Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/HUTjNxMDyTWfIeACtHVXKD8A41A.roa
File: HUTjNxMDyTWfIeACtHVXKD8A41A.roa (raw, json)
Hash identifier: JXFmwel69gCfyCsynPXE0VRtMMoBcAjcMhowe4HtpoI=
Subject key identifier: 1D:44:E3:37:13:03:C9:35:9F:21:E0:02:B4:75:57:28:3F:00:E3:50
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F23683522C373EE698B94BBC6547038BC
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/HUTjNxMDyTWfIeACtHVXKD8A41A.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199967
IP address blocks: 178.218.136.0/24 maxlen: 24
178.218.137.0/24 maxlen: 24
178.218.138.0/24 maxlen: 24
178.218.139.0/24 maxlen: 24
178.218.140.0/24 maxlen: 24
178.218.141.0/24 maxlen: 24
178.218.142.0/24 maxlen: 24
178.218.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:22:c3:73:ee:69:8b:94:bb:c6:54:70:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d44e3371303c9359f21e002b47557283f00e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:b6:d3:03:84:5a:56:be:1c:24:a2:14:20:
46:28:af:7e:03:76:cc:03:f5:21:89:e4:29:6e:ce:
38:c3:db:76:3d:ea:a2:68:6b:99:7d:f3:f1:6e:4c:
cc:03:dd:f9:42:06:9a:61:1a:ee:c2:14:26:09:f1:
15:df:fa:0a:3e:db:e9:79:bf:12:05:5f:41:27:00:
a0:b2:9c:84:9b:be:11:59:0f:c5:35:1b:72:c3:67:
09:4d:46:38:78:04:d9:36:22:e6:ea:47:cb:c4:ed:
78:4b:48:ed:e5:7e:3d:1f:a1:a2:c7:e8:78:41:b4:
f1:2b:0a:4e:10:16:84:23:19:c3:ad:86:99:f7:65:
36:c3:92:b8:d0:64:2d:c8:6e:b0:f6:08:ec:17:d9:
92:25:17:13:e4:8f:ff:d5:3e:e5:6a:78:e3:b0:63:
84:0c:58:c9:f9:f4:13:db:7a:6e:70:5b:f7:52:74:
e3:f6:ab:e6:84:2b:1c:b2:c1:e0:45:0f:83:4e:58:
8a:ae:7c:bc:7c:62:ff:7b:17:3d:60:95:95:34:3e:
06:f0:d1:a5:d4:2b:61:51:5a:14:99:9c:d2:fd:73:
56:d9:c1:af:83:0e:d8:5e:2d:84:48:93:c3:2c:d5:
b6:06:64:3e:03:b9:e6:44:c6:a4:99:91:f5:37:07:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:E3:37:13:03:C9:35:9F:21:E0:02:B4:75:57:28:3F:00:E3:50
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/HUTjNxMDyTWfIeACtHVXKD8A41A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:f4:7b:f8:14:a6:d0:70:83:62:58:77:0d:87:89:f4:df:e1:
28:0f:d2:10:d0:09:36:a2:95:e7:da:91:8a:47:cf:f8:ba:34:
d2:14:b3:bc:d7:3f:c5:d7:16:af:b2:08:a3:1e:e3:eb:5c:0f:
06:fb:81:de:b9:da:11:d7:84:c0:f5:d8:5a:63:d1:6f:ba:25:
dd:ab:31:b0:42:02:0f:ff:82:39:2b:51:5e:29:2e:a8:5e:9b:
cb:00:a9:86:a9:cc:09:58:e0:be:fe:9a:09:d6:a7:ad:8a:b7:
6f:9c:2c:cc:4d:73:ad:7a:17:5e:c8:73:8c:e4:e4:b9:9a:1e:
fe:7f:b8:ee:27:1b:38:2c:91:dd:77:f9:90:b8:92:79:76:37:
a7:80:64:64:24:ae:e4:c2:ab:38:b3:fd:77:89:15:cc:a6:76:
fc:28:32:ef:53:cc:fa:6d:aa:95:32:4a:9a:9f:da:85:90:3c:
f4:47:fb:06:56:da:17:c1:5f:f2:ba:f9:eb:4e:a7:b6:76:57:
d4:b4:a3:31:42:03:ca:78:82:6b:f9:8b:20:77:79:ad:7d:9a:
94:51:b3:4b:d5:5c:12:1b:96:2d:ab:af:98:2d:9f:83:30:5b:
4a:d7:f3:be:12:65:6c:f4:20:dc:55:59:98:fa:45:31:31:c5:
d4:35:3d:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDUiw3PuaYuUu8ZUcDi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGY0ZjVkODRjMmI1Y2VlM2M2ZTkwM2NiNTMwZDZhOTFm
NDA0YmEwHhcNMjYwNzAyMTUxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDQ0ZTMzNzEzMDNjOTM1OWYyMWUwMDJiNDc1NTcyODNmMDBlMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoK20wOEWla+HCSiFCBGKK9+A3bM
A/UhieQpbs44w9t2PeqiaGuZffPxbkzMA935QgaaYRruwhQmCfEV3/oKPtvpeb8S
BV9BJwCgspyEm74RWQ/FNRtyw2cJTUY4eATZNiLm6kfLxO14S0jt5X49H6Gix+h4
QbTxKwpOEBaEIxnDrYaZ92U2w5K40GQtyG6w9gjsF9mSJRcT5I//1T7lanjjsGOE
DFjJ+fQT23pucFv3UnTj9qvmhCscssHgRQ+DTliKrny8fGL/exc9YJWVND4G8NGl
1CthUVoUmZzS/XNW2cGvgw7YXi2ESJPDLNW2BmQ+A7nmRMakmZH1NweohwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1E4zcTA8k1nyHgArR1Vyg/AONQMB8GA1UdIwQY
MBaAFDcPT12EwrXO48bpA8tTDWqR9AS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvSFVUak54TUR5VFdmSWVBQ3RIVlhLRDhBNDFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvTnc5UFhZVEN0YzdqeHVrRHkxTU5hcEgwQkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstqIMA0G
CSqGSIb3DQEBCwUAA4IBAQCn9Hv4FKbQcINiWHcNh4n03+EoD9IQ0Ak2opXn2pGK
R8/4ujTSFLO81z/F1xavsgijHuPrXA8G+4HeudoR14TA9dhaY9FvuiXdqzGwQgIP
/4I5K1FeKS6oXpvLAKmGqcwJWOC+/poJ1qetirdvnCzMTXOtehdeyHOM5OS5mh7+
f7juJxs4LJHdd/mQuJJ5djengGRkJK7kwqs4s/13iRXMpnb8KDLvU8z6baqVMkqa
n9qFkDz0R/sGVtoXwV/yuvnrTqe2dlfUtKMxQgPKeIJr+Ysgd3mtfZqUUbNL1VwS
G5Ytq6+YLZ+DMFtK1/O+EmVs9CDcVVmY+kUxMcXUNT3r
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:28:35 2026 by rpki-client