Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HPVfhiuUa_JtMNzHUYDOGd42xS8.roa
File: HPVfhiuUa_JtMNzHUYDOGd42xS8.roa (raw, json)
Hash identifier: 7ZhAOKdveODPEczWBgJUl7hyjj1d4vv9Ioq6aR3H5Ww=
Subject key identifier: 1C:F5:5F:86:2B:94:6B:F2:6D:30:DC:C7:51:80:CE:19:DE:36:C5:2F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A116C75D164B4ED338841306BF38AD4550
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HPVfhiuUa_JtMNzHUYDOGd42xS8.roa
Signing time: Wed 07 Oct 2026 14:32:06 +0000
ROA not before: Wed 07 Oct 2026 14:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53730
IP address blocks: 45.148.165.0/24 maxlen: 24
193.148.61.0/24 maxlen: 24
193.148.63.0/24 maxlen: 24
194.32.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:c7:5d:16:4b:4e:d3:38:84:13:06:bf:38:ad:45:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 7 14:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cf55f862b946bf26d30dcc75180ce19de36c52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:fb:18:e5:11:7b:44:4e:3a:9a:1d:c1:84:
1d:a7:54:4d:83:46:94:49:1a:82:71:5e:7e:23:c9:
4b:2e:28:34:22:02:89:6a:c8:60:4a:49:dd:73:22:
84:bf:5a:b7:12:87:ad:42:7e:cb:99:0c:55:14:72:
c9:94:b9:c5:37:2f:49:4e:66:7a:28:2b:94:39:a9:
48:30:e3:83:42:e2:e3:2a:ff:cf:a5:fa:40:7e:8a:
87:79:6a:2a:89:ae:dc:2b:ee:65:00:0c:46:55:7e:
d7:92:1c:7a:8a:7d:14:06:36:09:e4:45:0c:c7:fb:
73:08:c3:6d:57:51:4a:9d:8a:59:25:f8:33:f1:29:
75:5f:24:3e:63:99:2d:f1:3c:f3:1e:3c:a8:0c:24:
a7:5d:a0:8b:77:e1:9f:e7:32:33:6b:91:96:07:66:
4b:08:47:b3:84:4a:88:9b:d1:95:c6:59:40:64:f2:
d0:50:db:e1:d4:c9:94:4e:db:55:0e:cb:5d:c3:e2:
76:c5:6e:0d:3b:8b:4e:8f:39:32:13:42:4d:e7:65:
a5:46:86:a1:7f:4e:04:d1:9e:32:1c:bb:00:d8:75:
78:34:43:b6:06:e0:3a:de:df:28:00:cc:51:7b:6f:
ad:0e:80:74:e4:b9:7f:8a:4b:2a:12:c1:d7:1d:7b:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:5F:86:2B:94:6B:F2:6D:30:DC:C7:51:80:CE:19:DE:36:C5:2F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HPVfhiuUa_JtMNzHUYDOGd42xS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.165.0/24
193.148.61.0/24
193.148.63.0/24
194.32.127.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a6:e2:a6:c9:de:eb:c8:9f:85:4e:d7:05:69:24:75:0d:33:
32:f7:da:4a:ca:b0:bc:c5:24:a0:b2:9d:9b:55:05:af:e0:4e:
ea:0e:e9:2a:0b:a7:3d:25:54:f7:35:03:62:b1:bd:f2:5f:29:
f7:b9:21:9b:1c:be:1a:15:9b:ca:04:5a:8a:66:d2:cd:a7:46:
4a:0a:fb:da:62:b3:91:d5:27:d8:56:86:06:e1:be:b8:c3:1d:
de:61:68:2f:e8:a5:1b:e5:59:e8:94:c6:22:7b:df:8d:d0:e7:
b1:68:92:13:48:02:50:35:9e:2e:be:02:09:8a:a0:11:2f:91:
91:85:77:90:56:96:25:7f:70:d3:6b:72:dd:bf:62:1b:ec:f6:
ef:26:ed:59:bd:97:f9:50:4e:30:5e:79:53:7c:73:52:dd:fe:
f0:b5:19:51:18:2f:a0:08:41:8d:d2:91:8c:15:87:5f:dc:4f:
11:92:eb:2b:c6:62:5a:52:68:72:93:ed:a4:b2:04:bb:24:6b:
ae:04:e7:6a:60:64:fc:1e:8b:ff:c5:44:fe:8e:c0:e6:47:bb:
75:7d:67:32:cd:33:4f:ed:c9:f2:79:b9:98:2d:f9:c7:b4:50:
ae:55:2e:8a:e9:75:40:7d:1b:78:66:e5:52:2a:73:27:65:61:
52:ce:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:41 2026 by rpki-client