Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/HOZIv0yaz_xvQBuFq2v58VPYuP0.roa
File: HOZIv0yaz_xvQBuFq2v58VPYuP0.roa (raw, json)
Hash identifier: qJrkBknlKtm8OSqqDt9qV+NuQ/jHZoxkQIafBfGloQ0=
Subject key identifier: 1C:E6:48:BF:4C:9A:CF:FC:6F:40:1B:85:AB:6B:F9:F1:53:D8:B8:FD
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A0D3B77B26DEC0C3E803B2CD51626D1B4D
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/HOZIv0yaz_xvQBuFq2v58VPYuP0.roa
Signing time: Thu 24 Sep 2026 14:00:12 +0000
ROA not before: Thu 24 Sep 2026 14:00:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 212.180.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b7:7b:26:de:c0:c3:e8:03:b2:cd:51:62:6d:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Sep 24 14:00:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ce648bf4c9acffc6f401b85ab6bf9f153d8b8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:15:c3:dc:86:d2:57:1f:c7:81:4a:a9:29:
56:ca:d9:77:77:85:4d:0a:c1:c7:19:7c:d1:bc:0c:
b5:41:d6:27:83:e1:7c:76:12:1b:f4:4c:47:d3:54:
82:f8:ca:cc:a9:98:ec:f9:29:b6:a8:1b:89:48:af:
6b:90:32:ad:93:6c:1e:b3:d0:33:62:1f:d5:35:4c:
e3:21:5d:31:a9:1c:bc:58:3f:94:b2:7b:73:f9:21:
77:cd:e2:72:58:06:3b:31:f5:bb:28:97:17:a9:43:
47:0f:4f:d2:02:fc:d7:2c:c2:97:41:b6:33:bb:5a:
76:6c:7a:79:44:04:4f:36:be:b4:7b:96:01:d1:1d:
45:19:b8:09:d1:f4:82:a9:ac:e1:aa:d9:30:a0:c6:
4c:3a:8e:6a:cd:86:34:5d:ec:4b:7c:38:3e:06:e8:
6b:22:7e:78:32:89:94:1b:0b:46:23:3d:40:c3:04:
7c:3c:48:35:b6:b2:eb:75:9a:b9:c4:e0:3a:ef:fb:
f6:b9:9f:79:a4:98:5b:2e:1f:55:af:46:04:38:61:
c6:da:11:5c:2e:cf:c7:9a:03:f5:8b:70:98:5a:90:
92:f2:97:cb:77:5b:8b:a8:3b:c9:b2:b9:ae:c0:40:
8b:bf:b8:bd:01:b4:66:eb:80:91:dc:84:e7:58:3c:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:48:BF:4C:9A:CF:FC:6F:40:1B:85:AB:6B:F9:F1:53:D8:B8:FD
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/HOZIv0yaz_xvQBuFq2v58VPYuP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.108.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d4:85:13:c6:5f:b9:8b:78:e8:a3:6a:71:8f:1a:10:36:f6:
c6:87:e2:66:fc:1f:cd:b9:6a:e4:49:a4:69:8e:a4:79:83:ec:
0c:c9:d4:8a:a7:ca:f7:e3:8f:2f:01:2c:cc:3e:b9:54:bd:56:
ef:5b:df:38:7d:5c:3c:36:79:1d:d7:af:fd:f2:3d:e2:4b:95:
c5:ba:4c:bd:90:e5:25:5f:36:79:da:3c:06:c4:aa:89:f6:a4:
f9:a8:1a:ee:4b:2a:7c:db:77:77:8e:2e:d5:cc:ec:4a:39:4b:
46:1a:63:79:e9:07:0d:42:28:20:fb:a5:b8:54:76:6a:2e:a1:
6b:00:ab:47:2d:0b:34:98:fa:15:5e:61:04:25:c0:0a:25:e4:
19:1d:f6:61:bf:ea:fa:ef:f2:97:ee:34:c0:5a:d1:bb:aa:b3:
29:b2:02:e1:64:00:80:24:e1:ac:2c:f7:32:0d:f8:de:ca:91:
75:72:71:12:d2:b5:56:2e:3f:7b:85:2b:0d:12:54:a4:6b:b2:
f6:78:6e:88:84:96:a0:98:46:66:90:9d:3b:c4:01:fa:b5:5f:
3e:16:f8:6f:f5:1d:e0:01:4d:ed:1f:2f:1d:30:4f:6b:6b:25:
71:03:8a:96:b9:8e:db:ed:1d:b4:86:45:1c:28:8c:1e:f1:06:
fa:58:9e:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDTt3sm3sDD6AOyzVFibRtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwOTI0MTQwMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2U2NDhiZjRjOWFjZmZjNmY0MDFiODVhYjZiZjlmMTUzZDhiOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5QVw9yG0lcfx4FKqSlWytl3d4VN
CsHHGXzRvAy1QdYng+F8dhIb9ExH01SC+MrMqZjs+Sm2qBuJSK9rkDKtk2wes9Az
Yh/VNUzjIV0xqRy8WD+Usntz+SF3zeJyWAY7MfW7KJcXqUNHD0/SAvzXLMKXQbYz
u1p2bHp5RARPNr60e5YB0R1FGbgJ0fSCqazhqtkwoMZMOo5qzYY0XexLfDg+Buhr
In54MomUGwtGIz1AwwR8PEg1trLrdZq5xOA67/v2uZ95pJhbLh9Vr0YEOGHG2hFc
Ls/HmgP1i3CYWpCS8pfLd1uLqDvJsrmuwECLv7i9AbRm64CR3ITnWDxVFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzmSL9Mms/8b0Abhatr+fFT2Lj9MB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvSE9aSXYweWF6X3h2UUJ1RnEydjU4VlBZdVAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LRsMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ1IUTxl+5i3joo2pxjxoQNvbGh+Jm/B/NuWrkSaRp
jqR5g+wMydSKp8r3448vASzMPrlUvVbvW984fVw8Nnkd16/98j3iS5XFuky9kOUl
XzZ52jwGxKqJ9qT5qBruSyp823d3ji7VzOxKOUtGGmN56QcNQigg+6W4VHZqLqFr
AKtHLQs0mPoVXmEEJcAKJeQZHfZhv+r67/KX7jTAWtG7qrMpsgLhZACAJOGsLPcy
DfjeypF1cnES0rVWLj97hSsNElSka7L2eG6IhJagmEZmkJ07xAH6tV8+Fvhv9R3g
AU3tHy8dME9rayVxA4qWuY7b7R20hkUcKIwe8Qb6WJ5x
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:10:20 2026 by rpki-client