Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-hwdL4zNBwa2jQAF83qxkcYdW7E.roa
File: 1-hwdL4zNBwa2jQAF83qxkcYdW7E.roa (raw, json)
Hash identifier: YhNRCQGq/gKJOyHlwEDralxOQebULiMQWheU8BiiVt8=
Subject key identifier: FA:1C:1D:2F:8C:CD:07:06:B6:8D:00:05:F3:7A:B1:91:C6:1D:5B:B1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019A3988E193CD26B20CA9C6B58F3F4E6C0F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-hwdL4zNBwa2jQAF83qxkcYdW7E.roa
Signing time: Fri 31 Oct 2025 09:11:03 +0000
ROA not before: Fri 31 Oct 2025 09:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214819
IP address blocks: 45.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:88:e1:93:cd:26:b2:0c:a9:c6:b5:8f:3f:4e:6c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 31 09:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa1c1d2f8ccd0706b68d0005f37ab191c61d5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:a7:49:a9:5a:a5:18:60:f0:ec:c0:f1:81:
71:8d:d5:79:4c:a1:f9:63:aa:ad:d6:85:9f:10:8d:
85:ff:8b:dc:7d:15:ce:b8:9c:84:76:c6:77:2b:31:
ea:73:f9:a6:7d:4f:cb:55:1a:1f:be:46:32:c5:5e:
09:26:fc:c0:b9:34:92:64:3a:b0:6a:d9:14:8e:14:
84:2e:94:e2:d6:ec:89:32:5b:a2:a9:0b:d7:f2:dc:
ed:8e:dc:df:ab:d3:b8:d6:be:bb:28:86:a4:8b:92:
81:52:86:32:bd:5d:62:48:66:fc:b5:ee:14:c3:69:
82:38:32:0a:8e:84:fe:c5:76:d4:35:98:f7:e3:df:
03:5b:bc:a5:8b:fb:8d:17:f2:c0:c2:f0:5b:9d:2c:
75:58:a6:1a:77:ba:2b:59:73:91:69:4b:6c:cb:ba:
41:ee:38:6f:10:fb:0a:90:f7:02:d9:0c:43:ac:5d:
c5:fc:76:80:3a:93:ef:14:01:9e:de:a4:9e:22:2a:
1f:9e:b3:74:a9:44:bc:83:1b:3d:6b:29:ca:be:08:
15:67:73:60:96:7f:ec:01:00:62:f2:55:29:13:5c:
0a:6b:b1:27:6b:68:04:dd:7d:15:3f:d7:99:99:10:
7f:6e:ab:83:27:51:43:e7:df:32:b6:03:51:29:16:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:1D:2F:8C:CD:07:06:B6:8D:00:05:F3:7A:B1:91:C6:1D:5B:B1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-hwdL4zNBwa2jQAF83qxkcYdW7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d8:15:71:8c:56:36:44:38:64:e3:7f:1d:e4:1a:dd:6c:fa:
58:1b:45:2b:08:64:1d:c9:82:6e:39:15:49:30:e0:24:b8:9e:
76:e4:1e:05:36:5c:7a:99:08:66:f7:ef:c8:ca:c4:d5:8e:c5:
8a:55:41:e5:d5:e8:83:fe:6a:32:24:7f:68:b8:51:57:9c:c4:
f1:b1:9f:f9:16:87:04:7e:f6:02:c8:bf:f8:0c:b5:87:8e:fe:
64:34:9a:7f:4d:4a:e3:f9:17:4f:e5:ad:6e:37:b5:55:7e:e1:
85:f1:0e:22:89:c3:c2:2e:8e:b8:cc:17:52:c4:eb:71:e3:1f:
ac:a3:fa:c4:78:16:de:01:c5:59:fc:03:77:24:5e:81:23:cd:
80:d5:f5:e6:7f:d1:66:3c:58:fe:00:72:99:a2:cf:3b:63:b4:
34:28:96:f9:fe:05:0f:6b:8f:f4:8e:7b:1e:29:ed:37:bb:1f:
76:16:80:c2:a6:cd:7f:41:c8:86:8a:23:41:e5:75:99:f4:52:
4f:a9:e8:b4:f4:fc:b6:b0:ed:62:73:22:1a:ff:f1:e2:c4:5a:
f3:5a:41:c9:6b:bc:1c:17:be:5f:7b:be:9f:de:7e:39:1e:7d:
b5:53:77:cb:4d:c4:cd:b4:d3:c9:ef:b2:46:9c:36:58:29:96:
5f:64:1e:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZo5iOGTzSayDKnGtY8/TmwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUxMDMxMDkxMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTFjMWQyZjhjY2QwNzA2YjY4ZDAwMDVmMzdhYjE5MWM2MWQ1YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjWnSalapRhg8OzA8YFxjdV5TKH5
Y6qt1oWfEI2F/4vcfRXOuJyEdsZ3KzHqc/mmfU/LVRofvkYyxV4JJvzAuTSSZDqw
atkUjhSELpTi1uyJMluiqQvX8tztjtzfq9O41r67KIaki5KBUoYyvV1iSGb8te4U
w2mCODIKjoT+xXbUNZj3498DW7yli/uNF/LAwvBbnSx1WKYad7orWXORaUtsy7pB
7jhvEPsKkPcC2QxDrF3F/HaAOpPvFAGe3qSeIiofnrN0qUS8gxs9aynKvggVZ3Ng
ln/sAQBi8lUpE1wKa7Ena2gE3X0VP9eZmRB/bquDJ1FD598ytgNRKRZdnQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPocHS+MzQcGto0ABfN6sZHGHVuxMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMS1od2RMNHpOQndhMmpRQUY4M3F4a2NZZFc3RS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFi
Yy8xL1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1aEDAN
BgkqhkiG9w0BAQsFAAOCAQEAC9gVcYxWNkQ4ZON/HeQa3Wz6WBtFKwhkHcmCbjkV
STDgJLieduQeBTZcepkIZvfvyMrE1Y7FilVB5dXog/5qMiR/aLhRV5zE8bGf+RaH
BH72Asi/+Ay1h47+ZDSaf01K4/kXT+Wtbje1VX7hhfEOIonDwi6OuMwXUsTrceMf
rKP6xHgW3gHFWfwDdyRegSPNgNX15n/RZjxY/gBymaLPO2O0NCiW+f4FD2uP9I57
HintN7sfdhaAwqbNf0HIhoojQeV1mfRST6notPT8trDtYnMiGv/x4sRa81pByWu8
HBe+X3u+n95+OR59tVN3y03EzbTTye+yRpw2WCmWX2QeaA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:14:27 2025 by rpki-client