Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HuqeNA3WEDLwh5YPLVDL0MtuBsc.roa
File: HuqeNA3WEDLwh5YPLVDL0MtuBsc.roa (raw, json)
Hash identifier: 09UDwXKTB+uT+gFRuaaR1BPRaiQQXvhiBWyCY95EP8c=
Subject key identifier: 1E:EA:9E:34:0D:D6:10:32:F0:87:96:0F:2D:50:CB:D0:CB:6E:06:C7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0D2EFA0D579C815E6E95D5591F4232B69
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HuqeNA3WEDLwh5YPLVDL0MtuBsc.roa
Signing time: Thu 24 Sep 2026 10:21:54 +0000
ROA not before: Thu 24 Sep 2026 10:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.27.0/24 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:ef:a0:d5:79:c8:15:e6:e9:5d:55:91:f4:23:2b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 24 10:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eea9e340dd61032f087960f2d50cbd0cb6e06c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:3f:98:8b:cd:e0:77:d8:94:f2:2c:36:9d:
42:22:aa:a5:53:ba:97:b9:3e:dd:6f:2e:8a:cc:a3:
99:94:c2:08:04:ac:60:6f:e1:5f:d7:1c:db:06:3c:
2f:c0:03:c7:81:fd:7b:cf:84:ea:1a:fc:44:3c:2d:
76:2a:2d:ba:1e:8f:f6:31:b8:a0:5a:45:67:c1:59:
19:ef:10:8e:1e:c4:d4:ea:95:55:06:33:52:17:eb:
81:6d:84:ab:6d:47:a9:f8:67:31:0f:d8:a6:ab:20:
01:16:e8:5d:da:42:6a:46:25:cb:8a:6d:a6:4e:74:
cf:34:55:af:61:0b:69:bc:36:7f:cd:e4:87:5a:ec:
b0:07:32:85:0c:b2:73:f2:d2:08:ef:44:f7:95:c5:
d7:2a:3f:d9:78:20:28:5f:b5:2f:1b:3d:5c:c8:f3:
96:9c:40:a2:c6:e9:a3:d6:55:2c:1f:3a:35:b8:1e:
6d:a7:2d:06:19:1e:09:9f:75:4d:df:d5:c4:40:47:
d5:a6:ab:7c:c6:72:7a:28:72:f0:ef:63:f1:0e:3f:
d1:e8:79:30:01:41:73:bf:05:2f:dc:70:94:8b:56:
11:5c:f6:88:be:01:17:33:b4:68:01:d0:4b:cf:30:
e4:6e:3c:5f:18:9e:fa:91:41:f0:10:42:c5:5b:6f:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:9E:34:0D:D6:10:32:F0:87:96:0F:2D:50:CB:D0:CB:6E:06:C7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HuqeNA3WEDLwh5YPLVDL0MtuBsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/23
5.180.27.0/24
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8c:ad:da:71:c6:bb:15:75:76:a2:f0:f8:ac:a5:c3:ad:be:
42:f4:b3:e8:35:00:40:08:cb:7a:e6:a1:f3:73:0b:1e:d4:0e:
61:d7:2f:e5:13:0b:87:57:0d:dd:c9:42:d4:84:5f:c8:49:4c:
e8:f7:7e:17:49:b9:29:04:b2:89:e0:31:7f:d7:bf:84:b9:92:
00:8d:c2:5e:dd:01:e1:cd:c4:a0:c6:47:68:3b:c0:ff:b4:28:
59:49:4d:a8:2b:0a:a3:83:d3:24:aa:98:64:05:2d:9a:7c:c3:
c4:f6:05:99:0a:70:be:52:4b:a2:c0:6b:e4:c8:37:b4:78:56:
c1:5d:91:49:44:72:85:14:d6:ed:7d:a1:41:1b:00:f9:b2:04:
63:8f:89:67:8d:c0:12:6a:72:46:8b:2e:b3:37:37:d6:4b:ad:
57:1a:99:57:e3:cc:f7:3f:09:d3:62:e2:b1:1c:0f:75:fb:cc:
ad:ce:87:30:cf:58:fa:5a:36:c4:6a:9f:e5:be:5a:51:9a:a2:
81:53:29:51:e3:c8:8b:84:9f:89:b5:a2:7e:f4:da:93:c8:08:
ed:e0:e0:19:08:8e:a5:1a:30:8a:77:39:02:7a:7a:73:9c:de:
2a:26:76:32:da:41:7e:57:67:e3:4a:71:90:25:27:72:b1:c6:
db:a9:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:10 2026 by rpki-client