Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HW5ihLdP9bVWl6zEG8F1E3J00hM.roa
File: HW5ihLdP9bVWl6zEG8F1E3J00hM.roa (raw, json)
Hash identifier: QfZ6Gaebh60A4vkRWgkGxK851XlDos/eJNtiamqnIbQ=
Subject key identifier: 1D:6E:62:84:B7:4F:F5:B5:56:97:AC:C4:1B:C1:75:13:72:74:D2:13
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690D7BFBDD684D5E743A248A2A6995
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HW5ihLdP9bVWl6zEG8F1E3J00hM.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 81.168.62.0/24 maxlen: 24
81.168.64.0/24 maxlen: 24
81.168.112.0/24 maxlen: 24
82.152.212.0/24 maxlen: 24
82.152.221.0/24 maxlen: 24
82.153.102.0/24 maxlen: 24
82.153.116.0/24 maxlen: 24
89.213.220.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:7b:fb:dd:68:4d:5e:74:3a:24:8a:2a:69:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d6e6284b74ff5b55697acc41bc175137274d213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:2b:2f:b1:08:df:5d:7b:1a:d7:ce:65:46:
bb:a2:21:06:98:c4:5c:51:b1:56:a2:99:ab:b1:11:
0a:e5:6c:c8:11:ed:fe:21:cb:97:61:2f:d5:4c:cb:
2c:15:ad:50:fd:92:83:8f:d8:95:e2:3d:cd:8a:69:
7a:d3:2e:4e:36:30:e6:97:9b:b9:e4:70:3f:9d:cd:
a5:e1:dc:4b:0c:aa:d3:d0:7b:4b:fa:79:5e:34:c0:
cd:3b:1d:72:5a:02:c3:f3:ac:42:13:e7:4e:29:96:
5c:6c:2f:3f:ce:17:1b:7e:9d:75:7d:62:df:54:c1:
2d:92:fe:50:ff:43:3a:41:fc:a9:d1:2f:07:42:18:
c3:83:0b:aa:8b:15:36:05:6d:ec:9b:0d:f9:2d:6b:
4d:2a:b0:4a:9f:18:65:68:97:52:ea:d0:6a:98:f8:
e9:ca:8a:0f:94:4e:ff:aa:18:a3:d4:7f:6f:73:df:
bf:8e:af:ce:5f:29:00:45:a5:b3:bb:fa:35:9a:ec:
4b:09:e0:64:a6:96:c3:47:c1:c0:e2:c6:ab:02:21:
3e:76:40:1d:e7:cf:2b:ba:a0:b6:ba:63:d3:ac:cc:
5c:9b:8c:fa:4a:da:3f:bb:84:f6:b9:a7:f4:ab:8b:
44:aa:0d:f7:6a:ca:d7:33:bb:f2:3f:e7:94:9d:5c:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:62:84:B7:4F:F5:B5:56:97:AC:C4:1B:C1:75:13:72:74:D2:13
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HW5ihLdP9bVWl6zEG8F1E3J00hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.62.0/24
81.168.64.0/24
81.168.112.0/24
82.152.212.0/24
82.152.221.0/24
82.153.102.0/24
82.153.116.0/24
89.213.220.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:25:74:34:74:63:fb:ca:bc:5d:09:b0:cb:20:9a:d1:ee:30:
3f:49:8e:54:0c:64:3f:a2:6f:f3:19:8d:bd:c9:df:58:ec:19:
77:bf:05:70:61:37:94:17:b7:13:7f:83:3a:73:4e:b2:bd:dc:
34:d9:d6:50:13:fa:18:b8:d8:40:cd:ba:7a:1b:bc:49:5d:66:
0b:3f:3c:4a:dd:9c:ac:a2:b7:e7:ad:16:e6:c1:d4:d6:b8:e2:
ba:cd:53:c1:6c:74:cb:6b:a9:ad:c0:bf:35:d0:d3:15:aa:83:
06:04:08:af:8d:d1:6a:1e:62:4f:fe:f1:75:09:95:db:c5:d9:
05:e8:4b:6f:5e:c7:8f:63:b4:c9:b7:61:ac:44:76:df:39:af:
a5:ef:42:db:5f:e1:57:3c:3e:06:b0:0d:aa:81:0b:65:55:e1:
2f:4e:df:80:4c:76:02:e3:dd:d3:4f:b5:a3:42:fd:7d:52:b5:
ae:f9:f2:73:ee:5d:c0:4a:c5:04:9a:80:a1:7d:58:43:52:7a:
e9:7d:d0:a6:01:49:f6:78:8e:e3:e1:6f:4d:04:38:d2:5d:77:
73:82:57:ff:7a:da:12:27:52:e1:3e:01:07:b0:fe:fb:03:f5:
fb:93:6a:02:5a:1b:3a:68:da:63:1b:73:c9:7e:24:fa:53:2d:
b4:f1:37:70
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ8jaQ17+91oTV50OiSKKmmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDZlNjI4NGI3NGZmNWI1NTY5N2FjYzQxYmMxNzUxMzcyNzRkMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QMrL7EI3117GtfOZUa7oiEGmMRc
UbFWopmrsREK5WzIEe3+IcuXYS/VTMssFa1Q/ZKDj9iV4j3Niml60y5ONjDml5u5
5HA/nc2l4dxLDKrT0HtL+nleNMDNOx1yWgLD86xCE+dOKZZcbC8/zhcbfp11fWLf
VMEtkv5Q/0M6Qfyp0S8HQhjDgwuqixU2BW3smw35LWtNKrBKnxhlaJdS6tBqmPjp
yooPlE7/qhij1H9vc9+/jq/OXykARaWzu/o1muxLCeBkppbDR8HA4sarAiE+dkAd
588ruqC2umPTrMxcm4z6Sto/u4T2uaf0q4tEqg33asrXM7vyP+eUnVxEzwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFB1uYoS3T/W1VpesxBvBdRNydNITMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSFc1aWhMZFA5YlZXbDZ6RUc4RjFFM0owMGhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUag+AwQA
UahAAwQAUahwAwQAUpjUAwQAUpjdAwQAUplmAwQAUpl0AwQAWdXcAwQA2ZFBMA0G
CSqGSIb3DQEBCwUAA4IBAQBeJXQ0dGP7yrxdCbDLIJrR7jA/SY5UDGQ/om/zGY29
yd9Y7Bl3vwVwYTeUF7cTf4M6c06yvdw02dZQE/oYuNhAzbp6G7xJXWYLPzxK3Zys
orfnrRbmwdTWuOK6zVPBbHTLa6mtwL810NMVqoMGBAivjdFqHmJP/vF1CZXbxdkF
6EtvXsePY7TJt2GsRHbfOa+l70LbX+FXPD4GsA2qgQtlVeEvTt+ATHYC493TT7Wj
Qv19UrWu+fJz7l3ASsUEmoChfVhDUnrpfdCmAUn2eI7j4W9NBDjSXXdzglf/etoS
J1LhPgEHsP77A/X7k2oCWhs6aNpjG3PJfiT6Uy208Tdw
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:12 2026 by rpki-client