Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/HlWQb2FJPJevQzdN-672g7_czRw.roa
File: HlWQb2FJPJevQzdN-672g7_czRw.roa (raw, json)
Hash identifier: RXUVTX63EDXGPDEfUV3NoAdiOJHw8+fXf2xrTwsVvM0=
Subject key identifier: 1E:55:90:6F:61:49:3C:97:AF:43:37:4D:FB:AE:F6:83:BF:DC:CD:1C
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019A3042EA62193EC6C1D5696807F27EE11E
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/HlWQb2FJPJevQzdN-672g7_czRw.roa
Signing time: Wed 29 Oct 2025 13:58:02 +0000
ROA not before: Wed 29 Oct 2025 13:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216192
IP address blocks: 85.159.89.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.174.0/24 maxlen: 24
194.177.14.0/24 maxlen: 24
2a13:f6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:42:ea:62:19:3e:c6:c1:d5:69:68:07:f2:7e:e1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Oct 29 13:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e55906f61493c97af43374dfbaef683bfdccd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:aa:3f:5b:cb:37:bc:c1:1a:e2:6b:32:fd:
51:5c:a5:79:a5:1f:6a:07:89:c6:39:44:a4:f8:64:
01:5e:b9:21:b6:0a:02:c5:ea:86:5a:fb:35:17:b5:
a9:6c:99:45:63:74:a1:0b:b7:09:d6:c6:37:ed:e4:
eb:35:c7:26:0a:63:b2:60:3b:50:14:3e:55:9b:88:
fa:47:11:ba:61:42:fd:8f:b0:df:eb:7d:b0:71:b5:
89:0a:51:de:ce:b9:31:e4:63:39:c4:77:7a:7d:7a:
f7:40:9c:81:bb:2a:bc:14:0f:59:f6:81:45:4d:56:
63:9b:4c:47:57:c4:7f:ff:71:a2:7b:9d:05:05:fb:
43:7f:4d:97:c4:c2:63:da:c8:ec:ab:39:5a:a4:b3:
e4:3a:ab:a8:d4:36:db:21:f6:89:96:54:cb:90:49:
4f:90:f4:9f:dc:a4:a4:dd:8a:22:39:03:22:d1:fe:
3e:a3:fd:c0:75:38:68:c9:49:60:9f:c0:51:f0:bf:
73:58:cc:34:aa:07:6c:24:5d:d7:80:2e:e6:df:41:
02:54:e7:15:fc:0e:49:52:62:19:78:a1:7a:cc:ec:
ce:53:18:ed:7f:b9:88:81:5a:8e:18:13:d2:20:b3:
ce:2c:8a:fb:80:b9:4c:b0:2e:ce:67:70:28:bd:46:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:90:6F:61:49:3C:97:AF:43:37:4D:FB:AE:F6:83:BF:DC:CD:1C
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/HlWQb2FJPJevQzdN-672g7_czRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.89.0/24
188.125.161.0/24
188.125.165.0-188.125.167.255
188.125.169.0/24
188.125.174.0/24
194.177.14.0/24
IPv6:
2a13:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:2c:dc:f2:41:6e:ee:a4:4f:0f:8f:d2:54:76:8c:25:43:a5:
50:f3:64:fa:48:3b:ac:46:a5:fe:d0:d6:d3:b9:44:26:b7:ab:
5f:3e:29:9c:c2:7b:8f:5b:89:00:13:76:79:8c:e6:66:96:bd:
3c:5d:1b:93:f9:44:e0:56:0d:48:80:a6:ed:59:be:ef:d6:2a:
5d:8a:7c:12:00:a0:87:68:a8:e4:52:33:79:d8:17:02:80:63:
3c:8b:ac:f8:8a:9a:23:9f:81:ad:eb:e5:5f:23:da:70:69:ba:
4f:db:88:a5:1d:06:57:29:bc:72:f5:a6:5c:9a:e6:b2:23:52:
2b:aa:66:01:ec:0b:86:72:f5:73:40:98:5b:28:bc:15:b7:b4:
98:82:08:2c:ba:2e:ca:1e:14:55:99:7b:32:73:35:02:40:d9:
9b:4b:a9:dd:0b:e7:b5:87:0a:a4:67:91:3a:6b:68:32:f9:33:
b3:b1:73:23:4e:e4:d1:4c:20:75:1b:92:3a:56:cc:ea:1d:b9:
16:ed:1a:4f:18:36:d4:1c:63:e3:6d:5a:00:e5:2d:61:1b:ab:
d8:cd:4a:4f:72:2f:e2:61:07:a9:6d:53:c3:7b:5b:dc:f2:6b:
8a:43:51:56:fd:3d:e1:7d:32:f0:42:0a:c9:d1:ad:7e:30:b8:
4d:8e:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:12:36 2025 by rpki-client