Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/HVq4LT3LKDiD16ZQHswy0Fh1pd8.roa
File: HVq4LT3LKDiD16ZQHswy0Fh1pd8.roa (raw, json)
Hash identifier: IvlmHI6d0Kx6oU0CEcnxanjVK+2m4JyMZI6pRFv0o7k=
Subject key identifier: 1D:5A:B8:2D:3D:CB:28:38:83:D7:A6:50:1E:CC:32:D0:58:75:A5:DF
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 01A0F8533C346529AE66180369BC8A9A2932
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/HVq4LT3LKDiD16ZQHswy0Fh1pd8.roa
Signing time: Thu 01 Oct 2026 16:36:39 +0000
ROA not before: Thu 01 Oct 2026 16:36:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214123
IP address blocks: 45.150.216.0/24 maxlen: 24
185.36.208.0/24 maxlen: 24
185.183.220.0/24 maxlen: 24
2a0f:4f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:53:3c:34:65:29:ae:66:18:03:69:bc:8a:9a:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Oct 1 16:36:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d5ab82d3dcb283883d7a6501ecc32d05875a5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:b2:88:d2:f4:5b:58:10:09:21:ab:ae:15:
94:3c:43:6f:0a:03:a3:fd:b0:0b:ae:76:a8:9b:21:
5b:af:56:e8:2f:c0:a5:72:bd:2b:36:4b:e5:87:71:
1c:6e:a4:13:e4:40:ae:e4:c6:c2:a9:f5:31:a1:39:
9a:67:54:76:b3:34:ba:bf:5a:e6:7e:56:9b:6d:bd:
6f:a6:4b:8b:9e:cf:96:11:62:a3:7a:96:18:c1:b1:
2b:00:ab:5f:14:fe:1e:7e:d0:49:80:d6:96:84:c3:
fa:91:28:42:56:39:4a:cd:ad:6f:3b:c7:db:ab:5c:
85:99:88:35:6d:5e:85:be:d3:fa:2a:0b:f0:41:a1:
f8:6f:90:21:31:8a:5b:54:46:64:18:81:b5:b2:27:
fa:43:7a:dd:da:39:8a:2b:81:ac:e8:0f:c8:d8:3e:
8f:6a:0a:ca:46:71:4c:62:f7:a1:2b:f6:3c:3b:0d:
6d:0a:79:86:a0:43:d7:79:7e:7b:8a:61:98:92:ab:
bb:61:b5:54:eb:c5:a5:79:65:f1:49:52:c3:19:73:
9c:00:40:b4:5d:ee:3e:77:70:ad:68:e2:10:b8:fa:
c0:7f:64:7f:5f:9b:7a:1d:90:ca:24:31:3b:d7:15:
94:d8:eb:18:f7:1c:99:d8:d3:cc:c8:cb:21:c2:d6:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:B8:2D:3D:CB:28:38:83:D7:A6:50:1E:CC:32:D0:58:75:A5:DF
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/HVq4LT3LKDiD16ZQHswy0Fh1pd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.216.0/24
185.36.208.0/24
185.183.220.0/24
IPv6:
2a0f:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
a0:cf:82:07:b6:52:37:5d:99:93:78:98:e9:7b:36:b7:39:50:
9a:4a:d1:01:f5:cf:60:ef:fc:2d:21:4b:32:bc:2d:6f:bd:0c:
12:b4:f9:d1:ca:89:7d:82:a3:4d:f8:9a:7a:41:14:8c:76:1f:
a7:02:10:99:e2:7a:57:72:25:6a:66:62:35:9e:94:11:ee:d4:
3d:08:5b:48:a1:8d:a2:d7:6a:9e:c6:5a:48:97:52:c5:b4:b9:
1d:af:06:64:eb:f7:fb:79:53:1b:03:84:59:00:14:5f:75:cf:
0a:35:95:62:e8:68:a3:e1:d0:f2:47:65:f0:ef:33:94:77:0e:
07:bb:96:15:d1:de:72:78:75:94:8d:a7:06:ec:ec:ff:ec:41:
88:df:10:bc:16:5a:20:b8:56:de:37:ba:70:84:21:8c:12:01:
81:1e:30:bb:e7:e9:67:a7:87:83:08:94:a9:43:77:73:c2:6e:
d5:b6:fd:16:9e:8b:93:5a:99:42:ca:1e:4c:2c:4d:a1:0f:6e:
37:03:94:ce:8e:cd:29:f4:e0:ac:8e:06:3b:db:14:60:be:c5:
90:c4:9b:7e:18:3f:a2:7e:af:86:87:bb:a9:10:63:c8:23:54:
56:eb:f0:f8:12:80:3a:bd:58:65:0f:26:f0:f2:5b:6e:c4:c3:
62:99:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:06 2026 by rpki-client