Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/HaoOQqf2LNVWiPrJi1Z9C18fS38.roa
File: HaoOQqf2LNVWiPrJi1Z9C18fS38.roa (raw, json)
Hash identifier: 5fCEPgReMxBoD9Sr0cn6SShYeWJqx4M4qn9uVgfL54Q=
Subject key identifier: 1D:AA:0E:42:A7:F6:2C:D5:56:88:FA:C9:8B:56:7D:0B:5F:1F:4B:7F
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 019F26FDA0C5915E7E3617E265546B16764F
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/HaoOQqf2LNVWiPrJi1Z9C18fS38.roa
Signing time: Fri 03 Jul 2026 07:59:43 +0000
ROA not before: Fri 03 Jul 2026 07:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47898
IP address blocks: 91.198.249.0/24 maxlen: 24
91.206.252.0/23 maxlen: 24
91.206.253.0/24 maxlen: 24
91.214.136.0/22 maxlen: 22
91.214.136.0/23 maxlen: 23
91.214.138.0/23 maxlen: 23
91.223.122.0/24 maxlen: 24
185.35.8.0/22 maxlen: 24
193.202.118.0/24 maxlen: 24
193.243.156.0/23 maxlen: 23
194.24.236.0/24 maxlen: 24
194.24.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:fd:a0:c5:91:5e:7e:36:17:e2:65:54:6b:16:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Jul 3 07:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1daa0e42a7f62cd55688fac98b567d0b5f1f4b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:c7:6d:e2:b1:50:28:c4:f3:71:3f:b6:5e:
89:71:0b:4b:57:77:c1:92:54:b7:cd:5e:ab:d5:bf:
6c:92:ef:c3:1b:29:fe:06:25:85:d2:d7:aa:51:88:
4e:e2:23:34:19:00:6d:b9:e4:f8:78:e7:94:57:60:
c1:b5:0b:68:35:0d:36:c4:7f:a2:55:bc:25:f6:87:
b7:3e:93:34:7a:ae:b1:67:0f:a5:ca:ac:0e:dc:05:
ea:9e:45:0a:61:26:28:cd:96:24:9d:ff:03:87:c3:
51:85:8b:03:3e:28:79:de:3d:53:1c:40:37:ab:b5:
d8:9b:22:68:dd:b3:5f:e2:db:52:35:ae:d9:b4:b7:
f0:5f:ec:7d:e1:d0:69:f2:37:e8:88:cb:a7:b7:cd:
0f:3b:ca:aa:ff:e1:3c:4f:c3:d4:af:5b:77:46:42:
01:7a:3b:57:d9:43:31:3a:eb:28:7e:51:37:07:b2:
bd:85:d6:90:8d:b3:8f:87:62:bf:1e:4c:48:11:7e:
8d:94:da:94:7e:76:7e:5c:6d:18:9a:04:a6:e7:27:
57:a1:fa:96:d9:d8:d7:78:b1:fc:2c:49:27:f8:ed:
93:ad:5a:1d:e1:16:fb:07:2e:84:2f:d6:d3:b3:51:
06:84:6a:70:0f:e5:df:eb:50:b8:d2:01:95:5e:9f:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:0E:42:A7:F6:2C:D5:56:88:FA:C9:8B:56:7D:0B:5F:1F:4B:7F
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/HaoOQqf2LNVWiPrJi1Z9C18fS38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.249.0/24
91.206.252.0/23
91.214.136.0/22
91.223.122.0/24
185.35.8.0/22
193.202.118.0/24
193.243.156.0/23
