Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/hhlmQR1deqPI7PsOQluJZIgF1ig.roa
File: hhlmQR1deqPI7PsOQluJZIgF1ig.roa (raw, json)
Hash identifier: FQuxizImz+yJ1GnWvSPkbFP5dKWAXYI6qufg2Wz3UBw=
Subject key identifier: 86:19:66:41:1D:5D:7A:A3:C8:EC:FB:0E:42:5B:89:64:88:05:D6:28
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019FFBB7B1E261B69478AEFC06E366531C3C
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/hhlmQR1deqPI7PsOQluJZIgF1ig.roa
Signing time: Thu 13 Aug 2026 15:22:27 +0000
ROA not before: Thu 13 Aug 2026 15:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203532
IP address blocks: 31.43.174.0/23 maxlen: 23
31.43.174.0/24 maxlen: 24
31.43.175.0/24 maxlen: 24
95.111.128.0/23 maxlen: 23
95.111.130.0/24 maxlen: 24
95.111.131.0/24 maxlen: 24
95.111.136.0/24 maxlen: 24
95.111.137.0/24 maxlen: 24
95.111.140.0/24 maxlen: 24
95.111.141.0/24 maxlen: 24
95.111.142.0/24 maxlen: 24
95.111.143.0/24 maxlen: 24
95.111.144.0/24 maxlen: 24
95.111.145.0/24 maxlen: 24
177.222.64.0/19 maxlen: 19
177.222.64.0/20 maxlen: 20
177.222.64.0/21 maxlen: 21
177.222.72.0/21 maxlen: 21
177.222.80.0/22 maxlen: 22
177.222.84.0/22 maxlen: 22
177.222.88.0/24 maxlen: 24
177.222.89.0/24 maxlen: 24
177.222.90.0/24 maxlen: 24
177.222.91.0/24 maxlen: 24
177.222.92.0/24 maxlen: 24
177.222.93.0/24 maxlen: 24
2a13:7500::/36 maxlen: 36
2a13:7500::/48 maxlen: 48
2a13:7500:200::/40 maxlen: 40
2a13:7500:241::/48 maxlen: 48
2a13:7500:242::/48 maxlen: 48
2a13:7500:248::/48 maxlen: 48
2a13:7500:320::/44 maxlen: 44
2a13:7500:8100::/44 maxlen: 44
2a13:7500:8100::/48 maxlen: 48
2a13:7500:8101::/48 maxlen: 48
2a13:7500:8102::/48 maxlen: 48
2a13:7500:8103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:b7:b1:e2:61:b6:94:78:ae:fc:06:e3:66:53:1c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Aug 13 15:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=861966411d5d7aa3c8ecfb0e425b89648805d628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:67:77:86:e7:da:f4:0d:43:ad:72:34:36:
28:d8:8b:b3:1e:8c:0a:d0:c0:5e:2e:ca:22:54:76:
ed:22:a4:8e:96:c1:d3:31:0d:4b:59:2c:95:6e:a9:
d8:50:d8:1b:61:2f:3b:0b:e0:47:6f:ef:c5:7a:7d:
48:f4:9d:6f:a0:41:ad:61:41:76:66:4a:c1:55:6d:
d9:fb:f6:2b:76:79:a0:90:04:c0:77:27:f5:98:bf:
13:60:c9:30:8e:10:8c:c5:bc:6b:17:7f:62:4b:01:
33:ea:fc:63:42:38:51:d3:6f:c1:cd:cd:67:b8:ae:
5b:13:a7:ca:76:9d:0c:a8:eb:74:e1:cd:43:ab:8e:
f5:05:f9:f0:35:e4:a0:47:e0:0b:08:ce:86:ee:a7:
2d:94:59:f3:3d:ed:0b:ad:f8:4b:87:9a:25:37:82:
c0:33:b3:69:11:09:99:bb:35:d2:ff:da:42:83:61:
8d:1b:7c:81:d9:60:32:47:d5:14:33:7d:c3:3f:14:
d1:89:e0:d7:15:a6:9f:29:a2:c0:4d:0c:44:56:be:
5b:fa:52:20:73:ff:50:fa:eb:ad:c0:3b:dc:b3:6d:
f2:40:c0:c5:1a:32:55:09:7f:06:3e:91:33:0f:ac:
e9:c7:47:1d:8f:d1:f2:1b:c6:9b:b8:29:36:2b:90:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:66:41:1D:5D:7A:A3:C8:EC:FB:0E:42:5B:89:64:88:05:D6:28
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/hhlmQR1deqPI7PsOQluJZIgF1ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
95.111.128.0/22
95.111.136.0/23
95.111.140.0-95.111.145.255
177.222.64.0/19
IPv6:
2a13:7500::/36
2a13:7500:8100::/44
Signature Algorithm: sha256WithRSAEncryption
0a:76:db:04:a8:8f:f1:ac:e8:53:ed:68:86:33:20:29:ec:9a:
bb:d5:4a:f9:b3:02:19:67:e2:94:33:03:bc:7c:28:23:99:3b:
9f:7b:55:87:24:43:a4:1c:bd:d8:e2:64:bc:d9:09:42:b7:0e:
17:97:2b:a6:20:d5:cb:c3:ce:38:31:4b:92:2e:80:3e:43:c3:
5e:7c:73:48:c4:c2:ef:03:2f:21:80:bb:f0:82:a0:5a:93:a7:
f0:7e:72:98:17:b1:1d:1a:f8:52:35:97:90:3f:61:a7:88:12:
d7:3d:d0:7b:f9:bb:96:c9:8c:81:df:e5:d7:8e:87:31:96:b3:
cb:58:5b:fe:df:91:4b:76:90:b4:6d:bb:a8:09:ed:df:ec:4b:
ff:02:99:b3:31:62:06:40:64:0b:5f:b3:a7:f5:d6:6d:97:a4:
11:45:50:e4:9b:51:dc:9d:ce:fa:10:73:4f:59:80:1b:6d:8b:
95:6e:ac:97:02:e2:c9:e8:db:0b:fc:be:8c:67:bd:ea:46:5d:
82:c7:96:59:a1:ce:31:9b:df:54:cd:15:fe:1f:ff:95:0b:c9:
55:a8:00:d7:dc:b5:86:85:28:ef:8f:b4:fb:89:f7:31:fb:79:
08:67:b4:ba:13:85:93:33:c5:87:e2:f5:ea:34:a2:68:5c:06:
56:13:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:07 2026 by rpki-client