Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HB2uWliIyu3J2WWPkCUVo_hgtgo.roa
File: HB2uWliIyu3J2WWPkCUVo_hgtgo.roa (raw, json)
Hash identifier: wvnFiUuPOsM9xICHCUZH5MVNNdnAsokhFz7dBgamd2s=
Subject key identifier: 1C:1D:AE:5A:58:88:CA:ED:C9:D9:65:8F:90:25:15:A3:F8:60:B6:0A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A11F01131B731E728694B06107806E21E0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HB2uWliIyu3J2WWPkCUVo_hgtgo.roa
Signing time: Fri 09 Oct 2026 04:52:06 +0000
ROA not before: Fri 09 Oct 2026 04:52:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 77.81.100.0/24 maxlen: 24
78.17.182.0/24 maxlen: 24
78.17.255.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.125.20.0/24 maxlen: 24
89.125.252.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
104.143.203.0/24 maxlen: 24
104.143.216.0/24 maxlen: 24
162.35.226.0/24 maxlen: 24
162.35.228.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:01:13:1b:73:1e:72:86:94:b0:61:07:80:6e:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 04:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c1dae5a5888caedc9d9658f902515a3f860b60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:94:a7:7e:e3:4c:fd:ee:8d:43:0e:a8:4c:
28:4b:d0:b1:d9:01:a7:c6:7e:2e:ef:8e:89:14:4c:
ed:b6:f6:d3:41:75:78:5f:85:b1:07:f7:44:ee:9f:
db:14:37:c6:47:46:1d:3c:69:1d:ee:c0:ed:86:ab:
01:d0:53:da:d3:3e:ee:b1:22:d3:53:16:e2:c4:c8:
7a:63:36:c8:46:cd:68:4a:5b:60:16:8b:1b:fa:04:
a5:90:48:ec:f3:01:e8:aa:9b:21:64:e9:8f:00:d8:
ea:ae:dd:0c:b8:d1:c1:63:8c:5f:95:46:3a:c7:3a:
c2:13:36:f1:9a:a7:58:27:92:4b:d6:32:80:8b:8e:
6e:fc:95:e8:be:30:60:57:49:d5:ba:29:05:3a:1e:
07:c1:f6:5b:f4:b1:14:58:e7:87:15:48:72:89:a8:
18:1f:4e:a4:e4:ab:94:b5:79:9c:bd:c9:2f:1d:d4:
a1:0e:d9:af:b9:52:39:95:34:80:3a:44:85:d2:43:
ae:0b:e7:4e:c2:96:99:26:09:e2:24:f7:69:51:fd:
54:20:77:f0:f9:9e:8d:02:b8:63:f2:e3:19:a9:47:
67:52:49:90:23:71:99:b8:07:e2:58:ce:40:ec:69:
2b:ed:e8:e7:d1:6a:c3:48:e9:f1:92:d7:3d:40:bb:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:AE:5A:58:88:CA:ED:C9:D9:65:8F:90:25:15:A3:F8:60:B6:0A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HB2uWliIyu3J2WWPkCUVo_hgtgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.100.0/24
78.17.182.0/24
78.17.255.0/24
86.105.4.0/24
89.37.194.0/24
89.125.20.0/24
89.125.252.0/24
93.115.105.0/24
104.143.203.0/24
104.143.216.0/24
162.35.226.0/24
162.35.228.0/24
212.192.10.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:24:56:ff:fb:ac:59:fc:cb:55:f4:ab:55:ce:29:14:30:02:
99:61:97:3b:2c:da:a4:4a:95:32:07:c8:66:de:98:7b:2c:40:
2d:a6:8d:be:46:92:fc:42:9e:24:10:95:26:40:d1:e7:c8:50:
dc:48:f9:66:ee:2b:72:af:d2:c0:bb:84:69:14:a9:72:d4:43:
da:95:4c:86:2d:45:aa:4b:a2:86:cd:30:56:3a:fa:d0:e4:ba:
a4:73:a2:c9:3a:c6:ff:a5:23:c5:8b:b4:95:99:82:d2:81:05:
38:50:44:9d:ee:23:e0:42:0e:d2:ee:11:72:a2:8b:09:ac:3e:
1e:63:d0:f2:29:78:3c:02:60:8a:a3:93:0f:0d:11:42:0f:f3:
77:44:2a:4a:5e:44:fb:a3:d8:9c:8d:1a:7e:01:4d:dd:b5:8c:
75:0f:e1:4e:a0:57:f7:17:23:9c:f5:a2:2c:b2:34:7c:0d:c8:
c8:77:aa:be:68:ac:f9:99:ac:3d:0e:b3:f1:5a:fe:0c:62:fb:
b5:05:33:f4:1e:87:a2:57:7b:16:c8:53:66:6d:ff:bb:62:8f:
34:90:1e:32:7b:f9:66:34:5d:b7:f3:0a:dc:da:9a:1d:f9:61:
c6:02:ee:18:9d:8c:ab:37:f7:ee:11:a6:c0:ac:37:ef:4b:23:
16:cf:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 17:37:11 2026 by rpki-client