Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/HZsbbCQV184FMKGhunsSvE-BnQg.roa
File: HZsbbCQV184FMKGhunsSvE-BnQg.roa (raw, json)
Hash identifier: sPwyN27bXXa54aV70rvhIGGGNwJwIRqYCIfr69KbVFM=
Subject key identifier: 1D:9B:1B:6C:24:15:D7:CE:05:30:A1:A1:BA:7B:12:BC:4F:81:9D:08
Certificate issuer: /CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Certificate serial: 019F2368AB2CD8328A1F07FB5C367D27B2A9
Authority key identifier: 5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/HZsbbCQV184FMKGhunsSvE-BnQg.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 192.173.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:2c:d8:32:8a:1f:07:fb:5c:36:7d:27:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac7f31fc41cadda24c37c5b0ee0ba91561b62ef
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d9b1b6c2415d7ce0530a1a1ba7b12bc4f819d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:dc:34:15:df:8a:b7:f8:aa:1f:53:df:c6:
91:87:24:1a:6d:3c:47:a2:6f:e8:ba:cd:71:d9:a5:
84:2e:18:bb:70:29:52:4b:f5:dd:63:14:a8:4d:f0:
c1:45:ea:7c:ad:ed:73:ba:61:7f:95:2e:c1:8b:1c:
b7:81:e3:b6:d7:e2:58:23:f8:29:03:0a:76:2a:c8:
85:1f:77:2f:65:99:9f:5d:ae:f4:4e:de:61:38:38:
ae:ef:4a:82:cf:83:37:96:04:ca:d0:d0:83:d5:a5:
f6:ed:80:c1:ba:c2:38:5b:48:26:37:46:7d:89:3e:
b2:3c:25:3a:b6:79:6c:54:ed:5a:5b:a4:3b:7d:0a:
c1:3c:98:67:1c:d0:a6:8f:fd:8e:82:b7:e8:a9:b4:
cd:c6:0c:fa:f7:50:fd:7c:63:1c:b2:c1:59:ab:50:
49:68:79:04:ae:11:9f:16:2d:46:50:43:41:d7:dd:
f6:12:83:3f:5a:9b:94:9a:a7:71:fa:06:39:08:6a:
d5:74:bd:d4:87:a2:e9:65:a2:93:2f:e3:47:a5:c0:
c2:1e:b2:a6:ff:be:45:4f:dc:d4:ec:68:f2:23:17:
b8:02:99:1d:21:f6:7f:96:e4:2f:59:28:a3:d2:8f:
7a:2c:84:d3:84:e8:f8:09:ca:40:8f:2b:a1:06:ce:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:1B:6C:24:15:D7:CE:05:30:A1:A1:BA:7B:12:BC:4F:81:9D:08
X509v3 Authority Key Identifier:
keyid:5A:C7:F3:1F:C4:1C:AD:DA:24:C3:7C:5B:0E:E0:BA:91:56:1B:62:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsfzH8Qcrdokw3xbDuC6kVYbYu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/HZsbbCQV184FMKGhunsSvE-BnQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/234499-4bb9-4da4-9d60-774f16482f24/1/WsfzH8Qcrdokw3xbDuC6kVYbYu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.173.128.0/21
Signature Algorithm: sha256WithRSAEncryption
63:ab:bb:8c:48:c0:71:92:08:fb:74:d0:a9:60:03:6e:57:10:
5a:28:10:99:f6:eb:5a:92:a0:28:ce:4a:7a:f7:65:f9:81:34:
