Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hs2OIRWBuqmnIWvUccERRu9FCe4.roa
File: hs2OIRWBuqmnIWvUccERRu9FCe4.roa (raw, json)
Hash identifier: RfszCVZUZsNY8ky9xMCcZJRqZ/BxKibUjxLHx7kZZSw=
Subject key identifier: 86:CD:8E:21:15:81:BA:A9:A7:21:6B:D4:71:C1:11:46:EF:45:09:EE
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F70881634819226DA62673F9CE4108276
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hs2OIRWBuqmnIWvUccERRu9FCe4.roa
Signing time: Fri 17 Jul 2026 14:43:14 +0000
ROA not before: Fri 17 Jul 2026 14:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 45.150.168.0/22 maxlen: 24
45.151.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:88:16:34:81:92:26:da:62:67:3f:9c:e4:10:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 14:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86cd8e211581baa9a7216bd471c11146ef4509ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:a8:56:6c:e2:37:fd:45:15:a2:59:c0:cf:
f6:9a:a4:fa:c4:64:81:e3:76:30:ce:a1:1b:44:6c:
dd:1b:ac:a7:f7:6c:71:e5:3a:eb:e0:8c:7a:d0:69:
ff:3b:26:59:6b:65:35:39:7f:8b:59:22:8c:24:dc:
48:44:06:47:27:c0:33:88:79:14:36:77:b3:2a:66:
15:94:dd:11:af:0a:84:2c:c8:ca:34:98:69:fb:f1:
3b:f0:51:d0:c2:d8:90:96:9a:d3:ce:b4:30:bc:20:
82:d0:17:72:b5:ab:35:dd:9c:71:a2:bc:f2:b4:89:
bb:e4:bf:6d:77:7a:53:2b:2b:22:1e:3f:77:27:70:
7d:43:ed:ea:88:4f:19:f1:e1:81:57:5e:f6:f6:53:
16:64:66:e7:32:93:b0:e5:e5:96:12:e9:5c:9b:26:
fc:a4:22:ec:d3:2e:ea:8c:e7:a2:69:a8:12:0a:38:
fb:fb:b4:93:b9:39:93:79:6f:a6:ba:38:1c:61:c6:
c3:63:a0:cc:40:c5:e9:5e:b4:ba:67:f2:91:98:9c:
39:5a:45:da:77:a5:ee:5f:7f:d2:da:48:cb:74:c1:
2c:11:6c:6f:e6:2a:13:d2:9c:dd:3d:2e:00:48:7f:
49:15:7b:04:d4:a6:66:b3:4a:fb:7c:7f:64:6b:37:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:8E:21:15:81:BA:A9:A7:21:6B:D4:71:C1:11:46:EF:45:09:EE
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hs2OIRWBuqmnIWvUccERRu9FCe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
45.151.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:2a:37:da:8f:13:5c:40:93:97:69:a8:a2:b0:45:08:7a:2c:
d7:4c:13:55:a8:97:f1:ba:cd:6d:1b:d0:98:5c:9b:b2:81:5d:
7e:d9:e5:61:85:c9:89:9d:49:c5:2b:62:30:fa:9b:e3:67:83:
e1:58:ca:05:b9:d9:2d:43:3a:2a:9d:4f:c7:63:b4:e5:78:a5:
ec:12:9d:d8:62:47:a9:ef:ac:c9:6f:97:36:7c:ef:c2:30:24:
67:6e:71:30:40:67:be:59:27:af:59:37:0b:a8:67:4d:58:1c:
6e:79:f2:49:07:4e:d3:67:e2:09:2e:b3:5a:81:51:89:e3:01:
46:35:da:b6:32:13:0b:b7:69:4e:81:c6:eb:87:86:f4:8f:14:
bd:ba:64:85:f2:79:70:cf:ac:95:e7:85:fc:75:e6:86:9a:c9:
96:e3:50:bc:2e:a9:27:88:1b:da:bc:f6:9e:77:aa:56:ff:47:
e3:b0:1a:f6:5f:bf:5b:11:c8:de:e2:48:cd:2e:7e:f0:11:07:
72:3b:cc:2d:b3:86:b3:1a:66:15:15:72:c0:11:84:9c:b0:36:
19:72:a8:b0:ac:79:c7:9f:00:9d:23:29:2c:09:60:fb:98:00:
e6:57:5d:ab:d2:95:26:c6:ce:db:2d:67:a1:19:42:18:8e:15:
8a:9b:55:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9wiBY0gZIm2mJnP5zkEIJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwNzE3MTQ0MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmNkOGUyMTE1ODFiYWE5YTcyMTZiZDQ3MWMxMTE0NmVmNDUwOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWyoVmziN/1FFaJZwM/2mqT6xGSB
43YwzqEbRGzdG6yn92xx5Trr4Ix60Gn/OyZZa2U1OX+LWSKMJNxIRAZHJ8AziHkU
NnezKmYVlN0RrwqELMjKNJhp+/E78FHQwtiQlprTzrQwvCCC0Bdytas13Zxxorzy
tIm75L9td3pTKysiHj93J3B9Q+3qiE8Z8eGBV1729lMWZGbnMpOw5eWWEulcmyb8
pCLs0y7qjOeiaagSCjj7+7STuTmTeW+mujgcYcbDY6DMQMXpXrS6Z/KRmJw5WkXa
d6XuX3/S2kjLdMEsEWxv5ioT0pzdPS4ASH9JFXsE1KZms0r7fH9kazfPOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIbNjiEVgbqppyFr1HHBEUbvRQnuMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvaHMyT0lSV0J1cW1uSVd2VWNjRVJSdTlGQ2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZaoAwQC
LZfEMA0GCSqGSIb3DQEBCwUAA4IBAQBPKjfajxNcQJOXaaiisEUIeizXTBNVqJfx
us1tG9CYXJuygV1+2eVhhcmJnUnFK2Iw+pvjZ4PhWMoFudktQzoqnU/HY7TleKXs
Ep3YYkep76zJb5c2fO/CMCRnbnEwQGe+WSevWTcLqGdNWBxuefJJB07TZ+IJLrNa
gVGJ4wFGNdq2MhMLt2lOgcbrh4b0jxS9umSF8nlwz6yV54X8deaGmsmW41C8Lqkn
iBvavPaed6pW/0fjsBr2X79bEcje4kjNLn7wEQdyO8wts4azGmYVFXLAEYScsDYZ
cqiwrHnHnwCdIyksCWD7mADmV12r0pUmxs7bLWehGUIYjhWKm1Wo
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:49 2026 by rpki-client