Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HpPXY2SzhUxs5d5YtNO8k82-ZRA.roa
File: HpPXY2SzhUxs5d5YtNO8k82-ZRA.roa (raw, json)
Hash identifier: TG8vghbDQZIAvJdjaD9zGp4ffGuD+6sXAfEc50Yq0xM=
Subject key identifier: 1E:93:D7:63:64:B3:85:4C:6C:E5:DE:58:B4:D3:BC:93:CD:BE:65:10
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E172E7C0083BBEAE745D6108C145
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HpPXY2SzhUxs5d5YtNO8k82-ZRA.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 185.244.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:72:e7:c0:08:3b:be:ae:74:5d:61:08:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e93d76364b3854c6ce5de58b4d3bc93cdbe6510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:c0:ca:04:35:b4:24:bd:02:8f:23:5b:fc:
26:5e:e6:e7:4c:63:7f:e1:58:82:15:37:e8:99:7f:
53:a8:bd:fd:c6:ee:0c:a5:5e:0a:e0:e5:d2:2c:c7:
03:6c:3d:43:08:de:85:a0:ac:7a:c8:d7:b9:95:dc:
f9:2f:a6:a6:7a:ca:e6:7b:5b:02:a4:c0:5d:db:7c:
e3:80:a4:82:42:2a:ca:04:4b:2a:65:90:b7:35:8f:
61:43:1d:d3:fa:20:89:09:71:12:81:4e:6e:ed:c0:
20:0f:cb:5a:8e:64:6b:1c:65:45:95:7f:b7:e7:67:
c4:d6:75:99:4a:09:4b:5f:76:21:4f:01:e6:b2:1a:
e5:6e:ec:b0:2a:ba:99:7d:df:5c:22:29:26:6b:0a:
e7:3e:00:56:6f:e4:59:08:bc:c4:8e:d6:0e:44:3d:
5c:a8:e4:2d:ad:12:24:a7:9e:4d:8b:31:96:eb:e3:
27:71:9c:cb:eb:ce:1d:83:15:1e:d7:6a:7d:d6:ac:
fd:02:f9:d7:34:f6:4d:f4:1e:12:e8:c3:52:37:0e:
04:5c:e3:b4:9e:ed:9d:13:7b:0d:be:7e:95:37:90:
5a:a0:2d:d4:ac:24:b1:6c:b2:e4:ab:9f:75:a5:d7:
ac:af:d6:6c:f8:a2:1e:91:2c:1c:c6:88:11:e6:25:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:93:D7:63:64:B3:85:4C:6C:E5:DE:58:B4:D3:BC:93:CD:BE:65:10
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HpPXY2SzhUxs5d5YtNO8k82-ZRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bb:8b:ed:85:94:03:b0:4c:45:27:ff:d4:b2:c3:ea:f5:e5:
7b:3d:9b:56:9b:70:34:f2:93:ca:d7:68:2a:27:3b:a3:f7:b5:
df:1d:9d:1e:0a:61:1f:24:b8:ad:db:4e:3f:19:90:0f:ec:54:
15:a8:80:5b:02:77:7d:ac:1f:52:46:c3:91:96:95:5c:cc:92:
fd:60:6b:6f:9b:75:43:5c:fe:a1:bd:ae:ec:55:e0:eb:54:ef:
76:fa:60:bb:8a:77:30:07:99:e6:c0:a6:5b:90:04:95:f6:bc:
07:ab:7d:1d:9e:e0:fa:25:38:2c:44:93:36:7c:2a:d7:6e:25:
3a:c7:2e:a6:69:75:9f:4f:6c:b7:6e:28:2c:ee:de:4f:0d:c0:
05:3d:a4:46:db:70:27:1c:72:75:f4:a7:2c:2e:e7:e1:13:3e:
bb:7c:90:04:d5:5a:05:8c:6c:30:51:12:7b:20:47:ca:25:3d:
43:1c:5b:92:aa:2c:a4:29:a7:b8:51:13:0f:d2:9a:e4:ab:05:
9d:5d:a0:bd:96:d1:af:ed:f2:9b:30:ca:09:2f:62:48:eb:47:
84:bf:9a:76:e4:81:6a:c3:87:17:17:1b:65:85:76:9c:a4:b7:
68:6e:dd:8b:cd:90:0b:f0:39:1c:64:34:79:0e:95:ea:ba:ba:
d4:3c:5f:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaOFy58AIO76udF1hCMFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTkzZDc2MzY0YjM4NTRjNmNlNWRlNThiNGQzYmM5M2NkYmU2NTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkfAygQ1tCS9Ao8jW/wmXubnTGN/
4ViCFTfomX9TqL39xu4MpV4K4OXSLMcDbD1DCN6FoKx6yNe5ldz5L6amesrme1sC
pMBd23zjgKSCQirKBEsqZZC3NY9hQx3T+iCJCXESgU5u7cAgD8tajmRrHGVFlX+3
52fE1nWZSglLX3YhTwHmshrlbuywKrqZfd9cIikmawrnPgBWb+RZCLzEjtYORD1c
qOQtrRIkp55NizGW6+MncZzL684dgxUe12p91qz9AvnXNPZN9B4S6MNSNw4EXOO0
nu2dE3sNvn6VN5BaoC3UrCSxbLLkq591pdesr9Zs+KIekSwcxogR5iXTPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6T12Nks4VMbOXeWLTTvJPNvmUQMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvSHBQWFkyU3poVXhzNWQ1WXROTzhrODItWlJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufSvMA0G
CSqGSIb3DQEBCwUAA4IBAQCNu4vthZQDsExFJ//UssPq9eV7PZtWm3A08pPK12gq
Jzuj97XfHZ0eCmEfJLit204/GZAP7FQVqIBbAnd9rB9SRsORlpVczJL9YGtvm3VD
XP6hva7sVeDrVO92+mC7incwB5nmwKZbkASV9rwHq30dnuD6JTgsRJM2fCrXbiU6
xy6maXWfT2y3bigs7t5PDcAFPaRG23AnHHJ19KcsLufhEz67fJAE1VoFjGwwURJ7
IEfKJT1DHFuSqiykKae4URMP0prkqwWdXaC9ltGv7fKbMMoJL2JI60eEv5p25IFq
w4cXFxtlhXacpLdobt2LzZAL8DkcZDR5DpXqurrUPF/E
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client