Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/hwehb2jiu3a77T6FcjmviTy6QbQ.roa
File: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (raw, json)
Hash identifier: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=
Subject key identifier: 87:07:A1:6F:68:E2:BB:76:BB:ED:3E:85:72:39:AF:89:3C:BA:41:B4
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019F6AB7ED4596A83E11C9420A96193E1172
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/hwehb2jiu3a77T6FcjmviTy6QbQ.roa
Signing time: Thu 16 Jul 2026 11:37:46 +0000
ROA not before: Thu 16 Jul 2026 11:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.136.192.0/20 maxlen: 24
2a07:4ac0:f005::/48 maxlen: 48
2a07:4ac0:f006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:b7:ed:45:96:a8:3e:11:c9:42:0a:96:19:3e:11:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Jul 16 11:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8707a16f68e2bb76bbed3e857239af893cba41b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:ac:59:cb:c5:f0:27:63:14:94:c9:f8:37:
cd:03:f6:0e:ea:ba:f0:15:61:d4:51:dd:b9:1d:32:
39:1f:e0:ea:03:89:83:5b:55:41:2c:ec:3d:5f:af:
90:72:29:83:1f:9b:56:f4:b2:68:5b:58:b4:75:ae:
15:f9:6e:97:b0:25:4c:57:a5:b3:33:13:b2:ef:41:
b4:b3:2d:cd:46:6d:97:25:a5:0c:6c:49:07:f7:74:
1a:a1:f9:8f:58:0c:d2:7e:9c:15:5e:f2:43:08:25:
51:df:d6:26:c1:44:8a:88:ab:de:89:04:5a:04:30:
6f:13:d9:45:af:84:be:59:94:fc:f4:65:95:0a:e4:
12:bd:bb:5f:ff:85:f9:39:8f:23:f3:f1:7b:96:81:
ad:6c:06:fa:44:fe:ef:94:d2:8c:49:ed:d0:aa:78:
02:7f:1a:26:04:04:71:f9:80:77:ea:c7:7a:15:e7:
82:e7:65:29:69:ba:27:98:6b:f4:32:1d:6b:b6:d8:
cf:a3:ba:0b:45:0f:d1:b8:7b:d3:36:42:c5:13:cf:
f2:86:87:0e:90:da:68:02:d3:21:2f:e1:ee:20:72:
f4:77:5c:18:4c:20:cc:e4:03:3a:09:54:0d:8c:45:
87:54:28:51:5a:18:56:b4:54:54:09:d8:bc:f3:af:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:A1:6F:68:E2:BB:76:BB:ED:3E:85:72:39:AF:89:3C:BA:41:B4
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/hwehb2jiu3a77T6FcjmviTy6QbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.136.192.0/20
IPv6:
2a07:4ac0:f005::-2a07:4ac0:f006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ac:aa:4f:b5:f6:c1:67:37:45:6c:96:b6:a3:e8:1a:83:73:25:
2b:a5:45:49:ea:25:30:c8:03:f9:9a:5c:d7:dc:3b:96:4d:19:
de:7e:76:3a:27:c2:26:52:ac:9e:6e:77:6e:52:d4:b2:7a:95:
e2:3b:50:b9:6a:9c:de:5a:79:34:8d:cf:db:ba:7a:82:cc:71:
56:f8:77:51:ae:2f:4a:02:a9:f4:f3:6f:1b:64:11:67:fe:bb:
58:d8:05:4d:94:6c:8c:a7:14:cf:33:33:a4:d7:06:cc:27:05:
54:c2:b8:57:2a:ba:90:a9:2f:c6:fd:c5:c8:6c:96:31:0f:61:
10:0e:f8:85:a7:d4:ac:78:ed:1e:00:c3:39:81:97:f4:e0:62:
2e:97:12:81:60:13:cc:03:b2:32:88:fc:ce:18:5e:42:55:a3:
10:b3:f6:4b:d1:3b:a4:a2:5a:77:96:bc:a2:4a:a5:01:df:11:
31:8e:58:89:c5:87:6f:d4:f7:38:3d:ab:f3:52:96:a8:dc:90:
e1:e1:a6:42:e5:d5:14:db:86:68:a2:6c:ce:6d:ed:bb:3e:0f:
e5:ad:1f:b1:e2:f4:22:8b:45:70:eb:b3:b9:99:fb:fa:b2:73:
65:89:e2:ac:ad:7a:c1:02:36:7c:63:ce:19:9c:32:34:a0:7e:
08:7a:7e:51
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ9qt+1Flqg+EclCCpYZPhFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjYwNzE2MTEzNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzA3YTE2ZjY4ZTJiYjc2YmJlZDNlODU3MjM5YWY4OTNjYmE0MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9esWcvF8CdjFJTJ+DfNA/YO6rrw
FWHUUd25HTI5H+DqA4mDW1VBLOw9X6+QcimDH5tW9LJoW1i0da4V+W6XsCVMV6Wz
MxOy70G0sy3NRm2XJaUMbEkH93QaofmPWAzSfpwVXvJDCCVR39YmwUSKiKveiQRa
BDBvE9lFr4S+WZT89GWVCuQSvbtf/4X5OY8j8/F7loGtbAb6RP7vlNKMSe3QqngC
fxomBARx+YB36sd6FeeC52UpabonmGv0Mh1rttjPo7oLRQ/RuHvTNkLFE8/yhocO
kNpoAtMhL+HuIHL0d1wYTCDM5AM6CVQNjEWHVChRWhhWtFRUCdi8869C5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIcHoW9o4rt2u+0+hXI5r4k8ukG0MB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvaHdlaGIyaml1M2E3N1Q2RmNqbXZpVHk2UWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQEl4jAMBoE
AgACMBQwEgMHACoHSsDwBQMHACoHSsDwBjANBgkqhkiG9w0BAQsFAAOCAQEArKpP
tfbBZzdFbJa2o+gag3MlK6VFSeolMMgD+Zpc19w7lk0Z3n52OifCJlKsnm53blLU
snqV4jtQuWqc3lp5NI3P27p6gsxxVvh3Ua4vSgKp9PNvG2QRZ/67WNgFTZRsjKcU
zzMzpNcGzCcFVMK4Vyq6kKkvxv3FyGyWMQ9hEA74hafUrHjtHgDDOYGX9OBiLpcS
gWATzAOyMoj8zhheQlWjELP2S9E7pKJad5a8okqlAd8RMY5YicWHb9T3OD2r81KW
qNyQ4eGmQuXVFNuGaKJszm3tuz4P5a0fseL0IotFcOuzuZn7+rJzZYnirK16wQI2
fGPOGZwyNKB+CHp+UQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:48 2026 by rpki-client