Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/HfGC5_t6_CNlVZbtFui2nBkr0fs.roa
File: HfGC5_t6_CNlVZbtFui2nBkr0fs.roa (raw, json)
Hash identifier: fP7CEIDv8Fdyp92FOT0UXHTnu/UVG+Ejl6WrbO2/rq8=
Subject key identifier: 1D:F1:82:E7:FB:7A:FC:23:65:55:96:ED:16:E8:B6:9C:19:2B:D1:FB
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A10B57053A4F76B0BAA5BC9B351F609557
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/HfGC5_t6_CNlVZbtFui2nBkr0fs.roa
Signing time: Mon 05 Oct 2026 09:13:34 +0000
ROA not before: Mon 05 Oct 2026 09:13:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9125
IP address blocks: 5.172.34.0/23 maxlen: 23
5.172.34.0/24 maxlen: 24
5.172.39.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.67.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.78.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
89.23.88.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.252.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
93.93.192.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.116.0/22 maxlen: 22
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.227.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.229.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.232.0/22 maxlen: 22
109.111.236.0/22 maxlen: 22
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.245.0/24 maxlen: 24
109.111.246.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 23
109.111.254.0/24 maxlen: 24
178.254.128.0/21 maxlen: 21
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.140.0/22 maxlen: 22
178.254.144.0/24 maxlen: 24
178.254.145.0/24 maxlen: 24
178.254.146.0/24 maxlen: 24
178.254.148.0/24 maxlen: 24
178.254.149.0/24 maxlen: 24
178.254.151.0/24 maxlen: 24
178.254.152.0/24 maxlen: 24
178.254.153.0/24 maxlen: 24
178.254.154.0/24 maxlen: 24
178.254.155.0/24 maxlen: 24
178.254.156.0/24 maxlen: 24
178.254.157.0/24 maxlen: 24
178.254.158.0/24 maxlen: 24
178.254.159.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.184.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
185.157.44.0/24 maxlen: 24
193.104.68.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.216.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.220.0/22 maxlen: 22
2a02:b58::/32 maxlen: 32
2a02:b58:1:13::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:57:05:3a:4f:76:b0:ba:a5:bc:9b:35:1f:60:95:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 5 09:13:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1df182e7fb7afc23655596ed16e8b69c192bd1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:ea:44:ab:dc:94:23:6b:2c:7a:5f:f4:e7:
06:d5:f7:33:bc:c8:1d:05:93:1f:6c:72:18:8c:01:
e3:7e:25:28:68:91:bb:c0:ba:94:98:80:d9:27:e5:
1a:ba:c8:63:3d:e2:4d:cc:9b:ae:5c:24:58:c2:82:
50:99:d3:03:bf:00:7d:f4:f2:43:6c:45:e0:10:2e:
40:c7:9d:54:f7:34:af:27:c4:59:df:4f:0a:93:cb:
04:28:dc:ff:f6:1e:7e:c6:ff:10:74:e6:c3:82:ed:
37:18:50:56:79:88:92:b4:ae:e5:1c:0c:e1:4e:d8:
72:02:9b:f3:4f:4c:a7:31:8b:5c:81:a6:bd:0c:99:
72:b8:dc:cc:12:d0:31:2e:e6:a5:de:84:53:e0:56:
e2:f1:69:a9:0a:5e:26:76:9c:18:6b:49:62:dc:fb:
62:0d:d1:93:b3:57:05:49:48:0d:b7:0f:8d:e9:ea:
d8:4f:9f:48:f3:eb:af:8b:d6:ed:c5:6b:52:8d:7f:
84:6f:fe:d1:57:33:ee:e8:a1:9f:40:3a:46:3c:bc:
a9:c5:7d:ba:6b:6c:e3:85:1e:01:5a:60:ea:d5:ec:
a3:26:d1:59:22:df:73:98:35:12:a9:be:00:87:c4:
e5:a9:8a:89:df:45:d4:ec:58:0e:2e:b6:26:d5:5d:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:82:E7:FB:7A:FC:23:65:55:96:ED:16:E8:B6:9C:19:2B:D1:FB
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/HfGC5_t6_CNlVZbtFui2nBkr0fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.34.0/23
5.172.39.0/24
89.23.65.0/24
89.23.67.0-89.23.71.255
89.23.74.0/23
89.23.78.0/23
89.23.81.0/24
89.23.86.0/24
89.23.88.0/24
89.23.90.0/23
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0/20
109.111.243.0-109.111.250.255
109.111.252.0-109.111.254.255
178.254.128.0-178.254.146.255
178.254.148.0/23
178.254.151.0-178.254.159.255
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.183.0-178.254.184.255
178.254.188.0/22
185.157.44.0/24
193.104.68.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
3f:0f:6d:4c:61:7b:3b:58:94:cb:07:94:04:a5:1f:fc:65:e5:
ec:c0:6b:bd:4e:26:26:4b:cc:7b:d3:3d:3b:52:9a:35:49:de:
49:e4:d2:db:fc:46:81:b8:31:2f:3b:97:72:ca:cc:85:a5:41:
21:9d:8b:33:92:9d:86:46:e0:7a:ce:f4:b9:5a:24:60:c7:62:
75:0f:d8:fb:80:da:58:6d:77:16:c7:5f:69:c5:f0:82:b5:77:
d5:a3:cb:ec:70:e0:ce:7d:5f:4c:a0:a3:38:04:bd:b8:2b:27:
e3:df:2d:03:14:ba:17:e3:d9:49:d3:b0:6c:04:01:ba:cd:58:
70:a5:12:bf:c0:41:06:8b:8e:42:15:0d:f0:ec:8c:1c:04:7d:
ac:ae:77:a2:80:0b:91:27:04:c2:e4:3b:82:71:3b:0b:30:80:
e7:89:f3:c0:48:ae:e6:07:94:30:55:3f:ce:53:5e:cb:96:49:
7c:98:07:12:b7:d3:66:ed:fd:95:b2:ca:4a:8f:63:63:03:81:
56:4c:43:2c:9a:03:8b:19:b0:06:2c:3f:79:23:89:aa:34:63:
fb:41:bb:88:ae:a3:e9:88:b5:d5:69:93:46:3a:a8:6a:e1:1e:
86:2a:c1:a8:28:97:d5:15:99:53:34:cc:44:bd:cf:0c:a8:50:
19:9f:10:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:00:15 2026 by rpki-client