Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2HQLHFmREoRyQIoX-ZTBbNGelow.roa
File: 2HQLHFmREoRyQIoX-ZTBbNGelow.roa (raw, json)
Hash identifier: /EpmFjhwB6oV67M3eqfB6mICrqRtQgJyK7uqppY6Wag=
Subject key identifier: D8:74:0B:1C:59:91:12:84:72:40:8A:17:F9:94:C1:6C:D1:9E:96:8C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019EDBBC42C59D9323AA275EFE65A10CFBAE
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2HQLHFmREoRyQIoX-ZTBbNGelow.roa
Signing time: Thu 18 Jun 2026 17:16:48 +0000
ROA not before: Thu 18 Jun 2026 17:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.182.0/24 maxlen: 24
188.130.228.0/23 maxlen: 23
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:bc:42:c5:9d:93:23:aa:27:5e:fe:65:a1:0c:fb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 18 17:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8740b1c5991128472408a17f994c16cd19e968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:39:be:83:97:35:e2:12:13:26:8b:a0:01:
2f:87:7c:8f:67:ad:57:ad:95:a7:4b:b5:b6:25:b5:
4d:d0:b4:85:6c:57:7b:e4:b4:7b:b7:b9:f2:7d:49:
8f:de:b2:3c:8c:1c:aa:f7:d0:22:fb:b0:ff:fc:9a:
e3:0f:cb:95:32:c7:81:67:25:4f:8c:b4:60:3c:58:
cf:6d:5b:ac:b3:bc:27:30:9a:42:98:05:85:4a:8e:
32:0f:f2:45:21:8b:a8:9b:bd:41:bf:21:6e:09:ed:
e7:51:e1:c6:58:cb:c7:f2:4b:d2:ca:fc:6e:58:fc:
5e:3a:d0:2c:9f:06:1c:9e:49:47:36:5d:79:0e:da:
d6:dd:cf:b7:e3:c2:cf:72:c6:db:86:da:41:70:f5:
fc:3a:fe:89:6b:85:86:6c:0e:90:5b:5e:2d:77:0a:
7a:eb:f8:64:03:14:a1:22:0a:71:a5:7d:f1:20:2c:
ab:15:d8:05:5f:eb:ef:68:f9:b8:14:5a:e6:3a:92:
45:aa:bb:a7:d6:d2:37:ae:63:77:0c:2b:c1:8d:2c:
51:78:38:03:9f:4c:9c:3f:3d:66:d5:01:47:46:ba:
79:da:0c:50:b8:27:9c:4c:03:57:7a:ee:1b:ff:b0:
9d:3a:d9:dc:4e:29:2a:57:c4:bc:48:a7:31:b6:7b:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:0B:1C:59:91:12:84:72:40:8A:17:F9:94:C1:6C:D1:9E:96:8C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2HQLHFmREoRyQIoX-ZTBbNGelow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
188.130.228.0/23
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
ad:ea:f9:c4:f4:f3:0d:d4:e7:98:99:49:1f:f5:e6:d5:6b:41:
8f:8b:42:68:c2:7a:31:97:17:94:39:b2:0c:c2:a9:aa:d1:68:
b0:29:5e:41:04:2d:60:0d:ec:09:2a:82:95:a4:85:f2:c4:f2:
6d:7d:8b:99:9e:2d:91:90:cd:45:f0:9e:41:05:d0:6d:8e:e4:
33:bd:ca:d5:f7:c5:f3:8f:2c:13:e9:ae:f6:0f:83:78:25:e9:
59:1a:7d:39:6e:84:2b:43:94:78:00:73:91:04:09:b4:3f:94:
23:42:7e:12:26:e0:ab:fc:78:2a:4c:60:93:90:2d:f3:f6:69:
ec:a6:0e:a2:b4:d9:93:b0:6a:b3:3a:5e:27:f5:72:ee:cd:98:
9e:91:0b:75:30:5a:a5:75:f6:b1:9d:8e:1e:b9:37:f0:74:ee:
a7:7a:5a:51:d4:92:5b:2e:9b:87:6a:2f:2b:87:78:85:5f:b9:
64:9d:6c:44:be:fa:de:2e:15:e7:3e:b3:d1:89:f5:da:6b:1f:
0c:e3:45:31:e4:cc:d1:25:dc:09:46:6c:85:1d:e4:be:ff:2c:
4b:16:a5:26:d5:66:58:f9:4c:01:50:b9:f1:de:64:5f:bc:ee:
15:27:64:ef:7b:f0:06:aa:d5:57:87:6d:9d:13:b8:8d:0e:9d:
ac:1c:af:2c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ7bvELFnZMjqide/mWhDPuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwNjE4MTcxNjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODc0MGIxYzU5OTExMjg0NzI0MDhhMTdmOTk0YzE2Y2QxOWU5NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZA5voOXNeISEyaLoAEvh3yPZ61X
rZWnS7W2JbVN0LSFbFd75LR7t7nyfUmP3rI8jByq99Ai+7D//JrjD8uVMseBZyVP
jLRgPFjPbVuss7wnMJpCmAWFSo4yD/JFIYuom71BvyFuCe3nUeHGWMvH8kvSyvxu
WPxeOtAsnwYcnklHNl15DtrW3c+348LPcsbbhtpBcPX8Ov6Ja4WGbA6QW14tdwp6
6/hkAxShIgpxpX3xICyrFdgFX+vvaPm4FFrmOpJFqrun1tI3rmN3DCvBjSxReDgD
n0ycPz1m1QFHRrp52gxQuCecTANXeu4b/7CdOtncTikqV8S8SKcxtnsh+QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNh0CxxZkRKEckCKF/mUwWzRnpaMMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvMkhRTEhGbVJFb1J5UUlvWC1aVEJiTkdlbG93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAvIK2AwQB
vILkAwQCw9M0MA0EAgACMAcDBQAgARRoMA0GCSqGSIb3DQEBCwUAA4IBAQCt6vnE
9PMN1OeYmUkf9ebVa0GPi0JownoxlxeUObIMwqmq0WiwKV5BBC1gDewJKoKVpIXy
xPJtfYuZni2RkM1F8J5BBdBtjuQzvcrV98XzjywT6a72D4N4JelZGn05boQrQ5R4
AHORBAm0P5QjQn4SJuCr/HgqTGCTkC3z9mnspg6itNmTsGqzOl4n9XLuzZiekQt1
MFqldfaxnY4euTfwdO6nelpR1JJbLpuHai8rh3iFX7lknWxEvvreLhXnPrPRifXa
ax8M40Ux5MzRJdwJRmyFHeS+/yxLFqUm1WZY+UwBULnx3mRfvO4VJ2Tve/AGqtVX
h22dE7iNDp2sHK8s
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:10 2026 by rpki-client