Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa
File: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (raw, json)
Hash identifier: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=
Subject key identifier: 1D:64:A3:C3:67:DB:BF:9C:DF:73:0D:00:28:73:B4:0D:49:C7:3A:D4
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01980D9DE6E7BE10EA6544488DFE0D3AAFF6
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa
Signing time: Tue 15 Jul 2025 10:25:08 +0000
ROA not before: Tue 15 Jul 2025 10:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212715
IP address blocks: 185.19.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:9d:e6:e7:be:10:ea:65:44:48:8d:fe:0d:3a:af:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jul 15 10:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d64a3c367dbbf9cdf730d002873b40d49c73ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:8a:ff:04:03:a7:57:7a:08:f9:8a:60:9e:
65:54:51:2e:af:7f:80:ca:b4:94:96:b0:3f:6a:f8:
e6:65:42:97:ef:07:3e:f5:45:46:b4:df:cd:2c:ce:
ce:63:06:bf:d7:6c:ca:c1:1d:4f:6b:2a:7a:37:25:
45:fc:05:ca:45:4e:44:bc:a2:e8:b8:3f:95:23:fd:
d4:57:a5:75:b6:9a:cc:95:56:dd:56:b5:16:b6:bd:
6d:34:c1:c6:8a:89:79:14:ac:ef:c1:7f:6e:c1:77:
f7:50:b0:13:94:55:7f:0b:e0:35:4a:bf:fd:cb:10:
81:cf:86:4b:6d:68:42:24:86:48:77:ca:23:33:bd:
bc:0b:fe:bf:0d:3d:8d:7d:9d:5e:3c:5e:ec:0b:01:
70:20:88:f6:58:97:35:fe:ea:a7:16:6e:b4:67:2a:
d3:c5:a3:d4:a0:90:cf:27:64:1a:44:3a:d8:c8:d4:
82:5a:47:53:49:eb:eb:12:c2:bd:19:ef:5c:49:fc:
c0:a4:e5:97:48:9e:36:55:b6:e0:e0:9f:b4:30:34:
9b:a4:42:16:1d:d9:c2:9a:38:f6:fa:25:f3:47:ec:
04:da:6a:18:a3:9b:11:8a:77:46:d9:12:1b:aa:3b:
32:86:30:fb:3c:ca:bb:2e:1e:8a:f5:a4:34:bd:f3:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:64:A3:C3:67:DB:BF:9C:DF:73:0D:00:28:73:B4:0D:49:C7:3A:D4
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.176.0/22
Signature Algorithm: sha256WithRSAEncryption
50:a8:31:4b:da:a6:b6:6a:4f:65:7d:21:8a:bb:3a:ca:cf:a0:
d6:4e:36:86:33:39:33:38:15:05:f0:0a:64:a0:98:a0:3b:f1:
65:e9:30:ac:8d:99:1b:3b:f7:62:87:19:94:38:60:29:57:72:
6d:a2:b0:f2:8b:ac:46:d7:5b:d2:b8:41:f4:e9:29:1a:50:69:
32:c5:e5:d6:2f:71:8a:cb:89:9a:d6:87:36:9d:27:4f:f4:3e:
f3:76:6c:07:cc:d4:ed:43:2d:d5:27:b0:a2:9b:2c:22:3b:e7:
c4:13:ff:f8:67:56:00:1d:ab:a9:a0:3e:80:fc:8f:6f:b0:38:
31:39:3f:b2:81:34:65:e2:22:e0:5a:09:ba:2f:a4:0e:dd:2d:
1f:44:71:97:45:1a:24:8c:e1:d0:51:14:6e:47:ec:28:40:92:
71:5e:3e:89:55:c5:a9:4b:ab:b4:98:e3:05:3c:07:a3:b5:88:
b7:19:f9:0e:d8:bd:dd:eb:9e:78:19:4c:1d:e5:b6:4e:ef:da:
62:71:55:77:28:5f:a4:90:32:f1:3e:7d:b0:c5:09:fa:d0:cd:
9b:e5:58:01:ea:a2:b1:8d:f6:51:49:9f:82:93:95:ac:13:b8:
58:df:e0:d5:50:70:b3:1d:03:1a:78:21:4f:35:70:38:3c:72:
f7:28:86:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgNnebnvhDqZURIjf4NOq/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwNzE1MTAyNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDY0YTNjMzY3ZGJiZjljZGY3MzBkMDAyODczYjQwZDQ5YzczYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnSK/wQDp1d6CPmKYJ5lVFEur3+A
yrSUlrA/avjmZUKX7wc+9UVGtN/NLM7OYwa/12zKwR1Payp6NyVF/AXKRU5EvKLo
uD+VI/3UV6V1tprMlVbdVrUWtr1tNMHGiol5FKzvwX9uwXf3ULATlFV/C+A1Sr/9
yxCBz4ZLbWhCJIZId8ojM728C/6/DT2NfZ1ePF7sCwFwIIj2WJc1/uqnFm60ZyrT
xaPUoJDPJ2QaRDrYyNSCWkdTSevrEsK9Ge9cSfzApOWXSJ42Vbbg4J+0MDSbpEIW
HdnCmjj2+iXzR+wE2moYo5sRindG2RIbqjsyhjD7PMq7Lh6K9aQ0vfPcoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1ko8Nn27+c33MNAChztA1JxzrUMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvSFdTancyZmJ2NXpmY3cwQUtITzBEVW5IT3RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuROwMA0G
CSqGSIb3DQEBCwUAA4IBAQBQqDFL2qa2ak9lfSGKuzrKz6DWTjaGMzkzOBUF8Apk
oJigO/Fl6TCsjZkbO/dihxmUOGApV3JtorDyi6xG11vSuEH06SkaUGkyxeXWL3GK
y4ma1oc2nSdP9D7zdmwHzNTtQy3VJ7CimywiO+fEE//4Z1YAHaupoD6A/I9vsDgx
OT+ygTRl4iLgWgm6L6QO3S0fRHGXRRokjOHQURRuR+woQJJxXj6JVcWpS6u0mOMF
PAejtYi3GfkO2L3d6554GUwd5bZO79picVV3KF+kkDLxPn2wxQn60M2b5VgB6qKx
jfZRSZ+Ck5WsE7hY3+DVUHCzHQMaeCFPNXA4PHL3KIZG
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:06 2025 by rpki-client