4d:16:b4:27:61:84:02:36:af:d6:22:ed:f1:12:f6:77:87:9f:
9d:7d:e2:f5:e3:18:ee:53:e7:07:6f:0b:bd:ae:8f:a9:6f:76:
c8:e1:89:f6:7c:c3:53:81:2f:0e:bb:28:0d:3b:f6:ef:45:f7:
30:be:3e:6e:93:a7:26:bd:58:15:36:f0:65:88:12:ec:b3:fa:
08:f0:32:9e:d8:3c:db:66:cc:18:92:9e:b9:bf:22:76:b9:93:
a1:f9:28:c2:2d:58:5a:a8:bd:b2:3c:b4:51:a9:d0:3d:c3:46:
d9:05:79:ea:8b:10:f7:63:3e:99:6c:36:86:ad:0a:8f:6b:5f:
fd:27:03:ed:d5:af:01:3c:24:1b:1c:c2:7a:07:9d:c8:7f:2a:
00:9f:fa:7c:a8:b0:c2:92:9f:3a:4e:3c:6e:fd:af:1a:40:97:
75:09:6e:86:b0:50:9f:cc:25:5b:44:bf:41:90:bc:b9:ab:ea:
e5:2f:22:d2:8c:a5:f9:f5:ea:9a:04:f0:df:d0:c7:e2:32:69:
02:1c:47:f8:40:f3:31:69:5f:76:e3:94:15:99:0f:c5:1f:37:
13:36:12:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKss2DKKHwf7XDZ9J7KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzdmMzFmYzQxY2FkZGEyNGMzN2M1YjBlZTBiYTkxNTYx
YjYyZWYwHhcNMjYwNzAyMTUxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDliMWI2YzI0MTVkN2NlMDUzMGExYTFiYTdiMTJiYzRmODE5ZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJTcNBXfirf4qh9T38aRhyQabTxH
om/ous1x2aWELhi7cClSS/XdYxSoTfDBRep8re1zumF/lS7Bixy3geO21+JYI/gp
Awp2KsiFH3cvZZmfXa70Tt5hODiu70qCz4M3lgTK0NCD1aX27YDBusI4W0gmN0Z9
iT6yPCU6tnlsVO1aW6Q7fQrBPJhnHNCmj/2OgrfoqbTNxgz691D9fGMcssFZq1BJ
aHkErhGfFi1GUENB1932EoM/WpuUmqdx+gY5CGrVdL3Uh6LpZaKTL+NHpcDCHrKm
/75FT9zU7GjyIxe4ApkdIfZ/luQvWSij0o96LITThOj4CcpAjyuhBs6I5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2bG2wkFdfOBTChobp7ErxPgZ0IMB8GA1UdIwQY
MBaAFFrH8x/EHK3aJMN8Ww7gupFWG2LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nmekg4UWNyZG9rdzN4YkR1QzZrVlliWXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yMzQ0OTktNGJiOS00ZGE0LTlkNjAt
Nzc0ZjE2NDgyZjI0LzEvSFpzYmJDUVYxODRGTUtHaHVuc1N2RS1CblFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yMzQ0OTktNGJiOS00ZGE0LTlkNjAtNzc0ZjE2NDgyZjI0
LzEvV3Nmekg4UWNyZG9rdzN4YkR1QzZrVlliWXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK2AMA0G
CSqGSIb3DQEBCwUAA4IBAQBjq7uMSMBxkgj7dNCpYANuVxBaKBCZ9utakqAozkp6
92X5gTRNFrQnYYQCNq/WIu3xEvZ3h5+dfeL14xjuU+cHbwu9ro+pb3bI4Yn2fMNT
gS8OuygNO/bvRfcwvj5uk6cmvVgVNvBliBLss/oI8DKe2DzbZswYkp65vyJ2uZOh
+SjCLVhaqL2yPLRRqdA9w0bZBXnqixD3Yz6ZbDaGrQqPa1/9JwPt1a8BPCQbHMJ6
B53IfyoAn/p8qLDCkp86Tjxu/a8aQJd1CW6GsFCfzCVbRL9BkLy5q+rlLyLSjKX5
9eqaBPDf0MfiMmkCHEf4QPMxaV9245QVmQ/FHzcTNhI8
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:34 2026 by rpki-client