194.24.236.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:86:06:27:51:ff:cc:63:67:66:56:f9:71:2a:06:84:4a:8b:
29:2d:29:f2:cd:6f:8a:6a:33:24:b7:20:99:4c:e0:d1:1c:a0:
0e:df:3f:96:77:c2:0e:99:b3:fb:ba:84:0b:d8:2c:67:af:47:
ae:94:44:1d:7b:03:cf:49:b6:86:f5:d7:de:57:00:61:5f:83:
8b:89:06:02:cc:96:da:23:fe:f9:27:a4:60:2b:9c:7f:2c:4f:
a3:9e:7a:72:c9:36:54:8b:f9:73:42:be:54:ab:72:23:64:ae:
22:cb:6f:45:38:d5:62:5a:08:d0:75:31:25:40:0b:88:a2:78:
0d:54:ef:2e:cb:0a:28:fc:be:c2:39:a1:ef:a6:cb:bb:a3:66:
f3:be:9b:41:58:03:d9:1f:27:17:7f:8a:09:ba:ee:7f:21:5a:
be:c1:35:ba:08:68:e2:be:e8:21:66:71:06:00:3c:f8:10:1f:
46:d9:3c:32:06:3e:e3:f1:67:45:6a:92:3f:e6:5e:7d:bd:1f:
a2:66:bc:81:cf:e1:34:b8:9d:e0:08:52:36:db:fe:92:bb:6b:
09:66:1e:0f:b2:f5:44:83:9b:9a:96:b2:3b:60:9b:75:5f:6c:
72:76:5a:89:9f:0f:d7:13:ef:af:05:58:b2:a5:71:ca:31:80:
92:b5:85:95
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ8m/aDFkV5+NhfiZVRrFnZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTRkOTY3ZDVjY2IxNDI1YjkxZWY0ZWQ3ODlhODNhZmNl
NDYxMmUwHhcNMjYwNzAzMDc1OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGFhMGU0MmE3ZjYyY2Q1NTY4OGZhYzk4YjU2N2QwYjVmMWY0YjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yPHbeKxUCjE83E/tl6JcQtLV3fB
klS3zV6r1b9sku/DGyn+BiWF0teqUYhO4iM0GQBtueT4eOeUV2DBtQtoNQ02xH+i
Vbwl9oe3PpM0eq6xZw+lyqwO3AXqnkUKYSYozZYknf8Dh8NRhYsDPih53j1THEA3
q7XYmyJo3bNf4ttSNa7ZtLfwX+x94dBp8jfoiMunt80PO8qq/+E8T8PUr1t3RkIB
ejtX2UMxOusoflE3B7K9hdaQjbOPh2K/HkxIEX6NlNqUfnZ+XG0YmgSm5ydXofqW
2djXeLH8LEkn+O2TrVod4Rb7By6EL9bTs1EGhGpwD+Xf61C40gGVXp8jBQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFB2qDkKn9izVVoj6yYtWfQtfH0t/MB8GA1UdIwQY
MBaAFMGk2WfVzLFCW5HvTteJqDr85GEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt
ZThhMzlkZDYwODY0LzEvSGFvT1FxZjJMTlZXaVBySmkxWjlDMThmUzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0
LzEvd2FUWlo5WE1zVUpia2U5TzE0bW9PdnprWVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAW8b5AwQB
W878AwQCW9aIAwQAW996AwQCuSMIAwQAwcp2AwQBwfOcAwQBwhjsMA0GCSqGSIb3
DQEBCwUAA4IBAQC0hgYnUf/MY2dmVvlxKgaESospLSnyzW+KajMktyCZTODRHKAO
3z+Wd8IOmbP7uoQL2Cxnr0eulEQdewPPSbaG9dfeVwBhX4OLiQYCzJbaI/75J6Rg
K5x/LE+jnnpyyTZUi/lzQr5Uq3IjZK4iy29FONViWgjQdTElQAuIongNVO8uywoo
/L7COaHvpsu7o2bzvptBWAPZHycXf4oJuu5/IVq+wTW6CGjivughZnEGADz4EB9G
2TwyBj7j8WdFapI/5l59vR+iZryBz+E0uJ3gCFI22/6Su2sJZh4PsvVEg5ualrI7
YJt1X2xydlqJnw/XE++vBViypXHKMYCStYWV
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:39 2026 by rpki-client