C:8C:FD:52:06:E1:AD:5B:99
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A163E755962AE42E4F9BDB76F12860CA6A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1HWLWKAH81ZT8FqcjP1SBuGtW5k.roa
Signing time: Thu 22 Oct 2026 13:57:47 +0000
ROA not before: Thu 22 Oct 2026 13:57:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 45.89.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:e7:55:96:2a:e4:2e:4f:9b:db:76:f1:28:60:ca:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 13:57:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4758b58a007f35653f05a9c8cfd5206e1ad5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:d6:d7:a9:58:de:0b:9f:0a:34:f0:08:83:
15:92:31:36:01:8c:e8:7f:73:ec:8e:88:9e:66:e3:
82:05:93:62:c0:1b:a3:55:bc:71:d0:eb:82:7f:c7:
b7:5b:5e:bd:bc:75:c2:7e:cf:8e:6a:a6:b9:27:bd:
d0:e9:f3:79:e2:79:ef:76:b2:e2:8d:f9:fb:9e:df:
fe:55:62:1e:d1:d0:97:16:db:61:b9:f6:ba:c8:52:
28:7c:9f:0f:32:1f:93:96:d8:97:d6:b7:d1:c1:01:
52:9d:5d:27:fd:e7:d0:9f:03:47:25:ca:c9:a0:28:
2a:cb:fb:f2:44:39:35:41:ea:f6:e1:a7:e1:0d:16:
72:cb:0e:24:fc:02:4d:67:f3:de:c5:e8:67:7c:18:
81:1b:7c:93:c0:d3:d8:47:62:a0:21:bd:bb:27:1a:
62:53:fb:ce:ce:e7:69:b8:c8:a4:2b:0f:86:66:07:
db:1f:cd:b8:87:1b:02:c2:c5:19:ba:89:23:30:70:
8f:6d:18:1e:42:07:87:b0:1d:59:ab:7f:43:22:1f:
c6:6c:61:f9:87:99:bd:56:11:a1:72:3b:84:82:5a:
5d:a9:9e:b0:58:e8:2c:8d:c2:c5:e0:cd:0e:aa:7a:
08:9d:43:40:db:fc:6b:91:c4:79:87:8a:4e:91:74:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:75:8B:58:A0:07:F3:56:53:F0:5A:9C:8C:FD:52:06:E1:AD:5B:99
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1HWLWKAH81ZT8FqcjP1SBuGtW5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.244.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b0:21:57:61:c2:8a:6c:be:74:fc:b0:58:86:2c:37:74:99:
43:75:53:74:09:7a:8e:fc:c7:e5:11:0e:65:87:a1:9f:56:d7:
dd:9b:60:a2:bb:7b:f2:18:3f:0a:c7:94:6f:99:c2:58:ad:6c:
58:38:92:9a:0e:27:c8:20:77:6c:d2:f6:22:cf:84:21:c4:c3:
d6:5b:72:22:9b:be:d4:91:8b:23:c2:91:ff:c8:4e:86:29:dd:
a2:32:91:d9:f4:7e:59:32:7f:29:00:d5:0f:78:27:b4:6e:49:
9c:ea:4b:29:57:10:c4:7f:98:88:37:09:0e:eb:a7:d8:1a:0b:
7d:b1:1b:80:51:8d:11:92:98:a7:90:0b:1f:24:1a:9a:0d:e1:
78:f4:c3:52:ac:0e:f1:98:6c:16:2f:c0:c5:b3:6a:a3:bf:6c:
c0:9c:ae:f0:70:ac:ff:59:89:78:da:7e:db:93:87:9f:28:56:
85:51:7a:68:a7:aa:7b:ea:b9:44:5a:62:cb:1f:03:53:7d:af:
23:1a:e8:62:14:92:fe:82:8e:6b:5f:48:93:fc:ff:54:62:8a:
f7:a7:39:30:a3:f0:9a:1c:28:f8:6a:3c:fa:0b:22:ab:2b:2d:
a2:40:bc:ad:79:24:0e:9a:9d:ae:cf:8b:21:8c:ba:c7:22:df:
32:6c:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:06:06 2026 by rpki-client