Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/HbP-7QLw7QBmNNFKl1-VjRoKQYQ.roa
File: HbP-7QLw7QBmNNFKl1-VjRoKQYQ.roa (raw, json)
Hash identifier: HNxpWcVsRSYnzq6dU7camseM1P/zhpgAzT0swheRdUc=
Subject key identifier: 1D:B3:FE:ED:02:F0:ED:00:66:34:D1:4A:97:5F:95:8D:1A:0A:41:84
Certificate issuer: /CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Certificate serial: 019FFBC82CFA6B46EA62CEAFE0AFD004B5F5
Authority key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/HbP-7QLw7QBmNNFKl1-VjRoKQYQ.roa
Signing time: Thu 13 Aug 2026 15:40:27 +0000
ROA not before: Thu 13 Aug 2026 15:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209534
IP address blocks: 136.148.132.0/22 maxlen: 22
2a13:7f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:c8:2c:fa:6b:46:ea:62:ce:af:e0:af:d0:04:b5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Validity
Not Before: Aug 13 15:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1db3feed02f0ed006634d14a975f958d1a0a4184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:4d:a7:29:8a:61:56:c3:af:41:07:e1:32:
3f:a5:17:83:c1:b4:0c:71:a6:47:70:88:9c:46:0d:
03:2d:4c:25:6d:d3:df:80:5f:16:ed:77:c5:f3:7e:
17:dc:70:ee:af:f6:fe:c3:15:f4:1e:79:10:44:b1:
54:18:81:bd:f6:66:83:e9:ae:47:93:63:51:1e:99:
b8:1e:97:38:76:f9:b2:1d:ac:fe:9f:06:bf:5d:bd:
56:dc:34:ab:72:b6:ae:f6:73:95:57:61:03:a7:f0:
8b:7d:ee:94:f1:81:f6:9a:ac:2e:a5:0e:41:a2:de:
0c:80:97:20:bc:c3:c6:de:d6:0a:ec:b5:38:66:f6:
3c:17:48:a1:53:04:fe:15:2b:2a:d5:ee:dd:e1:0c:
39:f0:d0:8b:03:8d:7f:c9:a6:cb:d9:d8:84:e8:aa:
b2:9a:2b:59:77:99:e9:2b:66:a3:ea:7c:60:ab:63:
9e:c3:d8:1c:9c:66:3b:0e:b6:22:8d:51:13:9b:71:
b0:8f:fd:75:ee:24:63:f4:34:8e:14:41:cd:89:d0:
ee:f1:84:ae:c6:6b:a2:2b:a7:85:ef:bb:49:cb:12:
20:30:ab:a0:f7:93:04:c8:af:d3:16:ce:bb:be:e8:
6e:f8:4a:7d:38:ad:a4:17:1f:55:ac:a2:5e:f4:7a:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:FE:ED:02:F0:ED:00:66:34:D1:4A:97:5F:95:8D:1A:0A:41:84
X509v3 Authority Key Identifier:
keyid:AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/HbP-7QLw7QBmNNFKl1-VjRoKQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.132.0/22
IPv6:
2a13:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
38:d6:f8:79:f2:ac:0a:69:64:03:32:bb:00:bc:87:68:df:36:
93:58:6b:86:c6:7d:e9:eb:0b:03:38:5b:42:8f:5b:04:2a:6b:
48:96:a9:b4:bc:e0:cc:8a:49:52:ef:31:d8:33:e8:ff:b0:19:
f3:f7:e4:38:2b:b6:07:8b:a7:48:2c:ce:1e:9f:89:a9:43:69:
24:5a:7d:d2:6f:0f:cf:77:27:c3:24:40:db:51:44:08:af:07:
71:14:92:25:19:9e:b0:be:1c:0a:54:79:27:39:7c:2b:5d:85:
1a:f7:c5:20:70:c7:91:6c:1a:03:e7:58:25:95:fb:92:8d:94:
66:48:8f:c7:ef:1b:20:f9:07:2c:09:2f:dc:3f:52:74:b9:b5:
b0:94:fb:d8:70:95:28:5c:7e:0b:6b:98:59:f9:e8:f4:89:21:
81:9b:3a:ff:61:c1:56:52:05:a5:91:fc:2b:ff:8c:41:fb:3a:
63:23:ef:d4:b8:a8:d0:20:9f:11:e5:20:c5:65:3d:01:05:36:
b7:22:75:d1:8d:ac:18:6a:6f:12:1c:6e:0d:71:07:cc:a0:5e:
48:3c:4d:06:cc:6a:01:73:e9:07:24:a3:e5:ad:2f:d8:05:38:
f8:a6:bb:98:03:e5:f6:1c:90:31:bb:29:6d:98:a1:5a:e6:fa:
76:ab:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:44 2026 by rpki-client