Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HXgMVPJ2YcH7OYmbcCrHiB8oRag.roa
File: HXgMVPJ2YcH7OYmbcCrHiB8oRag.roa (raw, json)
Hash identifier: VwmhbQwKSmKkiqcuhu3caEQnFyeG4OGiGAakOS7MyVs=
Subject key identifier: 1D:78:0C:54:F2:76:61:C1:FB:39:89:9B:70:2A:C7:88:1F:28:45:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0621A883280B74CAE05B7340CFAC404F4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HXgMVPJ2YcH7OYmbcCrHiB8oRag.roa
Signing time: Wed 02 Sep 2026 12:31:41 +0000
ROA not before: Wed 02 Sep 2026 12:31:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.230.154.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:1a:88:32:80:b7:4c:ae:05:b7:34:0c:fa:c4:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 12:31:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d780c54f27661c1fb39899b702ac7881f2845a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:08:0a:c4:c7:c2:49:33:53:d9:32:b3:ca:
70:22:51:4a:a0:bf:28:0b:40:26:19:77:3e:db:3e:
79:d9:62:3d:79:36:7c:67:88:d1:94:58:2b:d8:af:
cd:5b:8d:71:fe:62:eb:fd:69:f1:7c:34:ac:6f:21:
7e:91:f6:38:7c:b4:6e:55:15:21:0f:1b:12:de:6e:
88:c2:d2:87:34:27:ea:b9:0b:80:79:4c:19:ac:0d:
86:07:70:82:e1:48:7a:49:ea:5a:cd:e9:35:d5:4f:
10:c5:af:5e:8a:72:3c:ce:46:b8:44:96:56:89:19:
0e:9f:ca:b0:cd:3c:8f:b5:17:90:59:f9:31:53:a5:
c0:bd:60:9d:8b:3a:46:90:ed:43:80:f9:f7:c7:e3:
8a:09:ce:1e:ea:a9:98:43:50:3c:c6:83:7f:df:7b:
00:ae:1b:76:25:51:49:69:a1:ee:50:7a:1a:f0:f0:
82:5d:fb:ce:fe:37:28:b1:07:5d:83:37:ef:9c:09:
3c:26:b4:52:13:71:b7:65:d0:46:84:37:c6:66:82:
f8:26:f0:9a:13:2f:9a:e9:ec:22:95:1a:5d:8d:fd:
2f:a0:d0:6a:12:fb:bd:7e:00:e5:01:77:6a:a5:4a:
b6:2e:40:de:6b:f7:72:f1:5b:be:61:c2:c4:58:37:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:0C:54:F2:76:61:C1:FB:39:89:9B:70:2A:C7:88:1F:28:45:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HXgMVPJ2YcH7OYmbcCrHiB8oRag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.230.154.0/24
5.231.26.0/24
5.231.242.0/24
5.231.254.0/24
77.90.48.0/24
89.106.71.0/24
94.249.230.0/24
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c6:71:a1:ed:b7:0c:17:21:68:56:c3:75:63:87:d5:5e:99:
d5:dd:a1:dc:e6:b1:49:b1:f4:86:13:fd:27:c0:1d:30:cd:ad:
97:c0:5a:d4:a0:34:69:56:e0:bc:b8:44:c7:c1:05:ba:47:e9:
af:17:c4:44:dc:4e:c7:39:61:db:b6:4d:d2:2f:1f:b1:b9:b5:
2b:52:6b:27:85:00:a5:ea:dc:8d:bf:3b:04:6d:62:8a:06:00:
de:1c:3e:c0:f7:26:c5:0a:9c:2f:32:2d:70:b2:8a:ba:71:51:
f4:cc:53:11:ab:74:5f:ee:f1:36:b3:12:c0:b9:c1:bc:4c:a3:
b8:d5:65:46:61:e5:4b:31:58:bd:01:8b:94:d9:32:b7:75:e9:
e6:03:db:28:96:69:96:70:85:15:b2:5b:68:28:7c:56:23:f7:
cf:9f:f2:69:1f:88:88:f1:43:23:c9:56:6e:4d:66:88:b8:d6:
c6:9d:fa:4a:20:cd:d5:cc:62:a5:5e:67:03:5e:d9:03:0a:c3:
8b:68:d2:a4:dd:74:4f:b1:b3:d7:96:b5:a4:be:10:44:af:7a:
59:77:70:ad:28:fb:f2:a9:33:38:dd:26:a5:64:68:42:21:94:
4a:6b:2a:5e:f3:a1:cb:dd:12:ab:be:15:55:c6:37:61:05:28:
d4:95:34:70
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaBiGogygLdMrgW3NAz6xAT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTAyMTIzMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDc4MGM1NGYyNzY2MWMxZmIzOTg5OWI3MDJhYzc4ODFmMjg0NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98ICsTHwkkzU9kys8pwIlFKoL8o
C0AmGXc+2z552WI9eTZ8Z4jRlFgr2K/NW41x/mLr/WnxfDSsbyF+kfY4fLRuVRUh
DxsS3m6IwtKHNCfquQuAeUwZrA2GB3CC4Uh6Sepazek11U8Qxa9einI8zka4RJZW
iRkOn8qwzTyPtReQWfkxU6XAvWCdizpGkO1DgPn3x+OKCc4e6qmYQ1A8xoN/33sA
rht2JVFJaaHuUHoa8PCCXfvO/jcosQddgzfvnAk8JrRSE3G3ZdBGhDfGZoL4JvCa
Ey+a6ewilRpdjf0voNBqEvu9fgDlAXdqpUq2LkDea/dy8Vu+YcLEWDeqxwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFB14DFTydmHB+zmJm3Aqx4gfKEWoMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSFhnTVZQSjJZY0g3T1ltYmNDckhpQjhvUmFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABVOZAwQA
BeaaAwQABecaAwQABefyAwQABef+AwQATVowAwQAWWpHAwQAXvnmAwQAXvn2MA0G
CSqGSIb3DQEBCwUAA4IBAQAgxnGh7bcMFyFoVsN1Y4fVXpnV3aHc5rFJsfSGE/0n
wB0wza2XwFrUoDRpVuC8uETHwQW6R+mvF8RE3E7HOWHbtk3SLx+xubUrUmsnhQCl
6tyNvzsEbWKKBgDeHD7A9ybFCpwvMi1wsoq6cVH0zFMRq3Rf7vE2sxLAucG8TKO4
1WVGYeVLMVi9AYuU2TK3denmA9solmmWcIUVsltoKHxWI/fPn/JpH4iI8UMjyVZu
TWaIuNbGnfpKIM3VzGKlXmcDXtkDCsOLaNKk3XRPsbPXlrWkvhBEr3pZd3CtKPvy
qTM43SalZGhCIZRKaype86HL3RKrvhVVxjdhBSjUlTRw
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:41 2026 by rpki-client