Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/HKMxKsX10GUPJzo_jhhQV7u5Ihs.roa
File: HKMxKsX10GUPJzo_jhhQV7u5Ihs.roa (raw, json)
Hash identifier: DFjq7lNI6Yd1N1gW4xnOFUz4tDBSGwod1RBPK2rC/V8=
Subject key identifier: 1C:A3:31:2A:C5:F5:D0:65:0F:27:3A:3F:8E:18:50:57:BB:B9:22:1B
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01A10BB24B23FC8C6A0D213F7B42E8EC3D66
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/HKMxKsX10GUPJzo_jhhQV7u5Ihs.roa
Signing time: Mon 05 Oct 2026 10:53:16 +0000
ROA not before: Mon 05 Oct 2026 10:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
5.187.33.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.48.0/24 maxlen: 24
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.151.0/24 maxlen: 24
83.172.153.0/24 maxlen: 24
83.172.169.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.184.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.10.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.211.166.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
193.3.55.0/24 maxlen: 24
213.111.177.0/24 maxlen: 24
213.111.180.0/24 maxlen: 24
213.111.182.0/24 maxlen: 24
213.111.183.0/24 maxlen: 24
213.111.184.0/24 maxlen: 24
213.111.186.0/24 maxlen: 24
213.111.187.0/24 maxlen: 24
213.111.188.0/24 maxlen: 24
213.111.191.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:491::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:ed91::/48 maxlen: 48
2a03:f82:abcd::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b2:4b:23:fc:8c:6a:0d:21:3f:7b:42:e8:ec:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Oct 5 10:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ca3312ac5f5d0650f273a3f8e185057bbb9221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:85:85:89:37:4b:44:bf:11:e2:53:0d:cb:
c4:9d:35:6e:90:5d:b6:f0:28:6c:d0:5a:01:82:79:
7d:ac:2d:ea:22:f1:24:67:4d:58:4c:ee:0f:a4:f0:
29:e9:49:e5:0c:f0:da:c5:63:49:ae:01:a5:05:5c:
ea:9a:6a:09:35:11:1c:ad:dc:c7:c2:73:a9:6e:f4:
d7:a0:57:17:7c:4f:aa:8b:af:1e:e1:e0:d7:87:26:
b5:dc:ce:fb:c2:15:dc:ac:5e:1e:70:67:b9:3b:99:
cb:b8:0d:df:22:c9:33:c8:07:7e:fb:6c:ca:0e:00:
29:1f:01:01:45:ef:4f:e3:19:cc:e7:ee:00:6c:f0:
ba:d4:44:5d:22:c8:11:ad:6d:69:31:ed:fb:8c:47:
31:e1:db:55:50:c0:80:99:4f:59:3d:35:83:3e:73:
02:30:e7:da:b5:24:75:7d:f9:ce:cd:69:87:b0:54:
7c:e6:d4:59:3a:ed:84:06:1f:0f:66:9b:a8:84:e6:
e7:28:d8:23:ab:cf:4c:ce:1b:b2:e0:39:ca:b2:49:
17:10:ce:e3:6a:9b:35:45:9b:af:32:ea:af:a5:10:
e2:48:eb:37:74:81:ea:09:b5:c2:dd:e8:79:6d:51:
27:5f:1e:ca:01:64:a9:15:3e:7b:5d:b8:b4:6b:3c:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:31:2A:C5:F5:D0:65:0F:27:3A:3F:8E:18:50:57:BB:B9:22:1B
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/HKMxKsX10GUPJzo_jhhQV7u5Ihs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
5.187.33.0/24
37.235.48.0/20
45.153.125.0/24
46.183.187.0/24
83.172.134.0/23
83.172.150.0/23
83.172.153.0/24
83.172.169.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.40.105.0/24
89.46.235.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.64.0/24
92.243.66.0/24
95.156.204.0/23
103.57.249.0-103.57.250.255
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
176.126.99.0/24
185.26.236.0-185.26.238.255
185.76.79.0/24
185.122.184.0/24
185.193.48.0/24
185.193.51.0/24
185.195.65.0/24
188.190.1.0/24
188.190.3.0/24
188.190.6.0-188.190.11.255
188.190.14.0-188.190.17.255
188.190.19.0-188.190.23.255
188.190.25.0-188.190.29.255
188.211.166.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
193.3.55.0/24
