Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/HqsWPiwhPVLNcmUOAiPoyMKMaos.roa
File: HqsWPiwhPVLNcmUOAiPoyMKMaos.roa (raw, json)
Hash identifier: +cYbm5RTH5JZOTcPymiPp3fNwrHCYwm6lbNeUWc3jgg=
Subject key identifier: 1E:AB:16:3E:2C:21:3D:52:CD:72:65:0E:02:23:E8:C8:C2:8C:6A:8B
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 0198C14ABE9A27E448DF2C4E01320C5ECD2D
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/HqsWPiwhPVLNcmUOAiPoyMKMaos.roa
Signing time: Tue 19 Aug 2025 07:45:57 +0000
ROA not before: Tue 19 Aug 2025 07:45:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210392
IP address blocks: 88.135.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:4a:be:9a:27:e4:48:df:2c:4e:01:32:0c:5e:cd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Aug 19 07:45:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eab163e2c213d52cd72650e0223e8c8c28c6a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:dc:91:90:90:1c:3b:71:2b:a0:3d:60:02:
47:75:01:13:31:bb:24:16:94:45:b5:29:44:10:15:
30:c4:c4:b4:6a:45:0a:a1:95:c0:e4:0c:e9:92:16:
7d:70:5e:eb:ea:ae:22:93:26:05:6a:ee:71:62:5d:
ca:1a:d6:4c:72:ee:5f:da:04:db:aa:10:c8:6a:21:
6b:a4:fa:44:ca:ab:44:d0:bb:97:23:7e:32:ab:e9:
94:90:3c:c1:84:30:c4:03:e2:0d:11:f2:ce:ae:6c:
3d:4a:ab:38:43:f5:d8:ee:da:33:55:32:b8:40:40:
f2:30:73:b8:9c:c6:c1:5b:fd:24:c6:f1:9e:3a:ae:
ee:cb:34:41:02:48:b9:f3:90:d2:9f:09:24:23:82:
0c:6d:81:2d:14:b4:fb:36:fe:19:66:47:a8:e6:ea:
e0:86:9e:96:86:25:13:f2:df:98:ae:f0:6c:d9:c7:
53:fb:be:7f:d7:45:19:e7:49:3b:2b:20:64:fc:17:
c0:63:e4:49:1a:db:6c:56:3f:a7:31:44:15:65:f2:
8b:cd:39:b6:f7:e2:43:07:bf:20:ab:0f:5b:aa:bd:
e1:ad:76:5b:3e:05:bb:bc:b8:a3:70:de:1a:82:74:
3e:71:c5:70:32:4f:18:e5:ff:fd:58:bd:42:d7:ff:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AB:16:3E:2C:21:3D:52:CD:72:65:0E:02:23:E8:C8:C2:8C:6A:8B
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/HqsWPiwhPVLNcmUOAiPoyMKMaos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.33.0/24
Signature Algorithm: sha256WithRSAEncryption
84:36:af:88:fc:0e:7d:2e:2c:1e:3e:1b:54:4f:68:a0:fc:90:
c2:56:63:71:d8:56:e8:96:f9:11:be:48:1c:65:44:c9:dc:20:
ef:56:23:de:3f:5f:d8:38:c9:2c:77:ec:a8:90:93:56:04:21:
67:4a:fa:eb:88:53:cf:48:3d:44:5b:48:48:cd:a3:d7:a4:1a:
2d:a3:bc:ec:32:ea:12:f6:ee:a3:a4:33:f6:78:76:77:66:52:
ed:e4:6c:5a:8f:43:14:13:07:84:82:e0:36:8e:1f:db:aa:ac:
2c:ba:53:4c:3c:5d:c5:1e:4e:db:f0:ec:c4:0d:69:70:bc:33:
ce:17:86:cc:ea:a9:ac:77:e3:5d:bb:e9:8a:1e:7a:af:16:5f:
39:e2:00:82:65:33:19:3c:ef:8b:4c:28:f8:60:da:8b:3e:0a:
d3:f6:95:45:14:95:f8:04:b8:b8:44:f2:00:97:e4:61:37:30:
66:75:31:48:3f:d6:21:3f:2a:71:82:8b:f5:ec:1f:d5:47:72:
5b:ad:19:eb:fb:5c:59:ba:cf:74:3e:16:ab:c3:75:3f:e3:d9:
72:cd:15:26:33:80:13:4e:1d:17:88:2f:8b:73:3c:10:22:7b:
40:b9:c3:36:b9:b8:34:85:86:6d:96:90:8e:62:9f:a3:c1:fe:
e6:0a:2f:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjBSr6aJ+RI3yxOATIMXs0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWZhYWUyZTNlMDU0MDczYTM4YWFiNjM1ZGM5NjQ2MGVl
ZjQ4N2UwHhcNMjUwODE5MDc0NTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWFiMTYzZTJjMjEzZDUyY2Q3MjY1MGUwMjIzZThjOGMyOGM2YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznjckZCQHDtxK6A9YAJHdQETMbsk
FpRFtSlEEBUwxMS0akUKoZXA5AzpkhZ9cF7r6q4ikyYFau5xYl3KGtZMcu5f2gTb
qhDIaiFrpPpEyqtE0LuXI34yq+mUkDzBhDDEA+INEfLOrmw9Sqs4Q/XY7tozVTK4
QEDyMHO4nMbBW/0kxvGeOq7uyzRBAki585DSnwkkI4IMbYEtFLT7Nv4ZZkeo5urg
hp6WhiUT8t+YrvBs2cdT+75/10UZ50k7KyBk/BfAY+RJGttsVj+nMUQVZfKLzTm2
9+JDB78gqw9bqr3hrXZbPgW7vLijcN4agnQ+ccVwMk8Y5f/9WL1C1/+v/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6rFj4sIT1SzXJlDgIj6MjCjGqLMB8GA1UdIwQY
MBaAFIavquLj4FQHOjiqtjXclkYO70h+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHEtcTR1UGdWQWM2T0txMk5keVdSZzd2U0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNzZhMWEtMzcyNC00OTViLWFjNzIt
NDcyMDQwYjI0N2Y2LzEvSHFzV1Bpd2hQVkxOY21VT0FpUG95TUtNYW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNzZhMWEtMzcyNC00OTViLWFjNzItNDcyMDQwYjI0N2Y2
LzEvaHEtcTR1UGdWQWM2T0txMk5keVdSZzd2U0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWIchMA0G
CSqGSIb3DQEBCwUAA4IBAQCENq+I/A59LiwePhtUT2ig/JDCVmNx2FbolvkRvkgc
ZUTJ3CDvViPeP1/YOMksd+yokJNWBCFnSvrriFPPSD1EW0hIzaPXpBoto7zsMuoS
9u6jpDP2eHZ3ZlLt5Gxaj0MUEweEguA2jh/bqqwsulNMPF3FHk7b8OzEDWlwvDPO
F4bM6qmsd+Ndu+mKHnqvFl854gCCZTMZPO+LTCj4YNqLPgrT9pVFFJX4BLi4RPIA
l+RhNzBmdTFIP9YhPypxgov17B/VR3JbrRnr+1xZus90Pharw3U/49lyzRUmM4AT
Th0XiC+LczwQIntAucM2ubg0hYZtlpCOYp+jwf7mCi//
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:13 2025 by rpki-client