Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HBhN-WPlP4BoDLFCSDszAhxkdPs.roa
File: HBhN-WPlP4BoDLFCSDszAhxkdPs.roa (raw, json)
Hash identifier: ggULAqbD1l1EESaYONYOuvplfh91mX2jtZg3oW6lcyQ=
Subject key identifier: 1C:18:4D:F9:63:E5:3F:80:68:0C:B1:42:48:3B:33:02:1C:64:74:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DF3AE74053C4EA8FEAA80C5D074C33E4D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HBhN-WPlP4BoDLFCSDszAhxkdPs.roa
Signing time: Mon 04 May 2026 15:49:49 +0000
ROA not before: Mon 04 May 2026 15:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29066
IP address blocks: 2.56.102.0/24 maxlen: 24
2.59.23.0/24 maxlen: 24
45.86.14.0/24 maxlen: 24
45.133.220.0/24 maxlen: 24
45.133.221.0/24 maxlen: 24
45.133.222.0/24 maxlen: 24
45.133.223.0/24 maxlen: 24
45.152.203.0/24 maxlen: 24
193.39.244.0/24 maxlen: 24
2a0f:2d84::/32 maxlen: 32
2a0f:4a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:ae:74:05:3c:4e:a8:fe:aa:80:c5:d0:74:c3:3e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 4 15:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c184df963e53f80680cb142483b33021c6474fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:de:88:5c:7c:96:2d:3b:16:c9:fb:5a:e4:
7a:66:8f:41:c1:35:9e:63:e1:12:21:07:87:43:20:
21:a4:95:89:7d:16:7d:a5:1f:fe:ef:5c:d0:cd:80:
43:b9:f9:68:e7:96:b6:81:d5:77:c1:69:88:08:77:
93:ca:f8:7c:ed:a3:e2:2e:c0:ce:2f:d0:b3:d9:cd:
59:0d:4c:11:73:6f:24:28:0c:bf:d7:08:26:89:7f:
82:f2:45:17:55:b8:bb:23:e2:8c:6b:e8:b3:49:05:
fc:68:ab:5d:ac:10:44:69:fe:b8:f4:79:fa:c8:36:
42:2d:05:05:9a:a3:aa:2c:96:e9:dd:25:26:b3:2c:
a3:93:2a:5e:9d:d3:a9:c0:7e:a4:39:94:b9:9e:d6:
74:b8:d3:98:b4:30:6b:df:a8:d0:db:8c:7c:a4:36:
86:d4:ee:a6:21:a7:01:3a:b4:af:af:f3:be:6d:94:
ce:02:c9:8b:31:d1:f0:51:88:93:eb:1e:97:0b:eb:
df:23:ce:fa:fb:78:b4:58:19:7b:e2:93:7f:6a:8a:
7a:b1:c2:b5:10:b5:b6:17:62:1c:0d:4a:38:38:75:
0a:27:ad:f2:67:63:d7:46:fe:ee:c3:5d:2f:1f:87:
2d:18:a9:e2:1b:fc:bb:15:b1:df:3a:50:40:40:cd:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:4D:F9:63:E5:3F:80:68:0C:B1:42:48:3B:33:02:1C:64:74:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HBhN-WPlP4BoDLFCSDszAhxkdPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.102.0/24
2.59.23.0/24
45.86.14.0/24
45.133.220.0/22
45.152.203.0/24
193.39.244.0/24
IPv6:
2a0f:2d84::/32
2a0f:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
cc:13:da:52:79:19:f6:0f:ed:d9:07:c3:31:0d:39:18:b7:47:
03:ca:ac:f3:fc:61:6a:64:1f:4b:60:9f:68:27:10:f6:d9:9a:
09:ad:b1:11:cd:eb:3e:a2:20:0f:78:26:95:26:9b:b9:ec:f7:
3c:81:bb:1b:84:eb:b4:f5:83:f3:48:e7:fc:8d:17:e4:9e:69:
58:57:fa:96:3d:c9:ba:3d:ba:d1:54:eb:ed:35:4c:9a:cc:6f:
c2:13:ac:83:f7:7d:6a:0b:f7:74:37:0e:d2:4f:d3:72:b1:d4:
25:fc:97:ec:68:84:a0:9d:3c:89:55:52:2b:4a:d9:dd:fe:36:
a2:e0:61:bb:6b:72:5d:48:68:f6:11:ae:0e:b9:11:d7:2d:bf:
b9:25:9f:c5:e5:86:c6:32:37:1f:9f:4b:d9:86:39:29:3a:05:
8d:1b:48:90:6c:44:af:d7:29:4e:64:4a:14:b7:38:85:5d:0a:
7d:af:71:97:c8:3e:22:59:4f:9a:95:ec:f4:fe:e2:fe:66:a5:
09:7d:27:9f:9f:ae:f2:a9:e1:05:20:ed:bc:d0:11:6d:bc:dd:
39:bf:23:5e:0e:09:9b:05:ef:f4:d3:c1:05:69:f1:8b:9a:25:
12:cd:de:2e:83:b1:ae:f7:9e:44:59:bb:bf:ca:6a:13:cb:41:
18:a5:a5:74
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZ3zrnQFPE6o/qqAxdB0wz5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNTA0MTU0OTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzE4NGRmOTYzZTUzZjgwNjgwY2IxNDI0ODNiMzMwMjFjNjQ3NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPfeiFx8li07Fsn7WuR6Zo9BwTWe
Y+ESIQeHQyAhpJWJfRZ9pR/+71zQzYBDuflo55a2gdV3wWmICHeTyvh87aPiLsDO
L9Cz2c1ZDUwRc28kKAy/1wgmiX+C8kUXVbi7I+KMa+izSQX8aKtdrBBEaf649Hn6
yDZCLQUFmqOqLJbp3SUmsyyjkypendOpwH6kOZS5ntZ0uNOYtDBr36jQ24x8pDaG
1O6mIacBOrSvr/O+bZTOAsmLMdHwUYiT6x6XC+vfI876+3i0WBl74pN/aop6scK1
ELW2F2IcDUo4OHUKJ63yZ2PXRv7uw10vH4ctGKniG/y7FbHfOlBAQM37lQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFBwYTflj5T+AaAyxQkg7MwIcZHT7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSEJoTi1XUGxQNEJvRExGQ1NEc3pBaHhrZFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQAAjhmAwQA
AjsXAwQALVYOAwQCLYXcAwQALZjLAwQAwSf0MBQEAgACMA4DBQAqDy2EAwUDKg9K
ADANBgkqhkiG9w0BAQsFAAOCAQEAzBPaUnkZ9g/t2QfDMQ05GLdHA8qs8/xhamQf
S2CfaCcQ9tmaCa2xEc3rPqIgD3gmlSabuez3PIG7G4TrtPWD80jn/I0X5J5pWFf6
lj3Juj260VTr7TVMmsxvwhOsg/d9agv3dDcO0k/TcrHUJfyX7GiEoJ08iVVSK0rZ
3f42ouBhu2tyXUho9hGuDrkR1y2/uSWfxeWGxjI3H59L2YY5KToFjRtIkGxEr9cp
TmRKFLc4hV0Kfa9xl8g+IllPmpXs9P7i/malCX0nn5+u8qnhBSDtvNARbbzdOb8j
Xg4JmwXv9NPBBWnxi5olEs3eLoOxrveeRFm7v8pqE8tBGKWldA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:57 2026 by rpki-client