Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HUiqKT2x7cB34LpK2-5AXRstV74.roa
File: HUiqKT2x7cB34LpK2-5AXRstV74.roa (raw, json)
Hash identifier: 7s2NdDRQ62Xs0Tpo/o2GeLwa0VhUlKayAANJCilFCec=
Subject key identifier: 1D:48:AA:29:3D:B1:ED:C0:77:E0:BA:4A:DB:EE:40:5D:1B:2D:57:BE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F4759564D975775F924C011F9887E5A37
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HUiqKT2x7cB34LpK2-5AXRstV74.roa
Signing time: Thu 09 Jul 2026 14:47:44 +0000
ROA not before: Thu 09 Jul 2026 14:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 189.12.50.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:59:56:4d:97:57:75:f9:24:c0:11:f9:88:7e:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 14:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d48aa293db1edc077e0ba4adbee405d1b2d57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:d5:26:7a:f0:fc:65:97:69:b0:4d:dd:58:
a4:ad:b9:c1:11:71:2e:f3:03:77:cf:e6:70:18:73:
6f:43:cc:bd:67:44:de:53:fd:8a:d9:5e:04:b2:d4:
02:39:ab:20:d9:70:1c:cf:7e:31:a9:db:73:9d:c4:
da:b4:5b:19:20:52:48:50:13:df:bd:fe:e2:3d:b9:
95:5e:6a:0e:0e:a3:86:b4:27:d7:5b:e2:82:88:ad:
c7:3e:a6:61:ad:ff:e4:f2:e7:29:a9:ab:72:15:1a:
3b:d5:4b:62:c0:41:ef:d8:02:60:b3:9e:10:6a:f2:
1e:67:b3:7f:9f:9b:be:03:a6:ae:7b:bd:61:b3:7d:
dd:c1:81:a4:99:45:34:0f:74:4f:89:25:e6:63:28:
31:59:be:9c:e9:6a:ce:e8:25:f4:33:32:6c:97:a0:
e7:93:23:43:52:3c:ce:47:46:85:55:b3:bb:80:a3:
b4:6f:c9:4f:09:de:92:dc:1e:9e:48:d9:9a:86:35:
36:c6:19:a4:f1:6a:96:16:3a:c4:df:c2:2b:ca:fd:
47:a5:71:08:ef:27:1f:83:b9:d5:5f:e6:9d:fb:e5:
51:2e:71:0a:d6:83:2e:3a:87:94:a8:e1:cd:fc:e4:
4d:67:14:0a:cf:ce:e1:7f:44:0f:f2:a4:79:ee:d2:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:AA:29:3D:B1:ED:C0:77:E0:BA:4A:DB:EE:40:5D:1B:2D:57:BE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HUiqKT2x7cB34LpK2-5AXRstV74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
189.12.53.0/24
189.12.58.0/24
191.44.24.0/24
191.44.27.0/24
191.44.30.0/24
191.222.44.0/24
200.102.88.0/24
200.102.90.0/24
200.181.85.0/24
201.14.208.0/24
201.14.213.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:47:25:e3:28:e3:0e:0e:4e:5e:c5:9a:02:62:24:ff:32:
de:b2:a9:de:4b:53:1f:57:2e:f0:fe:48:9f:0b:ce:36:03:4e:
0f:48:4e:61:8d:94:ab:70:19:da:6c:b0:eb:87:72:e6:eb:77:
89:09:9a:0f:6e:78:e8:18:d0:be:cf:75:54:f4:0a:61:1c:57:
97:30:2b:e6:2c:1b:e7:a5:75:2b:83:67:06:24:94:09:c9:49:
91:6b:88:c2:8f:74:98:58:95:22:db:2f:c8:d7:17:d4:7a:79:
0b:2e:65:b4:cb:4d:e8:7b:50:ef:30:0e:29:e8:7c:bf:93:b7:
08:2b:7c:8c:17:af:03:35:ee:8c:a0:29:89:31:99:79:47:b8:
bb:f6:af:e1:53:62:1e:a4:4a:e4:dd:f4:ae:4b:4e:c0:ce:f8:
2e:bd:1c:7d:3c:f8:b8:21:ad:03:b4:eb:ab:a8:bf:f1:c2:61:
e3:a4:0b:c3:87:4d:2c:af:47:5c:81:4a:bd:c0:65:02:74:71:
21:3c:86:b5:1f:47:5b:19:36:fc:65:e1:39:39:0d:5f:7b:ed:
63:cb:19:42:b5:66:65:70:a8:c1:26:41:cd:f3:58:1c:01:9e:
1f:b5:c4:db:11:bd:69:82:12:d2:ed:63:59:01:27:4c:e9:84:
cf:4e:6c:f0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZ9HWVZNl1d1+STAEfmIflo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzA5MTQ0NzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDQ4YWEyOTNkYjFlZGMwNzdlMGJhNGFkYmVlNDA1ZDFiMmQ1N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaPVJnrw/GWXabBN3VikrbnBEXEu
8wN3z+ZwGHNvQ8y9Z0TeU/2K2V4EstQCOasg2XAcz34xqdtzncTatFsZIFJIUBPf
vf7iPbmVXmoODqOGtCfXW+KCiK3HPqZhrf/k8ucpqatyFRo71UtiwEHv2AJgs54Q
avIeZ7N/n5u+A6aue71hs33dwYGkmUU0D3RPiSXmYygxWb6c6WrO6CX0MzJsl6Dn
kyNDUjzOR0aFVbO7gKO0b8lPCd6S3B6eSNmahjU2xhmk8WqWFjrE38Iryv1HpXEI
7ycfg7nVX+ad++VRLnEK1oMuOoeUqOHN/ORNZxQKz87hf0QP8qR57tLT+QIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFB1Iqik9se3Ad+C6StvuQF0bLVe+MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvSFVpcUtUMng3Y0IzNExwSzItNUFYUnN0Vjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAvQwyAwQA
vQw1AwQAvQw6AwQAvywYAwQAvywbAwQAvyweAwQAv94sAwQAyGZYAwQAyGZaAwQA
yLVVAwQAyQ7QAwQAyQ7VAwQAyQ7dMA0GCSqGSIb3DQEBCwUAA4IBAQCO60cl4yjj
Dg5OXsWaAmIk/zLesqneS1MfVy7w/kifC842A04PSE5hjZSrcBnabLDrh3Lm63eJ
CZoPbnjoGNC+z3VU9AphHFeXMCvmLBvnpXUrg2cGJJQJyUmRa4jCj3SYWJUi2y/I
1xfUenkLLmW0y03oe1DvMA4p6Hy/k7cIK3yMF68DNe6MoCmJMZl5R7i79q/hU2Ie
pErk3fSuS07AzvguvRx9PPi4Ia0DtOurqL/xwmHjpAvDh00sr0dcgUq9wGUCdHEh
PIa1H0dbGTb8ZeE5OQ1fe+1jyxlCtWZlcKjBJkHN81gcAZ4ftcTbEb1pghLS7WNZ
ASdM6YTPTmzw
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:34 2026 by rpki-client