Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/HQwDweUAjhOfobfXibf5eoTZQ8k.roa
File: HQwDweUAjhOfobfXibf5eoTZQ8k.roa (raw, json)
Hash identifier: SqaQXJfDJd4Rec4Px/I/1Urkpph8+8ren0jeknVqVco=
Subject key identifier: 1D:0C:03:C1:E5:00:8E:13:9F:A1:B7:D7:89:B7:F9:7A:84:D9:43:C9
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 01A1777123A393C5E24E3CA87DADE245C5A9
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/HQwDweUAjhOfobfXibf5eoTZQ8k.roa
Signing time: Mon 26 Oct 2026 09:01:05 +0000
ROA not before: Mon 26 Oct 2026 09:01:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198330
IP address blocks: 45.10.180.0/22 maxlen: 24
45.12.224.0/22 maxlen: 24
79.110.56.0/22 maxlen: 24
134.90.136.0/21 maxlen: 24
185.55.96.0/22 maxlen: 24
185.104.172.0/22 maxlen: 24
185.104.173.0/24 maxlen: 24
185.104.175.0/24 maxlen: 24
185.128.64.0/22 maxlen: 24
185.243.1.0/24 maxlen: 24
2a03:c280::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:71:23:a3:93:c5:e2:4e:3c:a8:7d:ad:e2:45:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Oct 26 09:01:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d0c03c1e5008e139fa1b7d789b7f97a84d943c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:ad:14:83:8c:da:ee:53:a9:b3:85:fa:98:
f7:48:68:02:85:d7:dc:d4:e3:3c:3b:8d:b3:3b:63:
20:ce:97:0b:3e:59:5e:6d:3f:5a:5d:6b:dc:2c:b6:
62:73:03:99:31:95:da:9f:32:f4:f4:80:03:2a:c6:
b8:30:cf:58:92:e1:ae:32:36:0d:4b:a3:af:48:3e:
ac:63:cc:32:b4:75:27:ca:ca:58:4d:fe:48:20:76:
90:1d:ee:32:1f:ee:7d:2a:77:32:8d:49:98:cd:93:
49:fa:53:e9:86:ea:44:8d:88:46:e0:5a:68:1c:6e:
bb:a2:cb:36:7e:aa:b2:61:00:f6:0d:28:cf:89:55:
46:d3:48:97:ff:4e:8d:d6:8a:0f:c8:67:d9:f0:9b:
d4:c4:69:a4:9b:a9:2f:c3:17:86:fb:5c:e5:3c:12:
25:90:cf:88:f4:b4:62:c0:60:14:b1:22:b9:ec:e7:
f9:92:5b:74:a8:ec:1b:f2:7b:bc:75:06:db:b9:18:
3d:98:36:4b:91:ec:ec:62:5e:63:a9:64:a4:d1:6d:
1d:1c:75:72:db:3c:73:13:d9:1a:fd:5b:1b:bf:62:
98:1f:d0:27:89:00:e1:d1:5a:4f:5a:6c:cd:3b:68:
0c:15:df:8f:15:6a:fa:e0:6e:c9:0d:2e:1f:d0:4c:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:03:C1:E5:00:8E:13:9F:A1:B7:D7:89:B7:F9:7A:84:D9:43:C9
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/HQwDweUAjhOfobfXibf5eoTZQ8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.180.0/22
45.12.224.0/22
79.110.56.0/22
134.90.136.0/21
185.55.96.0/22
185.104.172.0/22
185.128.64.0/22
185.243.1.0/24
IPv6:
2a03:c280::/32
Signature Algorithm: sha256WithRSAEncryption
71:dc:2d:df:72:0d:48:40:5f:83:07:95:84:6b:6b:73:df:65:
c6:59:75:ba:9b:59:63:9e:71:f7:b4:f4:77:04:4a:bb:b7:a5:
3f:0b:19:99:8d:7f:3c:6d:e2:e0:81:44:96:e6:fd:4a:67:76:
17:a0:93:eb:9c:e8:e8:cb:ca:7f:f1:cd:9f:2b:27:73:04:be:
48:56:88:5e:87:38:31:e1:ea:40:b2:2c:0b:d2:e9:9b:cb:f7:
d6:f9:37:be:41:14:88:7a:8b:d0:8d:20:18:64:3d:f0:2d:67:
3c:2f:1d:aa:96:d6:c2:51:0d:6b:57:e7:69:9f:77:4a:f3:e6:
28:81:b2:3d:bb:14:d9:58:b0:98:06:72:47:62:34:19:e1:a7:
3c:14:50:ad:01:47:ca:62:4c:bd:31:e1:75:4c:1c:bc:b6:ac:
ac:df:a1:1e:40:a8:d6:fb:98:de:b1:f7:83:d9:d6:b3:61:68:
c6:4b:74:fb:9b:65:59:3c:74:f3:8c:ce:e4:9e:ff:b6:b3:11:
e2:9f:14:39:79:ab:7b:e5:6f:88:72:58:4a:de:0a:cd:57:fa:
13:21:29:5a:de:0c:70:e3:bb:bd:34:d1:81:d5:ab:da:b8:89:
d1:2d:2d:5b:00:c5:06:60:e0:94:36:60:86:38:32:c8:b4:05:
e6:32:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:11 2026 by rpki-client