Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/HYe7sVkhcA0-XfmeqjiB4IGETrY.roa
File: HYe7sVkhcA0-XfmeqjiB4IGETrY.roa (raw, json)
Hash identifier: wE+9P2a3reoKHkptwHKo9c9l79kAKhyB8j8AYkmyO3U=
Subject key identifier: 1D:87:BB:B1:59:21:70:0D:3E:5D:F9:9E:AA:38:81:E0:81:84:4E:B6
Certificate issuer: /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial: 019F23688E53BB9F323BBEEAB7E8B7EA99EC
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/HYe7sVkhcA0-XfmeqjiB4IGETrY.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.226.52.0/23 maxlen: 23
85.158.140.0/24 maxlen: 24
85.158.141.0/24 maxlen: 24
85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
193.109.254.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:53:bb:9f:32:3b:be:ea:b7:e8:b7:ea:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d87bbb15921700d3e5df99eaa3881e081844eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:a2:75:ae:43:f3:e4:90:fb:64:c8:5c:7e:
fc:18:50:90:fb:c6:ed:c3:b7:97:25:73:8f:9e:b6:
0f:58:91:60:5e:a4:fd:fa:61:cb:09:bb:48:21:d5:
82:3a:98:09:1f:81:94:c6:61:76:31:08:00:00:0a:
c4:aa:4e:08:c2:34:29:5e:cf:c3:36:7f:c1:bc:5a:
19:29:79:67:15:4a:87:76:5b:db:18:87:ab:1f:0b:
18:24:f5:c1:7f:95:1d:84:21:9f:1d:7f:3b:7c:1e:
67:8a:bc:95:b1:5b:f8:a0:f8:18:a6:a9:0f:df:20:
4a:a7:6a:3f:ed:a3:19:9b:91:02:79:14:ee:ec:98:
97:5a:8d:a3:52:1c:e2:98:cb:fa:b1:aa:b4:3d:d1:
c5:94:c2:8e:f4:08:f0:89:32:20:c5:67:cb:42:53:
57:ac:43:ef:1f:60:c3:55:e3:51:02:4a:d1:20:75:
fb:54:09:6a:bf:32:a6:3f:52:d5:33:2e:04:db:bf:
ae:37:c2:65:de:38:dc:36:96:9b:ce:a3:28:5a:75:
41:d8:82:23:cc:de:3f:8c:f3:71:d7:c5:8b:56:c4:
39:ba:0e:f0:9e:24:be:1f:c6:12:45:4f:27:f4:a4:
6a:73:43:20:68:bb:5a:05:87:1c:db:88:c7:60:74:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:BB:B1:59:21:70:0D:3E:5D:F9:9E:AA:38:81:E0:81:84:4E:B6
X509v3 Authority Key Identifier:
keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/HYe7sVkhcA0-XfmeqjiB4IGETrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.140.0/22
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:68:b2:29:e2:c3:f4:8d:e2:82:1d:9f:0a:37:7d:04:f5:7a:
7f:95:15:7d:ea:67:d0:57:93:07:0e:46:86:59:e1:52:27:d2:
af:bf:11:21:cb:8e:e1:f4:07:8e:a8:bd:5a:1d:b4:49:2c:49:
32:ae:87:1c:5b:7c:a7:39:a0:bb:22:ae:e4:66:0f:dc:88:ec:
88:18:dd:6d:7d:89:f8:f8:6e:a3:32:c2:c8:be:c3:40:72:08:
ec:a4:c8:7e:87:0f:86:57:e4:5c:e5:6b:e7:9b:de:cc:7a:17:
5a:cb:95:7d:69:70:f4:28:4f:43:57:13:a7:02:9e:a9:cf:2a:
77:7c:4a:0a:bb:7e:0d:21:9e:ef:db:f7:63:9d:b1:28:42:c1:
54:16:16:1f:b6:01:cf:45:f4:81:5c:73:54:83:93:7f:a4:3d:
17:d5:e5:dc:20:00:ea:0e:34:60:7b:c7:ba:f2:db:cc:8b:3a:
94:32:4b:8c:b5:96:c6:27:b8:53:c3:88:33:de:d1:3f:c8:2b:
85:ba:f6:46:1d:87:4c:26:12:7f:b0:0e:30:c7:ea:04:11:8a:
dc:90:3b:dd:e9:54:1d:e8:53:09:3a:b1:2c:8c:9b:fe:96:33:
3a:96:09:70:db:05:77:fc:20:79:a1:a9:a7:ef:97:b9:98:d2:
f6:17:e7:00
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaI5Tu58yO77qt+i36pnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWM2ZTg0M2ZmZTdmMzRiOTVkM2EwY2Q3MmRkNGFiYjY5
YmE0MjUwHhcNMjYwNzAyMTUxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDg3YmJiMTU5MjE3MDBkM2U1ZGY5OWVhYTM4ODFlMDgxODQ0ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPiida5D8+SQ+2TIXH78GFCQ+8bt
w7eXJXOPnrYPWJFgXqT9+mHLCbtIIdWCOpgJH4GUxmF2MQgAAArEqk4IwjQpXs/D
Nn/BvFoZKXlnFUqHdlvbGIerHwsYJPXBf5UdhCGfHX87fB5niryVsVv4oPgYpqkP
3yBKp2o/7aMZm5ECeRTu7JiXWo2jUhzimMv6saq0PdHFlMKO9AjwiTIgxWfLQlNX
rEPvH2DDVeNRAkrRIHX7VAlqvzKmP1LVMy4E27+uN8Jl3jjcNpabzqMoWnVB2IIj
zN4/jPNx18WLVsQ5ug7wniS+H8YSRU8n9KRqc0MgaLtaBYcc24jHYHTe1wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFB2Hu7FZIXANPl35nqo4geCBhE62MB8GA1UdIwQY
MBaAFI2cboQ//n80uV06DNct1Ku2m6QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp4dWhEXy1melM1WFRvTTF5M1VxN2FicENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvSFllN3NWa2hjQTAtWGZtZXFqaUI0SUdFVHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvalp4dWhEXy1melM1WFRvTTF5M1VxN2FicENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLuI0AwQC
VZ6MAwQBwW3+AwQBw/XmMA0GCSqGSIb3DQEBCwUAA4IBAQBcaLIp4sP0jeKCHZ8K
N30E9Xp/lRV96mfQV5MHDkaGWeFSJ9KvvxEhy47h9AeOqL1aHbRJLEkyroccW3yn
OaC7Iq7kZg/ciOyIGN1tfYn4+G6jMsLIvsNAcgjspMh+hw+GV+Rc5Wvnm97Mehda
y5V9aXD0KE9DVxOnAp6pzyp3fEoKu34NIZ7v2/djnbEoQsFUFhYftgHPRfSBXHNU
g5N/pD0X1eXcIADqDjRge8e68tvMizqUMkuMtZbGJ7hTw4gz3tE/yCuFuvZGHYdM
JhJ/sA4wx+oEEYrckDvd6VQd6FMJOrEsjJv+ljM6lglw2wV3/CB5oamn75e5mNL2
F+cA
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:42 2026 by rpki-client