213.111.177.0/24
213.111.180.0/24
213.111.182.0-213.111.184.255
213.111.186.0-213.111.188.255
213.111.191.0/24
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::-2a03:f80:32:ffff:ffff:ffff:ffff:ffff
2a03:f80:48::/48
2a03:f80:56::/47
2a03:f80:61::/48
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::-2a03:f80:359:ffff:ffff:ffff:ffff:ffff
2a03:f80:370::/47
2a03:f80:491::/48
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f80:ed91::/48
2a03:f82:abcd::/48
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
55:c7:94:8b:cf:4c:61:cb:08:9b:fa:18:2f:c5:d4:67:59:86:
4a:22:f4:67:54:91:2b:b2:80:e1:c9:a9:c2:3a:a3:30:22:dc:
f3:73:f5:e2:e4:e7:52:bd:0e:b9:e1:03:e8:5a:85:61:71:6d:
d6:ee:ec:fa:c7:57:f0:ae:c1:e1:53:3d:6e:41:18:6a:28:0a:
c7:ea:d2:75:ed:72:f5:59:a4:a0:13:27:f8:69:11:21:0c:02:
a5:ca:34:a5:42:7c:33:a9:ae:e7:7b:29:43:b2:1e:23:69:62:
4b:98:2e:9f:39:51:16:05:f7:aa:61:59:2a:ba:8b:0f:71:45:
43:cc:95:44:84:63:2c:a1:2a:5b:7a:2a:86:10:7d:50:aa:7e:
a6:c2:61:e0:b4:83:8d:4d:1b:3e:21:c9:3a:d3:2f:b5:bf:cc:
e4:34:e0:bc:b0:72:e4:dd:9b:f3:80:d0:52:02:8d:6c:ba:05:
78:18:c5:15:43:52:6e:5a:0d:e0:54:7c:b0:c3:b0:28:59:28:
c7:e0:15:f5:b8:6a:d8:0e:aa:3b:b7:cc:81:46:60:0c:49:87:
a0:36:d8:29:6e:74:40:a0:53:c5:62:43:c4:d3:bc:f4:05:c0:
c6:34:46:4d:8f:16:6e:8a:de:b9:e1:80:ff:cf:14:24:8f:f0:
5b:1f:fe:09
-----BEGIN CERTIFICATE-----
MIIHWjCCBkKgAwIBAgISAaELsksj/IxqDSE/e0Lo7D1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjYxMDA1MTA1MzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2EzMzEyYWM1ZjVkMDY1MGYyNzNhM2Y4ZTE4NTA1N2JiYjkyMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lOFhYk3S0S/EeJTDcvEnTVukF22
8Chs0FoBgnl9rC3qIvEkZ01YTO4PpPAp6UnlDPDaxWNJrgGlBVzqmmoJNREcrdzH
wnOpbvTXoFcXfE+qi68e4eDXhya13M77whXcrF4ecGe5O5nLuA3fIskzyAd++2zK
DgApHwEBRe9P4xnM5+4AbPC61ERdIsgRrW1pMe37jEcx4dtVUMCAmU9ZPTWDPnMC
MOfatSR1ffnOzWmHsFR85tRZOu2EBh8PZpuohObnKNgjq89Mzhuy4DnKskkXEM7j
aps1RZuvMuqvpRDiSOs3dIHqCbXC3eh5bVEnXx7KAWSpFT57Xbi0azwxSQIDAQAB
o4IEZjCCBGIwHQYDVR0OBBYEFByjMSrF9dBlDyc6P44YUFe7uSIbMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvSEtNeEtzWDEwR1VQSnpvX2poaFFWN3U1SWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICegYIKwYBBQUHAQcBAf8EggJpMIICZTCCAZQEAgABMIIB
jAMEAAW0cgMEAAW7IQMEBCXrMAMEAC2ZfQMEAC63uwMEAVOshgMEAVOslgMEAFOs
mQMEAFOsqQMEAFPzeAMEAVPzegMEAFT3PQMEAFZqdwMEAFkfewMEAFkoaQMEAFku
6wMEAFku7gMEAFuEXgMEAVvjzAMEAFzzQAMEAFzzQgMEAV+czDAMAwQAZzn5AwQA
Zzn6AwQAhv/SMAwDBAOVmpgDBACVmpwDBAWX7AAwDAMEAJ7/0QMEAJ7/1AMEALB+
YzAMAwQCuRrsAwQAuRruAwQAuUxPAwQAuXq4AwQAucEwAwQAucEzAwQAucNBAwQA
vL4BAwQAvL4DMAwDBAG8vgYDBAK8vggwDAMEAby+DgMEAby+EDAMAwQAvL4TAwQD
vL4QMAwDBAC8vhkDBAG8vhwDBAC806YwDAMEALzWIQMEALzWIgMEAbzWJgMEAMED
NwMEANVvsQMEANVvtDAMAwQB1W+2AwQA1W+4MAwDBAHVb7oDBADVb7wDBADVb78w
DAMEAdW3NgMEAdW3ODCBygQCAAIwgcMDBwAqAw+AAAcwEgMHACoDD4AAMQMHACoD
D4AAMgMHACoDD4AASAMHASoDD4AAVgMHACoDD4AAYQMHACoDD4AAcAMHACoDD4AD
VDASAwcAKgMPgANXAwcBKgMPgANYAwcBKgMPgANwAwcAKgMPgASRAwcAKgMPgDmR
AwcAKgMPgK0VMBIDBwAqAw+A7RUDBwMqAw+A7RADBwAqAw+A7TEDBwAqAw+A7VED
BwAqAw+A7ZEDBwAqAw+Cq80DBwAqAw+H//8wDQYJKoZIhvcNAQELBQADggEBAFXH
lIvPTGHLCJv6GC/F1GdZhkoi9GdUkSuygOHJqcI6ozAi3PNz9eLk51K9DrnhA+ha
hWFxbdbu7PrHV/CuweFTPW5BGGooCsfq0nXtcvVZpKATJ/hpESEMAqXKNKVCfDOp
rud7KUOyHiNpYkuYLp85URYF96phWSq6iw9xRUPMlUSEYyyhKlt6KoYQfVCqfqbC
YeC0g41NGz4hyTrTL7W/zOQ04LywcuTdm/OA0FICjWy6BXgYxRVDUm5aDeBUfLDD
sChZKMfgFfW4atgOqju3zIFGYAxJh6A22CludECgU8ViQ8TTvPQFwMY0Rk2PFm6K
3rnhgP/PFCSP8Fsf/gk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:58 2026 by rpki-client