Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/HkQZM8FdHxdjQWq3MpT1qAJTVR0.roa
File: HkQZM8FdHxdjQWq3MpT1qAJTVR0.roa (raw, json)
Hash identifier: 1AP80IB9GzhySikeQcQhqXMVjN57jPrQ6Y1h/VjynjQ=
Subject key identifier: 1E:44:19:33:C1:5D:1F:17:63:41:6A:B7:32:94:F5:A8:02:53:55:1D
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0198D1A3B72095D8478C8BCA67A775323576
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/HkQZM8FdHxdjQWq3MpT1qAJTVR0.roa
Signing time: Fri 22 Aug 2025 11:57:04 +0000
ROA not before: Fri 22 Aug 2025 11:57:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
164.152.216.0/24 maxlen: 24
185.218.2.0/24 maxlen: 24
2001:3900::/29 maxlen: 29
2a11:2800:239::/48 maxlen: 48
2a11:2800:761::/48 maxlen: 48
2a11:2800:10db::/48 maxlen: 48
2a11:2800:131c::/48 maxlen: 48
2a11:2800:1784::/48 maxlen: 48
2a11:2800:1bce::/48 maxlen: 48
2a11:2800:1f33::/48 maxlen: 48
2a11:2800:2047::/48 maxlen: 48
2a11:2800:215b::/48 maxlen: 48
2a11:2800:285d::/48 maxlen: 48
2a11:2800:3387::/48 maxlen: 48
2a11:2800:3dc6::/48 maxlen: 48
2a11:2800:4388::/48 maxlen: 48
2a11:2800:4e3d::/48 maxlen: 48
2a11:2800:661f::/48 maxlen: 48
2a11:2800:792e::/48 maxlen: 48
2a11:2800:97cb::/48 maxlen: 48
2a11:2800:9e16::/48 maxlen: 48
2a11:2800:a9df::/48 maxlen: 48
2a11:2800:b41d::/48 maxlen: 48
2a11:2800:c81e::/48 maxlen: 48
2a11:2800:cd4b::/48 maxlen: 48
2a11:2800:d540::/48 maxlen: 48
2a11:2800:f54b::/48 maxlen: 48
2a11:2801:35d3::/48 maxlen: 48
2a11:2801:3de4::/48 maxlen: 48
2a11:2801:4ac9::/48 maxlen: 48
2a11:2801:52e9::/48 maxlen: 48
2a11:2801:5a28::/48 maxlen: 48
2a11:2801:cb2a::/48 maxlen: 48
2a11:2801:d868::/48 maxlen: 48
2a11:2801:e9ac::/48 maxlen: 48
2a11:2802:bc1::/48 maxlen: 48
2a11:2802:1101::/48 maxlen: 48
2a11:2802:15df::/48 maxlen: 48
2a11:2802:34cb::/48 maxlen: 48
2a11:2802:4337::/48 maxlen: 48
2a11:2802:9a2c::/48 maxlen: 48
2a11:2802:d606::/48 maxlen: 48
2a11:2803:1823::/48 maxlen: 48
2a11:2803:1f2c::/48 maxlen: 48
2a11:2803:596d::/48 maxlen: 48
2a11:2803:5b70::/48 maxlen: 48
2a11:2803:7070::/48 maxlen: 48
2a11:2803:852c::/48 maxlen: 48
2a11:2803:8884::/48 maxlen: 48
2a11:2803:e78b::/48 maxlen: 48
2a11:2803:f181::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:a3:b7:20:95:d8:47:8c:8b:ca:67:a7:75:32:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Aug 22 11:57:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e441933c15d1f1763416ab73294f5a80253551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:8c:e6:6d:5f:c9:de:b2:ba:71:da:0b:f5:
c3:4a:b9:71:e0:11:2e:0e:5a:d4:63:ee:61:8c:19:
03:7b:da:e1:8a:de:de:2a:71:23:d5:24:18:5e:48:
13:40:e3:cc:76:91:8e:01:91:81:00:72:c9:a6:f9:
06:34:e7:6a:f2:1a:11:42:92:9b:6e:c9:52:01:87:
58:34:d6:25:50:f7:19:2b:1c:59:a5:37:5d:07:d1:
eb:83:ff:b1:48:8e:eb:cb:30:3d:21:5f:a2:e5:0b:
b4:35:1d:df:07:9b:a3:b7:5f:1e:61:5e:01:46:5b:
ab:14:53:32:e8:84:09:4e:cb:dc:55:49:56:fa:17:
5b:b6:35:7a:5e:2a:64:58:25:7a:b3:3b:2f:0f:f0:
b6:8b:78:d7:1a:95:3f:f6:ae:36:00:08:ba:c7:00:
a0:c7:47:89:88:06:32:f9:f0:d9:43:fe:5d:a7:da:
21:66:ca:81:2f:57:26:86:8a:3a:ba:eb:af:ae:db:
36:a1:9e:1e:fb:cc:ae:4d:12:96:d8:2d:6b:74:f9:
47:39:0e:a6:50:e1:cf:2f:77:00:92:8d:a9:3f:3b:
3f:96:6d:5c:6e:29:50:21:62:14:71:e8:43:69:f9:
09:7a:d0:6f:5d:99:32:7c:80:3d:08:2b:ec:0d:40:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:19:33:C1:5D:1F:17:63:41:6A:B7:32:94:F5:A8:02:53:55:1D
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/HkQZM8FdHxdjQWq3MpT1qAJTVR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
164.152.216.0/24
185.218.2.0/24
IPv6:
2001:3900::/29
2a11:2800:239::/48
2a11:2800:761::/48
2a11:2800:10db::/48
2a11:2800:131c::/48
2a11:2800:1784::/48
2a11:2800:1bce::/48
2a11:2800:1f33::/48
2a11:2800:2047::/48
2a11:2800:215b::/48
2a11:2800:285d::/48
2a11:2800:3387::/48
2a11:2800:3dc6::/48
2a11:2800:4388::/48
2a11:2800:4e3d::/48
2a11:2800:661f::/48
2a11:2800:792e::/48
2a11:2800:97cb::/48
2a11:2800:9e16::/48
2a11:2800:a9df::/48
2a11:2800:b41d::/48
2a11:2800:c81e::/48
2a11:2800:cd4b::/48
2a11:2800:d540::/48
2a11:2800:f54b::/48
2a11:2801:35d3::/48
2a11:2801:3de4::/48
2a11:2801:4ac9::/48
2a11:2801:52e9::/48
2a11:2801:5a28::/48
2a11:2801:cb2a::/48
2a11:2801:d868::/48
2a11:2801:e9ac::/48
2a11:2802:bc1::/48
2a11:2802:1101::/48
2a11:2802:15df::/48
2a11:2802:34cb::/48
2a11:2802:4337::/48
2a11:2802:9a2c::/48
2a11:2802:d606::/48
2a11:2803:1823::/48
2a11:2803:1f2c::/48
2a11:2803:596d::/48
2a11:2803:5b70::/48
2a11:2803:7070::/48
2a11:2803:852c::/48
2a11:2803:8884::/48
2a11:2803:e78b::/48
2a11:2803:f181::/48
Signature Algorithm: sha256WithRSAEncryption
1b:4d:2a:01:82:a8:cd:72:60:43:82:61:1b:5e:39:48:ca:88:
a5:87:d1:ea:5f:4c:dc:6e:35:c7:5a:ad:e2:6d:51:85:ba:c0:
fb:ab:99:7d:1b:05:4d:29:86:3e:fc:89:bc:18:99:fa:e0:68:
92:df:9e:15:9d:19:ba:dc:32:d4:90:a5:4d:ba:b5:9b:3a:a4:
ad:ef:9c:f3:ad:47:49:aa:09:a5:79:5f:ad:66:85:f8:65:a8:
1d:d2:35:50:5a:f9:8c:01:16:72:c8:34:4f:17:8f:0c:58:78:
b0:6e:d6:33:a7:56:09:c2:cf:5c:5c:f0:d5:b3:9b:e8:ba:ac:
e6:20:5b:3a:aa:fe:51:84:26:76:96:6b:32:78:07:93:d4:a8:
48:45:8d:3b:59:86:80:fe:ea:75:a3:0b:90:f3:3f:a3:92:0e:
7a:bb:ab:dc:77:3f:51:18:83:ff:7a:93:94:f8:31:be:3e:59:
98:f3:0f:fd:d0:93:b9:52:77:0c:0c:cb:60:09:fc:db:d6:93:
b2:97:c3:a9:74:09:37:c6:18:52:07:28:79:82:ce:76:a0:4b:
d6:0b:50:70:c6:a1:02:5e:bf:17:48:5b:bc:97:f4:a5:0a:62:
d7:34:30:63:c1:71:dd:2f:db:c5:d8:29:f9:fd:4f:9c:49:60:
7f:0d:35:d7
-----BEGIN CERTIFICATE-----
MIIG0jCCBbqgAwIBAgISAZjRo7cgldhHjIvKZ6d1MjV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjUwODIyMTE1NzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTQ0MTkzM2MxNWQxZjE3NjM0MTZhYjczMjk0ZjVhODAyNTM1NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2M5m1fyd6yunHaC/XDSrlx4BEu
DlrUY+5hjBkDe9rhit7eKnEj1SQYXkgTQOPMdpGOAZGBAHLJpvkGNOdq8hoRQpKb
bslSAYdYNNYlUPcZKxxZpTddB9Hrg/+xSI7ryzA9IV+i5Qu0NR3fB5ujt18eYV4B
RlurFFMy6IQJTsvcVUlW+hdbtjV6XipkWCV6szsvD/C2i3jXGpU/9q42AAi6xwCg
x0eJiAYy+fDZQ/5dp9ohZsqBL1cmhoo6uuuvrts2oZ4e+8yuTRKW2C1rdPlHOQ6m
UOHPL3cAko2pPzs/lm1cbilQIWIUcehDafkJetBvXZkyfIA9CCvsDUB/owIDAQAB
o4ID3jCCA9owHQYDVR0OBBYEFB5EGTPBXR8XY0FqtzKU9agCU1UdMB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvSGtRWk04RmRIeGRqUVdxM01wVDFxQUpUVlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB8gYIKwYBBQUHAQcBAf8EggHhMIIB3TAYBAIAATASAwQA
UEn3AwQApJjYAwQAudoCMIIBvwQCAAIwggG3AwUDIAE5AAMHACoRKAACOQMHACoR
KAAHYQMHACoRKAAQ2wMHACoRKAATHAMHACoRKAAXhAMHACoRKAAbzgMHACoRKAAf
MwMHACoRKAAgRwMHACoRKAAhWwMHACoRKAAoXQMHACoRKAAzhwMHACoRKAA9xgMH
ACoRKABDiAMHACoRKABOPQMHACoRKABmHwMHACoRKAB5LgMHACoRKACXywMHACoR
KACeFgMHACoRKACp3wMHACoRKAC0HQMHACoRKADIHgMHACoRKADNSwMHACoRKADV
QAMHACoRKAD1SwMHACoRKAE10wMHACoRKAE95AMHACoRKAFKyQMHACoRKAFS6QMH
ACoRKAFaKAMHACoRKAHLKgMHACoRKAHYaAMHACoRKAHprAMHACoRKAILwQMHACoR
KAIRAQMHACoRKAIV3wMHACoRKAI0ywMHACoRKAJDNwMHACoRKAKaLAMHACoRKALW
BgMHACoRKAMYIwMHACoRKAMfLAMHACoRKANZbQMHACoRKANbcAMHACoRKANwcAMH
ACoRKAOFLAMHACoRKAOIhAMHACoRKAPniwMHACoRKAPxgTANBgkqhkiG9w0BAQsF
AAOCAQEAG00qAYKozXJgQ4JhG145SMqIpYfR6l9M3G41x1qt4m1RhbrA+6uZfRsF
TSmGPvyJvBiZ+uBokt+eFZ0Zutwy1JClTbq1mzqkre+c861HSaoJpXlfrWaF+GWo
HdI1UFr5jAEWcsg0TxePDFh4sG7WM6dWCcLPXFzw1bOb6Lqs5iBbOqr+UYQmdpZr
MngHk9SoSEWNO1mGgP7qdaMLkPM/o5IOerur3Hc/URiD/3qTlPgxvj5ZmPMP/dCT
uVJ3DAzLYAn829aTspfDqXQJN8YYUgcoeYLOdqBL1gtQcMahAl6/F0hbvJf0pQpi
1zQwY8Fx3S/bxdgp+f1PnElgfw011w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:52 2025 by rpki-client