Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HB-2VD0pJq5XKskzxPMWVbcU7mQ.roa
File: HB-2VD0pJq5XKskzxPMWVbcU7mQ.roa (raw, json)
Hash identifier: rWoNVB1/pmm02k6Jh97qWEcZjGwQYb7b1gBZBpfPIYM=
Subject key identifier: 1C:1F:B6:54:3D:29:26:AE:57:2A:C9:33:C4:F3:16:55:B7:14:EE:64
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A05BFBB34513E43815193A75775095D933
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HB-2VD0pJq5XKskzxPMWVbcU7mQ.roa
Signing time: Tue 01 Sep 2026 08:00:17 +0000
ROA not before: Tue 01 Sep 2026 08:00:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 32
45.154.99.0/24 maxlen: 32
62.3.50.0/24 maxlen: 32
194.28.96.0/24 maxlen: 32
194.28.98.0/23 maxlen: 32
2a0c:b640::/32 maxlen: 128
2a0c:b641::/44 maxlen: 128
2a0c:b641:10::/44 maxlen: 128
2a0c:b641:50::/44 maxlen: 128
2a0c:b641:60::/44 maxlen: 128
2a0c:b641:530::/44 maxlen: 128
2a0c:b641:5e0::/44 maxlen: 48
2a0c:b641:660::/44 maxlen: 44
2a0c:b641:6d0::/44 maxlen: 128
2a0c:b641:70f::/48 maxlen: 128
2a0c:b641:730::/44 maxlen: 128
2a0c:b641:910::/44 maxlen: 128
2a0f:8400::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:fb:b3:45:13:e4:38:15:19:3a:75:77:50:95:d9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 1 08:00:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c1fb6543d2926ae572ac933c4f31655b714ee64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:e8:f3:c0:43:92:5a:c8:f4:b0:b3:dc:30:
b4:47:22:3b:01:f5:98:cf:3a:62:4c:1c:02:0a:31:
bb:bb:b9:1e:9b:74:fb:7c:01:2e:61:6d:d8:c3:40:
b1:7f:40:c5:e9:d0:b8:5a:d5:73:4b:7c:17:ff:04:
ae:3d:b4:de:24:7c:0b:42:da:12:34:a9:8d:ea:c2:
a3:8a:57:65:83:72:3b:16:25:0c:c2:ab:6e:bf:4c:
3f:e9:d6:91:7f:d8:b5:9b:20:3d:a9:6b:a7:82:d5:
ba:64:b8:b3:f5:82:63:49:41:7e:c8:15:8a:01:6c:
7e:01:73:66:4d:9b:09:ea:0d:51:82:2d:5c:95:b2:
f9:9b:e0:1f:29:55:c4:e9:9b:b9:70:97:0f:5d:66:
c1:cc:e1:b4:5c:33:ec:0f:3a:4d:28:f4:ea:61:c3:
ad:ff:42:be:d1:dc:11:64:52:a7:8c:98:7f:90:26:
ee:83:89:30:e5:66:76:14:59:9e:c9:ab:8d:ba:5e:
32:18:e7:0c:86:08:ca:a0:8f:92:fc:b1:92:ed:ed:
34:ac:b1:89:bf:3d:db:eb:11:d2:84:be:c8:b0:15:
46:c4:a1:e9:09:a5:d2:ed:43:88:ae:40:94:cc:3d:
e4:42:15:ad:ff:ac:7d:f5:ba:1a:7a:e3:5a:71:38:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:B6:54:3D:29:26:AE:57:2A:C9:33:C4:F3:16:55:B7:14:EE:64
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HB-2VD0pJq5XKskzxPMWVbcU7mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
45.154.99.0/24
62.3.50.0/24
194.28.96.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::/44
2a0c:b641:5e0::/44
2a0c:b641:660::/44
2a0c:b641:6d0::/44
2a0c:b641:70f::/48
2a0c:b641:730::/44
2a0c:b641:910::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
53:52:c3:ee:df:5f:8c:12:e1:9b:e6:0e:af:b9:71:08:bf:21:
49:94:8e:47:4e:66:fa:28:8e:b8:04:b0:9f:cf:34:5c:0f:68:
10:e9:bd:ba:db:68:9b:56:ec:85:3e:73:c4:ab:2e:a6:8a:b2:
5d:af:01:b7:d8:20:51:d7:ba:5e:48:0d:e5:98:ca:3c:48:a5:
ff:05:a8:18:5a:27:f3:0c:10:35:aa:16:3c:9e:6d:c7:53:32:
ee:10:8a:de:e4:4a:60:80:f1:d1:4a:70:87:d1:bc:38:25:de:
8f:ae:e5:8d:e9:4b:1b:c4:87:44:6f:00:1e:74:9e:4e:be:4d:
a1:c7:89:c6:57:02:3a:41:31:ab:41:e6:3f:75:00:b1:b5:ea:
ad:fc:fe:12:8a:e4:87:46:36:78:62:a8:ea:dc:10:82:3f:ff:
e3:57:62:2f:48:4d:1d:3c:16:a5:df:cd:d8:f8:f8:cd:7e:81:
bd:72:6c:ba:bd:dd:01:c6:12:62:4f:d2:4f:50:c4:86:17:2f:
a3:3f:ac:bc:76:3b:63:28:a6:06:d7:8f:78:36:1e:96:66:9d:
a4:a3:2e:55:79:7b:7a:ff:bd:81:2d:a3:d6:76:88:ae:82:cf:
97:5c:7c:93:e0:27:1b:d2:8a:7b:1c:4e:bd:e9:da:81:08:66:
9e:03:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:28 2026 by rpki-client