Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hpl2_25bANa1PHnbURTvb_hny9U.roa
File: Hpl2_25bANa1PHnbURTvb_hny9U.roa (raw, json)
Hash identifier: 5ZRMHTQGYLeiHoJdjSo2Me7GXeLejwwnE7DZZN6sPoM=
Subject key identifier: 1E:99:76:FF:6E:5B:00:D6:B5:3C:79:DB:51:14:EF:6F:F8:67:CB:D5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E9340B1F329BB011273B21730E26E47DA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hpl2_25bANa1PHnbURTvb_hny9U.roa
Signing time: Thu 04 Jun 2026 15:29:11 +0000
ROA not before: Thu 04 Jun 2026 15:29:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214927
IP address blocks: 45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:40:b1:f3:29:bb:01:12:73:b2:17:30:e2:6e:47:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 4 15:29:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e9976ff6e5b00d6b53c79db5114ef6ff867cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:d9:fa:aa:f2:f1:fb:d3:f0:fd:09:b3:e4:
0a:bd:7e:e1:88:3c:29:f6:65:81:6d:7c:db:99:ad:
64:1d:ac:f1:16:40:46:d1:74:b9:c9:9c:c4:83:70:
47:96:ec:2f:cc:74:28:79:35:da:33:ce:2d:55:ea:
f7:10:fa:d5:65:b3:a3:af:90:0d:be:f5:95:1e:17:
9e:d4:64:7c:a2:5a:b0:4f:ae:65:33:46:be:4b:d4:
04:d7:67:a0:22:fe:cc:e4:2e:5c:8d:41:c7:51:44:
7b:9f:54:78:59:d2:18:8b:84:66:50:08:ff:a4:26:
6f:9b:71:b9:78:6b:64:6b:4d:5c:7f:34:29:3d:a4:
be:33:a1:11:52:bf:dd:8c:a0:be:c4:98:5f:48:3a:
fe:f6:0d:5b:d5:a4:0f:35:70:a7:16:1a:2e:bb:a8:
7f:35:a8:9c:27:f9:3b:82:37:cc:ba:d5:f3:7c:33:
45:d0:5a:12:75:9d:d6:59:fb:d3:40:ef:11:f7:56:
24:3c:ef:6f:34:71:55:1a:a9:e0:3b:c3:38:91:cd:
44:d0:88:cf:44:d6:02:f0:ab:ff:83:aa:52:1e:ad:
2d:40:59:8d:7a:3d:22:c8:41:3f:a8:b4:30:ee:d1:
b6:3a:80:ae:83:cd:6b:18:dc:37:29:5c:2f:b5:d5:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:76:FF:6E:5B:00:D6:B5:3C:79:DB:51:14:EF:6F:F8:67:CB:D5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hpl2_25bANa1PHnbURTvb_hny9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
45.130.60.0/24
45.131.212.0/24
45.140.13.0/24
45.155.69.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.242.245.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
12:2f:75:6b:db:e1:e5:00:b6:8a:6e:43:08:d3:9e:70:d9:aa:
ce:05:9f:db:77:e2:e7:05:34:23:c1:99:72:81:d2:f3:bd:75:
45:7c:4e:2d:50:84:ab:e6:63:4f:27:61:60:39:42:63:44:61:
31:f3:67:ca:ff:21:f0:fd:86:02:c9:ab:d9:87:b2:c9:27:5b:
4e:07:f8:f3:14:94:3f:23:e0:b4:a5:1f:53:12:cb:74:30:be:
ba:f9:27:dd:9c:ba:69:66:73:16:00:3e:bd:81:7c:09:22:84:
35:a2:5c:6b:b2:0f:23:1e:c7:b4:d0:48:07:ff:8b:30:e6:3e:
52:6a:49:df:21:5f:a1:76:f9:9d:a1:8d:46:45:65:0a:8f:cd:
e3:f8:12:24:67:fb:6a:57:e1:73:94:f9:36:f8:cc:b6:42:3c:
85:f7:54:3c:55:3a:a0:52:60:1a:59:94:d8:e2:8b:b7:b9:e3:
f4:ed:ed:8d:5f:75:4a:25:80:c7:af:bb:2a:c0:1c:b8:ce:b1:
96:f9:8f:cc:39:b2:83:b4:88:61:1c:35:e9:5d:13:e9:d0:af:
14:3d:76:d0:89:73:8e:0c:75:c8:ad:04:25:48:7a:40:97:99:
76:0e:a9:73:79:75:7f:5b:eb:28:15:d6:74:13:51:f3:76:fb:
4b:d0:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:47 2026 by rpki-client