Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HBqIfOBtsksFQROAqcBRZqsOC7k.roa
File: HBqIfOBtsksFQROAqcBRZqsOC7k.roa (raw, json)
Hash identifier: Nv9lOqWasgrlepNhaiMqMj61gXoxPgtxQQQjOC880vY=
Subject key identifier: 1C:1A:88:7C:E0:6D:B2:4B:05:41:13:80:A9:C0:51:66:AB:0E:0B:B9
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F50B54375D39CBA3783E5F5BCACFA9AF1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HBqIfOBtsksFQROAqcBRZqsOC7k.roa
Signing time: Sat 11 Jul 2026 10:24:44 +0000
ROA not before: Sat 11 Jul 2026 10:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 158.173.224.0/24 maxlen: 24
158.173.225.0/24 maxlen: 24
158.173.228.0/24 maxlen: 24
158.173.234.0/24 maxlen: 24
158.173.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:b5:43:75:d3:9c:ba:37:83:e5:f5:bc:ac:fa:9a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 11 10:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c1a887ce06db24b05411380a9c05166ab0e0bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:66:f9:4d:73:d1:54:00:e1:d0:cb:54:de:
47:97:61:71:1d:e0:11:6d:10:a6:26:fc:13:f6:1d:
6b:f2:7a:76:16:3c:c2:99:09:8d:2e:c8:c5:90:9f:
c8:7b:e8:c7:1b:81:1d:5f:3f:2c:16:7f:d6:9c:c7:
a0:f5:6e:41:c5:09:34:0d:71:5f:cf:02:ab:ef:99:
45:a8:93:fb:18:3e:29:e9:5a:87:44:ed:a2:f5:92:
4c:57:56:48:21:cb:57:76:4b:c9:c9:86:ff:a4:45:
89:cc:7e:dc:88:62:ca:cd:11:2e:73:c3:09:24:9e:
78:38:11:54:a9:dc:a5:98:39:51:28:84:a9:16:cc:
6e:cb:86:98:91:e6:19:55:c2:50:cd:6b:8e:c5:c9:
ba:22:82:c3:09:32:8c:ee:b8:7e:a2:76:6d:31:88:
7e:71:81:b5:ff:0f:8c:c4:39:82:6a:49:8d:0a:52:
27:88:b5:3d:5e:fb:78:f1:48:bb:52:9e:15:03:af:
12:00:bc:a6:d8:fe:b8:23:e5:f8:b1:da:f0:7d:58:
9f:8d:a8:a5:f6:46:3d:d7:70:d7:61:50:23:36:73:
2a:ad:25:b2:3b:b7:f4:de:54:ba:b4:4e:da:3c:93:
93:d6:f5:d8:c0:64:98:da:22:bf:ff:40:3f:15:36:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:88:7C:E0:6D:B2:4B:05:41:13:80:A9:C0:51:66:AB:0E:0B:B9
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HBqIfOBtsksFQROAqcBRZqsOC7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.224.0/23
158.173.228.0/24
158.173.234.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:9c:40:a4:68:0f:ee:15:50:47:81:39:51:e0:c3:91:d8:8c:
8b:dc:da:c7:ae:fb:41:4c:d0:aa:69:13:ee:3b:50:28:70:86:
65:45:d6:4d:04:0f:e1:51:57:19:b7:ec:d8:98:47:00:d3:89:
8c:42:d1:04:12:a3:10:16:26:fb:55:b6:0c:8f:60:2c:fd:00:
2a:b7:83:a6:d5:5b:07:5d:f4:0b:81:55:64:d2:10:78:2d:89:
6e:3a:8c:72:31:3b:03:a6:6a:2b:fe:fa:2b:7e:57:51:e0:08:
f3:c7:e8:74:c2:8d:3c:84:89:53:e0:57:92:f4:99:7c:c5:5d:
d6:29:2b:76:3a:b6:02:50:05:16:03:63:1b:62:31:ef:04:31:
b0:9d:6d:72:6f:c3:db:ec:b0:68:d3:7a:8d:f8:87:ce:18:55:
52:46:e0:6a:4d:a1:0d:8a:57:04:6e:f1:8b:28:19:8b:1f:88:
1d:93:c5:ab:6d:8a:d2:dc:2a:a8:ec:bd:9d:49:7f:77:fb:c3:
34:bf:aa:5f:b8:97:d3:89:13:fe:df:08:6d:27:98:3b:9b:81:
bf:f7:da:1e:39:cb:3b:b6:54:c7:a0:41:ee:6a:fa:4d:6e:b7:
bb:37:e4:92:fc:2b:b7:7f:f7:a6:2c:67:c7:9d:2f:3d:2a:94:
e1:00:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:05 2026 by rpki-client