Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/HPQjZqZMBkLOO8wozmYFKEZ2KkA.roa
File: HPQjZqZMBkLOO8wozmYFKEZ2KkA.roa (raw, json)
Hash identifier: jw170ILV6vDaQhmx+FfaYn4b4bXENzgLZdT2bz7qJJ8=
Subject key identifier: 1C:F4:23:66:A6:4C:06:42:CE:3B:CC:28:CE:66:05:28:46:76:2A:40
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0E8EA74AA17019FC4185261936A06CC21
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/HPQjZqZMBkLOO8wozmYFKEZ2KkA.roa
Signing time: Mon 28 Sep 2026 16:47:54 +0000
ROA not before: Mon 28 Sep 2026 16:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:ea:74:aa:17:01:9f:c4:18:52:61:93:6a:06:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 28 16:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cf42366a64c0642ce3bcc28ce66052846762a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:b3:e8:7c:b6:3b:fd:66:af:f5:db:78:de:
76:e0:15:ee:d3:86:a6:d3:6f:be:27:73:dd:7d:93:
9b:85:f0:06:b3:46:49:95:cc:76:6d:49:ae:4a:9c:
f5:43:e6:72:9e:3f:e5:5a:c6:1e:63:66:44:40:1d:
ff:61:e6:d3:52:17:df:b1:1c:8e:7d:7c:2b:ac:c5:
f4:c2:13:4b:33:0e:a3:6a:b2:61:bf:a0:37:e6:ba:
d2:0c:67:d5:4e:0c:87:c5:b7:5d:a0:32:8d:a6:b6:
ab:11:fa:0b:5c:2a:5d:5b:ba:48:76:90:57:5f:4e:
ce:04:aa:58:ea:71:34:43:e7:49:5b:01:ba:17:bf:
b5:ab:96:60:2b:94:4d:31:a8:c4:b0:82:65:1c:0a:
41:38:97:5a:55:98:00:59:9c:cc:68:9a:84:d1:a9:
09:7f:ce:08:a3:a3:8d:75:24:5e:dd:ea:cf:f7:05:
09:c1:7a:65:3e:33:f4:ce:c1:cb:39:f7:53:8a:68:
b4:cd:f3:1b:75:40:71:05:3b:3e:3f:e3:65:f7:04:
3f:41:83:eb:54:02:7c:b3:c9:22:06:c6:9c:65:a2:
23:d0:27:bf:f9:31:cd:fb:9b:9e:25:a9:dd:f8:37:
6d:ae:e4:db:cf:41:67:6c:17:74:e7:42:36:27:20:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:23:66:A6:4C:06:42:CE:3B:CC:28:CE:66:05:28:46:76:2A:40
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/HPQjZqZMBkLOO8wozmYFKEZ2KkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.183.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3b:1e:73:0f:80:10:7c:39:19:04:53:06:b2:1a:95:18:6b:
d0:ea:ed:88:a3:ad:b7:91:9b:75:24:9a:99:db:a3:72:66:9a:
2b:a5:38:ca:f2:31:60:f5:bf:ce:bc:c9:60:e1:41:f4:cb:be:
c2:85:e8:d8:2e:af:27:1e:06:16:e0:6d:15:f1:db:33:9c:1e:
58:61:8a:04:5e:53:04:62:66:ea:a7:73:08:f7:eb:e6:77:2c:
10:b4:08:c8:79:ea:45:cd:f9:da:19:4f:a3:7a:49:30:96:4b:
eb:5f:8c:93:a9:c8:98:9e:2d:21:eb:45:d1:1c:e2:28:a4:36:
fd:59:df:e0:f6:4e:0d:5d:8c:d0:bb:71:18:52:bc:ee:53:1b:
0a:8a:dd:85:74:ac:69:6d:57:bf:79:09:bf:86:7a:13:1f:fc:
59:84:b1:26:f9:cf:47:2f:f7:eb:ae:36:77:43:83:bd:27:c1:
14:88:4a:5b:4f:4c:d2:a6:09:2e:b5:05:d6:7d:22:bf:59:b3:
13:aa:e4:bd:4b:cc:f9:b0:6b:da:e1:02:1e:22:49:3a:fa:25:
94:35:40:13:6c:a4:49:03:0e:54:0a:87:33:8c:37:f1:be:0b:
d1:87:8e:4d:c9:2f:5d:25:80:9a:c4:3e:14:b7:12:4d:0e:1c:
bc:f0:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:04:59 2026 by rpki-client