Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/HQPoNNDYmQ0PTAgVt-7nCNhXdnE.roa
File: HQPoNNDYmQ0PTAgVt-7nCNhXdnE.roa (raw, json)
Hash identifier: kCFdS1fFwuAmUzm+bB/T+yIon9lUTHPLoW+ISrnBNVU=
Subject key identifier: 1D:03:E8:34:D0:D8:99:0D:0F:4C:08:15:B7:EE:E7:08:D8:57:76:71
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 01A0339E4E91B97487922C6F84F8F15F986D
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/HQPoNNDYmQ0PTAgVt-7nCNhXdnE.roa
Signing time: Mon 24 Aug 2026 11:53:27 +0000
ROA not before: Mon 24 Aug 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25454
IP address blocks: 46.166.0.0/18 maxlen: 24
77.89.192.0/18 maxlen: 24
77.89.208.0/24 maxlen: 24
94.243.64.0/18 maxlen: 24
185.8.68.0/22 maxlen: 22
185.8.68.0/23 maxlen: 23
185.8.68.0/24 maxlen: 24
185.8.69.0/24 maxlen: 24
185.167.132.0/22 maxlen: 24
188.131.0.0/17 maxlen: 24
188.131.8.0/21 maxlen: 21
193.239.182.0/23 maxlen: 24
195.22.224.0/19 maxlen: 24
212.56.192.0/19 maxlen: 24
217.12.112.0/20 maxlen: 24
217.12.126.0/24 maxlen: 24
2a00:1858::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:9e:4e:91:b9:74:87:92:2c:6f:84:f8:f1:5f:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Aug 24 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d03e834d0d8990d0f4c0815b7eee708d8577671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ef:ba:1b:5b:41:bf:20:7f:0a:26:9d:8d:
bc:59:5b:27:39:b3:e0:44:43:a7:de:88:50:0b:cb:
f3:0b:f9:41:ac:6d:35:ca:00:25:b1:c8:dd:85:0b:
e9:ec:df:b0:d7:aa:c1:02:b2:c8:c5:24:7c:32:c4:
9d:e7:ac:ef:39:9a:1b:2d:a2:fb:fc:9b:5c:0e:c5:
92:15:7b:44:c9:eb:08:98:0a:ac:a8:42:42:01:1c:
ba:2b:fd:5d:07:12:1e:2b:a0:78:8f:29:1a:f7:ef:
98:6f:fb:08:fb:3f:c2:86:fe:63:57:6e:06:74:01:
72:3b:1c:76:e8:1c:7f:67:05:77:71:a4:8a:60:de:
ec:40:f5:a4:c5:62:43:39:27:e1:f6:16:63:c4:60:
fa:54:73:7e:71:13:28:b7:01:6b:ee:99:df:9e:55:
b5:cc:dd:cd:dc:9c:78:f6:bc:d8:e9:d7:5e:b4:dd:
f4:df:9f:52:6b:3f:fc:59:68:4a:99:89:3a:13:a1:
44:04:41:1d:3a:3a:a7:70:27:c1:ae:df:4c:7f:84:
98:ee:43:9b:c5:cf:8a:0d:57:d0:90:e6:3c:e3:44:
54:a2:32:10:d4:17:e4:b5:79:b9:49:76:d6:6d:15:
db:27:f5:13:5b:7c:01:41:5e:1e:25:bd:30:30:19:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:E8:34:D0:D8:99:0D:0F:4C:08:15:B7:EE:E7:08:D8:57:76:71
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/HQPoNNDYmQ0PTAgVt-7nCNhXdnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.0.0/18
77.89.192.0/18
94.243.64.0/18
185.8.68.0/22
185.167.132.0/22
188.131.0.0/17
193.239.182.0/23
195.22.224.0/19
212.56.192.0/19
217.12.112.0/20
IPv6:
2a00:1858::/32
Signature Algorithm: sha256WithRSAEncryption
73:97:53:27:d9:67:a6:59:c1:15:cd:19:fb:a9:13:3f:6c:4c:
45:7e:b4:7b:c1:3c:ec:be:4f:ff:6d:a0:f2:41:18:77:47:97:
16:96:89:39:81:e8:5a:67:1a:0e:a9:8c:a9:7d:78:8d:ab:32:
bb:2d:d1:52:2d:55:ca:29:40:f1:ee:8d:27:39:23:b9:e1:b2:
71:c6:6c:6c:0c:da:89:00:82:59:60:e1:cc:03:00:0e:e1:b2:
f8:79:e0:47:ec:f3:fd:d9:f4:01:e1:83:a0:81:c7:76:b9:fe:
72:11:62:6d:56:22:b1:64:ad:39:79:a7:d8:21:8b:7d:98:31:
75:88:1b:08:0c:e4:d1:4d:29:4e:b6:5a:d2:e0:b3:82:94:ba:
e6:91:94:09:e2:6b:67:a4:a0:93:71:c6:ec:ab:0d:86:5d:06:
ed:f4:95:47:06:b9:d6:e5:a4:88:94:3c:81:3f:30:65:88:b7:
c0:b9:b1:b6:ed:9f:cb:0e:91:88:20:4c:ea:d5:e5:11:d3:e4:
fb:ff:01:95:4c:58:57:38:c9:47:68:ff:3c:a5:40:c7:ab:10:
d1:53:f2:9d:ee:63:23:17:0b:6b:80:cc:f9:71:bf:b1:64:f1:
d6:47:c6:7a:28:89:54:2c:11:69:fe:f3:40:d4:eb:df:bd:02:
bc:31:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:40 2026 by rpki-client