Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/htqKUhJyQNt1qA3G44rlxCxq60M.roa
File: htqKUhJyQNt1qA3G44rlxCxq60M.roa (raw, json)
Hash identifier: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=
Subject key identifier: 86:DA:8A:52:12:72:40:DB:75:A8:0D:C6:E3:8A:E5:C4:2C:6A:EB:43
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019DCC71DA3A176DC7B0EAB01CA2105DB698
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/htqKUhJyQNt1qA3G44rlxCxq60M.roa
Signing time: Mon 27 Apr 2026 00:58:26 +0000
ROA not before: Mon 27 Apr 2026 00:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.100.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
45.14.72.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
88.218.101.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
91.201.142.0/23 maxlen: 23
92.119.180.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
139.28.137.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
194.124.52.0/22 maxlen: 22
195.206.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:71:da:3a:17:6d:c7:b0:ea:b0:1c:a2:10:5d:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Apr 27 00:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86da8a52127240db75a80dc6e38ae5c42c6aeb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:30:bc:25:e7:74:00:ad:c0:06:25:58:8d:
d8:fd:c0:49:75:0a:05:24:ba:2d:02:a2:52:06:eb:
99:de:ea:bb:22:46:5f:56:9d:a8:f7:3c:a8:dc:7a:
fd:f4:6a:4f:c4:51:3d:02:7c:47:08:d5:7e:c3:74:
e9:cf:fa:ab:ca:9d:cc:49:fa:a0:02:94:1d:e7:0f:
41:4a:71:f7:54:22:c8:de:34:c8:b4:a9:b4:f6:2c:
18:e7:e5:fc:ac:03:97:50:cc:80:8d:49:6e:47:95:
19:81:6f:74:27:d0:a1:1f:d9:19:04:45:f3:69:d4:
7e:14:f1:a3:c1:e0:11:49:e4:84:19:32:4e:fa:26:
5b:0b:98:90:06:2a:61:f5:74:43:25:3e:a7:d7:d7:
8a:aa:cc:cd:f9:9f:1d:de:a4:7f:a5:bf:ac:71:80:
ec:94:5d:40:ec:e0:55:98:14:b3:2b:58:ee:59:14:
78:a4:f3:13:75:8f:4a:d9:99:06:84:df:8a:6b:f1:
b3:72:84:20:2c:e5:7f:8d:c6:10:2a:7c:5e:4a:f7:
4f:be:50:f5:27:42:2c:cb:58:b0:0c:3d:86:b7:e8:
f3:9f:7b:90:75:64:13:ea:10:89:50:48:4d:e2:a1:
42:bd:2a:93:03:56:58:1b:64:ff:5a:e0:ee:33:da:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DA:8A:52:12:72:40:DB:75:A8:0D:C6:E3:8A:E5:C4:2C:6A:EB:43
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/htqKUhJyQNt1qA3G44rlxCxq60M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/23
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/22
91.201.142.0/23
92.119.180.0/23
92.119.183.0/24
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/23
193.31.75.0/24
194.5.0.0/22
194.124.52.0/22
195.206.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e3:b2:93:fd:76:29:37:6b:b2:70:0e:b8:b2:8d:e6:1b:64:
04:3d:18:2d:2b:a6:1d:d4:88:14:dc:89:82:4c:9c:e0:86:27:
b5:2a:f7:e0:b4:78:37:da:e8:88:31:35:bd:58:82:8b:78:43:
2b:4e:c7:d3:68:e4:0b:c2:9d:05:f2:21:11:a9:18:54:b3:e6:
8b:11:e1:75:db:e5:fd:f3:24:db:c1:cb:54:fe:44:19:9a:c1:
af:0a:99:ba:55:2b:47:4c:40:cc:f2:37:26:4d:5a:f4:e7:7e:
31:0e:ee:f9:6d:83:81:f1:a2:17:0e:c1:46:96:76:e3:db:04:
a9:06:5e:c8:78:7c:ec:50:53:19:d3:1d:6b:c3:05:b5:2d:ee:
86:91:4c:89:2f:2f:3e:e3:26:00:fd:f9:16:07:fb:47:dd:8c:
2b:2f:23:fd:bb:b7:d0:48:3a:6f:d4:1b:76:4d:64:2e:a1:f5:
b3:a7:eb:99:fb:df:c6:bd:ad:5e:d1:8c:d8:8b:7d:3c:06:db:
a8:e4:f3:91:81:0c:3f:72:b6:29:a5:04:78:19:72:08:56:41:
1c:b3:a7:e8:87:bc:63:bc:49:41:9f:ca:81:fc:38:a4:c7:f2:
95:ca:8d:64:b9:ed:9b:f3:ba:1c:e6:8e:3c:f3:04:9f:73:4c:
b1:1d:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:27:15 2026 by rpki-client