Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HqEUGRjIUWCN-LoAJsgZNzQAcd4.roa
File: HqEUGRjIUWCN-LoAJsgZNzQAcd4.roa (raw, json)
Hash identifier: W/hTNd+CTOSx3Lh1BPJBrH8fFi7uRtJSQMLg5YF9pWU=
Subject key identifier: 1E:A1:14:19:18:C8:51:60:8D:F8:BA:00:26:C8:19:37:34:00:71:DE
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F236873D67EE7DBB0CD5409586228138F
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HqEUGRjIUWCN-LoAJsgZNzQAcd4.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8311
IP address blocks: 194.143.192.0/24 maxlen: 24
194.143.193.0/24 maxlen: 24
194.143.194.0/24 maxlen: 24
194.143.195.0/24 maxlen: 24
194.143.196.0/24 maxlen: 24
194.143.197.0/24 maxlen: 24
194.143.198.0/24 maxlen: 24
194.143.199.0/24 maxlen: 24
194.143.200.0/24 maxlen: 24
194.143.201.0/24 maxlen: 24
194.143.202.0/24 maxlen: 24
194.143.204.0/24 maxlen: 24
194.143.208.0/24 maxlen: 24
194.143.211.0/24 maxlen: 24
194.143.212.0/23 maxlen: 23
194.143.214.0/24 maxlen: 24
194.143.216.0/24 maxlen: 24
194.143.219.0/24 maxlen: 24
194.143.220.0/24 maxlen: 24
213.220.1.0/24 maxlen: 24
213.220.10.0/24 maxlen: 24
213.220.12.0/24 maxlen: 24
213.220.15.0/24 maxlen: 24
213.220.17.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.21.0/24 maxlen: 24
213.220.22.0/23 maxlen: 23
213.220.24.0/21 maxlen: 24
213.220.32.0/22 maxlen: 22
213.220.36.0/23 maxlen: 23
213.220.38.0/24 maxlen: 24
213.220.40.0/24 maxlen: 24
213.220.43.0/24 maxlen: 24
213.220.44.0/22 maxlen: 22
213.220.48.0/23 maxlen: 23
213.220.52.0/23 maxlen: 23
213.220.55.0/24 maxlen: 24
213.220.56.0/23 maxlen: 23
213.220.59.0/24 maxlen: 24
213.220.60.0/23 maxlen: 24
213.220.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:73:d6:7e:e7:db:b0:cd:54:09:58:62:28:13:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ea1141918c851608df8ba0026c81937340071de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:d9:28:21:7f:86:bc:ef:da:dd:d2:ea:dd:
9f:95:1a:6f:a3:e8:e0:8e:a6:fc:28:1a:54:81:39:
7b:0e:7d:8f:73:08:cf:2e:27:bd:3c:1f:c5:c7:fb:
dc:27:0c:0a:34:34:9b:52:c7:9c:97:43:2d:a7:9c:
ac:a9:84:ac:7e:9e:92:7f:29:d2:49:58:46:b8:05:
a8:1d:f2:d3:66:a1:2d:1e:2f:1d:c4:75:f6:6c:ab:
2e:62:d4:fa:bc:98:4e:5d:29:3b:9d:82:c1:4b:91:
1e:62:e4:f2:ac:4f:9b:13:90:b8:f8:5e:83:09:ad:
ea:ce:d1:72:12:bd:53:a6:ed:f7:ae:9a:22:a7:fa:
42:f9:65:66:51:cf:1f:b0:9f:9b:ab:e1:58:34:fb:
87:e7:2c:45:2d:ab:5b:54:28:8d:54:e3:05:19:17:
be:0a:55:8d:6b:71:bd:1e:42:39:49:02:97:19:a5:
c7:fd:2b:d7:a9:04:eb:74:ab:22:37:b5:b3:9b:b4:
bf:70:de:96:5a:17:72:77:53:bb:1d:81:a8:3c:16:
14:6d:25:7a:7c:98:af:bb:7c:44:06:0e:31:a6:54:
73:28:d4:14:cf:c3:ac:5e:41:09:4b:e7:2a:94:19:
3b:be:a7:a3:fc:ea:6c:4c:ed:42:f8:07:0a:fd:5b:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:14:19:18:C8:51:60:8D:F8:BA:00:26:C8:19:37:34:00:71:DE
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HqEUGRjIUWCN-LoAJsgZNzQAcd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.192.0-194.143.202.255
194.143.204.0/24
194.143.208.0/24
194.143.211.0-194.143.214.255
194.143.216.0/24
194.143.219.0-194.143.220.255
213.220.1.0/24
213.220.10.0/24
213.220.12.0/24
213.220.15.0/24
213.220.17.0/24
213.220.19.0-213.220.38.255
213.220.40.0/24
213.220.43.0-213.220.49.255
213.220.52.0/23
213.220.55.0-213.220.57.255
213.220.59.0-213.220.61.255
213.220.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:eb:f4:9f:b4:38:80:64:69:5e:73:0a:1d:db:fc:90:ed:4b:
84:b7:84:6b:c2:77:fb:7c:f3:0d:fc:36:f9:a5:4d:1f:9c:af:
ee:a0:cb:70:e9:63:38:ed:36:73:ee:92:d1:15:1d:6e:33:f2:
01:b2:87:5d:75:38:7f:08:b5:63:c9:b9:21:8b:6b:e1:59:66:
94:5f:a3:28:9a:6e:2f:96:b7:92:a6:b7:a1:0d:d7:77:b6:dc:
ac:39:0f:38:5c:b7:ad:fb:c5:a9:d6:48:1d:97:fb:ed:91:c2:
b7:d2:0b:6e:de:f6:af:d9:10:50:b6:1f:25:c9:dc:c6:85:1c:
b6:33:ef:a9:cd:63:bc:a4:d7:a7:3b:1d:a0:e5:8f:b0:c5:51:
5c:aa:75:d5:0d:46:99:d7:f7:9a:e3:4b:6f:27:5c:1c:f6:1d:
d3:ad:25:f4:a5:10:8d:6e:da:4b:3c:97:34:fb:14:b6:07:a5:
ac:bd:fd:35:46:ee:01:c1:66:92:d2:3e:af:50:75:e1:28:2e:
c2:89:c0:0f:32:df:79:1a:fa:23:0d:f6:56:64:32:63:72:e4:
ce:30:8e:5a:5f:c1:e4:0f:70:05:9e:f3:f0:95:b0:21:a0:78:
10:6e:6a:4f:b6:be:b4:ec:8f:e4:51:c0:90:c7:d8:b5:cf:af:
22:8b:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:46:07 2026 by rpki-client