Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa
File: HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa (raw, json)
Hash identifier: gHtemcwtFR9eD7jL8T2vPWRH/SZxxrNlKmGIkUXMU7A=
Subject key identifier: 1E:EC:13:F6:21:96:22:02:51:C9:40:99:49:29:35:47:B3:AA:64:4B
Certificate issuer: /CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
Certificate serial: 019F236869104EAFD14632E6E7A2FE30E037
Authority key identifier: 63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197615
IP address blocks: 91.223.167.0/24 maxlen: 24
91.224.180.0/23 maxlen: 23
91.230.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:10:4e:af:d1:46:32:e6:e7:a2:fe:30:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eec13f62196220251c9409949293547b3aa644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:35:07:68:08:5e:64:c1:23:17:72:14:74:
d8:96:68:56:e3:45:54:6d:da:7c:3f:b3:a1:79:36:
7a:a7:31:43:ef:ab:d9:be:62:c8:db:aa:af:4f:a0:
e6:6a:b0:02:8a:17:ab:e7:95:0b:d3:97:d8:11:6f:
1f:9b:a6:3f:fb:db:cb:d7:2c:0a:11:a9:e5:79:df:
dd:fa:e7:80:37:5d:9e:71:f1:2c:a3:4c:67:9b:19:
65:76:5f:b0:d2:3c:3a:f8:4c:32:82:e6:24:b1:58:
18:e2:35:19:48:24:ea:a0:af:36:61:5b:21:c6:03:
44:39:05:f1:b3:be:b8:a2:9a:0f:07:55:8c:ff:e7:
f1:d1:9d:93:3b:5f:56:fe:27:db:f7:e5:de:44:61:
2d:50:2f:5c:72:4d:25:b6:79:e3:4e:53:cc:8d:54:
1d:b5:41:fb:cc:34:27:82:04:55:2d:ef:e1:da:35:
81:6a:47:31:48:63:a7:84:ae:28:5f:2c:b8:f7:3d:
86:b5:2d:b1:27:88:02:84:76:62:b5:d4:8b:c5:28:
f2:87:f1:7c:ec:9f:89:a9:8a:d6:3b:2e:30:fd:61:
6d:73:cb:7a:41:07:41:26:76:8a:33:92:75:b0:de:
31:97:97:ac:50:59:68:b4:68:c1:28:e4:dd:e4:fb:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:13:F6:21:96:22:02:51:C9:40:99:49:29:35:47:B3:AA:64:4B
X509v3 Authority Key Identifier:
keyid:63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.167.0/24
91.224.180.0/23
91.230.88.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:f9:f6:e7:84:51:55:5e:b1:72:c8:c0:46:48:be:72:f0:07:
93:a4:cf:c2:a9:ab:96:e4:02:d3:53:b3:eb:30:b0:7f:38:6f:
da:e5:ef:05:ef:f5:76:62:d1:6e:8a:25:d3:29:64:c5:c3:cb:
60:c5:55:b1:65:47:37:bd:e3:24:ca:78:80:84:cd:bc:fc:25:
fa:d8:07:3b:da:fa:e6:be:71:68:f6:9d:9a:73:fc:2c:1c:e4:
7a:8d:9c:7f:5c:2a:de:49:23:f1:a0:09:97:c4:85:38:6b:97:
a2:f4:e0:cc:ab:a9:1c:dd:90:2a:94:01:b6:54:af:15:f7:30:
7d:6a:a8:68:19:0c:13:4b:83:94:4b:23:b5:33:a3:3a:95:b0:
ca:ef:75:2d:0f:d9:86:0b:a4:3c:54:19:a5:50:bb:1d:67:a7:
f5:ac:d5:e1:e7:de:e2:21:b7:56:21:34:4f:a8:24:ef:b8:64:
7a:f1:eb:5c:70:be:64:3e:c7:c7:cb:19:24:eb:26:a2:0b:f1:
31:6a:d7:8b:24:8e:e6:ee:a2:88:37:3c:e8:a8:2f:e1:80:fa:
72:cf:a7:45:8c:12:fd:cb:33:01:e7:27:f8:83:11:c6:52:19:
29:0c:71:34:8b:35:d7:a4:bc:55:0d:b2:1e:74:d5:40:aa:5d:
ab:b6:13:e4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaGkQTq/RRjLm56L+MOA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzE5NDg2NzMwMmVkOTcwNzdmYzEzZjJiYWQ4ZmMxYzIz
Y2RkOGUwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWVjMTNmNjIxOTYyMjAyNTFjOTQwOTk0OTI5MzU0N2IzYWE2NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsA1B2gIXmTBIxdyFHTYlmhW40VU
bdp8P7OheTZ6pzFD76vZvmLI26qvT6DmarACiher55UL05fYEW8fm6Y/+9vL1ywK
Eanled/d+ueAN12ecfEso0xnmxlldl+w0jw6+EwyguYksVgY4jUZSCTqoK82YVsh
xgNEOQXxs764opoPB1WM/+fx0Z2TO19W/ifb9+XeRGEtUC9cck0ltnnjTlPMjVQd
tUH7zDQnggRVLe/h2jWBakcxSGOnhK4oXyy49z2GtS2xJ4gChHZitdSLxSjyh/F8
7J+JqYrWOy4w/WFtc8t6QQdBJnaKM5J1sN4xl5esUFlotGjBKOTd5PvmSQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB7sE/YhliICUclAmUkpNUezqmRLMB8GA1UdIwQY
MBaAFGMxlIZzAu2XB3/BPyutj8HCPN2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXpHVWhuTUM3WmNIZjhFX0s2MlB3Y0k4M1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt
NGViZWVjN2U4Mjc1LzEvSHV3VDlpR1dJZ0pSeVVDWlNTazFSN09xWkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1
LzEvWXpHVWhuTUM3WmNIZjhFX0s2MlB3Y0k4M1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9+nAwQB
W+C0AwQBW+ZYMA0GCSqGSIb3DQEBCwUAA4IBAQC2+fbnhFFVXrFyyMBGSL5y8AeT
pM/CqauW5ALTU7PrMLB/OG/a5e8F7/V2YtFuiiXTKWTFw8tgxVWxZUc3veMkyniA
hM28/CX62Ac72vrmvnFo9p2ac/wsHOR6jZx/XCreSSPxoAmXxIU4a5ei9ODMq6kc
3ZAqlAG2VK8V9zB9aqhoGQwTS4OUSyO1M6M6lbDK73UtD9mGC6Q8VBmlULsdZ6f1
rNXh597iIbdWITRPqCTvuGR68etccL5kPsfHyxkk6yaiC/ExateLJI7m7qKINzzo
qC/hgPpyz6dFjBL9yzMB5yf4gxHGUhkpDHE0izXXpLxVDbIedNVAql2rthPk
-----END CERTIFICATE-----
Generated at Fri Jul 3 23:39:51 2026 by rpki-client