Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/hknoh0docunxqu7Kug4gGNXBb14.roa
File: hknoh0docunxqu7Kug4gGNXBb14.roa (raw, json)
Hash identifier: AvuF9rMQZFa9ncFfq1mEcbKCX39jWM/10n7pjunfFSM=
Subject key identifier: 86:49:E8:87:47:68:72:E9:F1:AA:EE:CA:BA:0E:20:18:D5:C1:6F:5E
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019A10E3E91C67C13BFD3DE37321BD3FCCF6
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/hknoh0docunxqu7Kug4gGNXBb14.roa
Signing time: Thu 23 Oct 2025 11:46:03 +0000
ROA not before: Thu 23 Oct 2025 11:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208959
IP address blocks: 45.86.221.0/24 maxlen: 24
46.232.210.0/23 maxlen: 23
185.207.164.0/22 maxlen: 22
185.207.164.0/24 maxlen: 24
185.207.165.0/24 maxlen: 24
185.207.166.0/23 maxlen: 23
185.207.166.0/24 maxlen: 24
185.207.167.0/24 maxlen: 24
2a11:b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:e3:e9:1c:67:c1:3b:fd:3d:e3:73:21:bd:3f:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Oct 23 11:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8649e887476872e9f1aaeecaba0e2018d5c16f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:09:88:73:80:73:56:28:c9:19:3f:57:7c:
4c:c2:da:db:97:86:1b:f5:42:df:79:52:ad:80:42:
9f:f7:f2:f3:a6:02:10:09:41:30:4c:b1:a0:54:1c:
f1:b6:05:a2:92:0a:37:3e:80:72:81:d1:69:2a:04:
fd:95:bc:21:76:dd:2f:c9:2e:c2:c8:31:76:d5:07:
70:bf:a6:e1:ac:cc:8f:15:c1:21:cf:83:85:56:20:
a5:34:44:e1:1e:7f:b6:33:97:02:56:e6:b5:d4:d4:
00:38:d4:a3:72:83:e7:c6:08:06:3d:62:f5:4c:2e:
91:84:67:5f:bd:8e:7b:0b:a6:7c:9e:76:9a:b0:3d:
7e:77:65:16:8e:07:99:e1:9d:2f:cc:6c:2f:d7:22:
41:20:92:e6:93:c2:6a:62:bb:a3:c1:b2:f3:4e:07:
49:46:d1:b1:c8:44:d5:f0:73:14:d9:95:29:74:ed:
ee:fc:1d:d9:a3:3c:9d:c6:64:72:4b:2e:7f:db:d6:
96:2b:d1:8c:46:2a:5f:b0:38:e9:5a:37:36:96:19:
6a:8d:f1:2a:1c:ff:6a:9f:12:48:55:8f:06:b6:92:
20:7f:c0:4a:44:0f:1a:39:d1:8a:81:f8:78:d9:98:
d4:38:7e:de:c2:1b:f4:10:e3:e5:26:00:6d:10:ae:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:49:E8:87:47:68:72:E9:F1:AA:EE:CA:BA:0E:20:18:D5:C1:6F:5E
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/hknoh0docunxqu7Kug4gGNXBb14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.221.0/24
46.232.210.0/23
185.207.164.0/22
IPv6:
2a11:b00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:bc:e1:a5:b8:c5:6c:5b:dd:63:3f:d2:f1:ac:f2:44:fb:0e:
9b:c8:4e:f8:17:2d:1c:f2:9c:98:2a:e0:23:16:53:96:30:ca:
2c:c7:a8:51:e2:c5:88:40:55:80:a6:21:7f:ee:9b:6c:a5:4a:
60:38:6a:d7:1f:2a:54:6f:6d:70:e2:57:f3:54:98:c9:33:3c:
c7:02:4f:d6:3f:33:62:cc:5e:20:1c:34:5d:9c:59:41:4a:16:
bb:88:98:71:e9:ee:3f:1e:f7:80:6a:c0:f6:f5:0a:53:42:58:
12:81:da:d9:ca:82:d8:58:aa:d0:6d:3c:ff:07:76:21:c4:12:
95:93:c7:dd:3f:c6:d3:6e:d9:0f:63:91:3d:4d:72:d5:49:3e:
4c:24:f3:de:91:ff:dd:e4:39:1e:4a:9b:db:8a:d9:1e:7a:4e:
4c:e2:a5:f8:77:71:32:c9:3f:31:18:9f:7f:76:3c:1e:48:90:
1a:7d:af:be:95:33:15:3c:dd:c6:41:00:cd:5e:cb:67:48:eb:
96:e3:c0:10:d8:8c:77:68:db:73:6c:25:df:da:f8:c9:8b:1b:
37:ce:49:9f:94:40:0d:b3:50:0e:eb:6f:f0:ab:57:e7:4c:5d:
73:33:a4:3b:ed:d9:7e:79:75:bf:66:41:79:96:47:ac:3e:17:
fb:7d:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:51:02 2025 by rpki-client