Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HieQq_H_LHGZMWK1pWLmDzRJ8Vw.roa
File: HieQq_H_LHGZMWK1pWLmDzRJ8Vw.roa (raw, json)
Hash identifier: a+lN+j6hxC2H2JybM7t4ER/MYPMlO+AuLCHTXevyvy8=
Subject key identifier: 1E:27:90:AB:F1:FF:2C:71:99:31:62:B5:A5:62:E6:0F:34:49:F1:5C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA96F0C2B599393FAF8C8994544BC1D8E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HieQq_H_LHGZMWK1pWLmDzRJ8Vw.roa
Signing time: Tue 28 Jul 2026 15:54:14 +0000
ROA not before: Tue 28 Jul 2026 15:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 191.44.21.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
200.165.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:6f:0c:2b:59:93:93:fa:f8:c8:99:45:44:bc:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 28 15:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e2790abf1ff2c71993162b5a562e60f3449f15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:aa:a3:bb:d7:47:3d:fd:7c:c7:0e:be:b8:
a3:64:46:47:59:e8:7d:a8:87:35:8f:26:74:1f:9b:
c2:19:81:02:b2:3b:b0:49:bc:79:48:41:96:1f:56:
f0:20:55:94:9d:60:7a:77:94:48:48:44:ac:31:8b:
fc:a8:08:d2:a6:fe:81:83:92:18:b1:94:6f:99:a7:
82:dc:57:89:9d:b4:62:df:13:6f:48:c3:a1:da:4c:
3d:86:0b:86:02:82:a2:58:47:dd:58:b3:9d:ac:b2:
e9:5c:20:a1:cc:79:b8:ab:0f:b6:c1:ff:d4:b3:c2:
0c:9b:23:2d:f6:81:ba:7c:bd:54:1e:ec:db:c7:1c:
20:7b:aa:c0:89:91:21:92:04:0b:e4:5f:83:df:b3:
42:05:93:d9:46:ef:0f:04:ba:23:55:da:9e:1a:1a:
1a:49:21:e8:c3:ee:a7:f4:37:92:11:a1:27:d2:1d:
eb:21:d5:12:45:92:af:a6:1f:49:0f:91:af:fc:ae:
c8:dc:18:2f:94:13:22:46:63:2f:8f:65:b6:ec:81:
f5:a2:6d:05:d5:c6:11:e6:24:0c:69:9f:ea:60:ab:
46:4c:4b:4d:91:b5:1d:57:e7:87:b1:25:4a:9b:1b:
48:67:96:df:2b:7f:b9:46:90:f0:de:3d:c3:80:c6:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:90:AB:F1:FF:2C:71:99:31:62:B5:A5:62:E6:0F:34:49:F1:5C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HieQq_H_LHGZMWK1pWLmDzRJ8Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.21.0/24
191.217.166.0/24
191.217.173.0/24
191.219.22.0/24
191.222.32.0/24
191.222.47.0/24
200.165.22.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a1:fe:f5:b3:27:a9:17:17:8f:1b:49:1c:54:c5:e8:84:5e:
12:62:c6:bf:82:df:6c:24:ed:81:e4:51:66:cc:de:05:8b:ba:
86:72:dd:3c:b6:1d:66:da:b9:97:59:20:67:c7:4a:7b:ea:08:
22:b0:dd:00:43:ea:08:e5:52:cb:69:11:4b:af:e7:5a:04:59:
49:93:94:54:82:87:be:86:6e:43:1c:50:aa:9f:25:c3:b1:fd:
f0:27:40:c0:9e:12:b3:3c:63:26:cb:94:c5:6c:c7:97:d9:43:
5a:00:cf:a3:94:39:24:63:30:0e:5c:9e:6c:c9:37:16:11:55:
38:79:ed:3a:b4:41:96:7c:ee:85:2a:9f:1c:14:72:7b:8d:6e:
06:06:ed:6b:25:bc:a8:cb:0c:7e:11:8c:a8:cc:2d:9e:6c:90:
90:97:cd:3c:67:21:12:ec:e9:c4:ac:49:b4:79:d7:67:15:fd:
4d:a2:2d:32:5f:ff:d7:7b:c7:41:a3:d6:90:60:91:aa:36:e4:
d1:ac:96:c1:9a:8d:24:ce:30:7a:d5:7e:d2:88:b0:64:e9:b1:
3f:78:2f:b8:a6:1b:d5:ae:eb:0f:64:7d:5f:5d:3a:7f:ba:ea:
25:32:08:26:73:d3:27:f7:38:dc:4d:66:0f:0e:69:30:8c:6e:
34:92:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:19:52 2026 by rpki-client