Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HRfrtRaBZSZ-f1pAZ1ACZT6NP90.roa
File: HRfrtRaBZSZ-f1pAZ1ACZT6NP90.roa (raw, json)
Hash identifier: WYVUUGu6l/K9YS83CIG7DjM6VpxpdPHz/zRTyIDsmYc=
Subject key identifier: 1D:17:EB:B5:16:81:65:26:7E:7F:5A:40:67:50:02:65:3E:8D:3F:DD
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F699B356E57318FB11CD97CD28091D345
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HRfrtRaBZSZ-f1pAZ1ACZT6NP90.roa
Signing time: Thu 16 Jul 2026 06:26:47 +0000
ROA not before: Thu 16 Jul 2026 06:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.41.26.0/24 maxlen: 24
62.105.200.0/22 maxlen: 22
62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
77.67.6.0/24 maxlen: 24
77.67.9.0/24 maxlen: 24
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.118.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.198.0/24 maxlen: 24
217.8.202.0/24 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:9b:35:6e:57:31:8f:b1:1c:d9:7c:d2:80:91:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 16 06:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d17ebb5168165267e7f5a40675002653e8d3fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:ca:d1:8a:48:32:4a:f7:4f:6d:4f:d1:e5:
12:81:1f:c9:1c:f8:68:cf:a2:b5:be:12:f5:8f:77:
c6:31:d3:c5:ba:48:81:15:23:c9:b8:8e:d6:e7:1a:
c9:23:60:3c:39:64:2b:84:eb:ae:18:84:15:75:3c:
f2:50:cc:70:25:ee:f7:af:1a:fe:84:40:ec:f0:2f:
e3:a9:be:5d:9b:02:b8:d2:26:76:ce:1b:54:9b:a5:
67:bc:89:0d:91:8b:f2:7a:e6:58:c9:d3:4e:6b:87:
bf:28:1d:f3:59:7e:f6:64:7e:46:fc:c8:0d:ff:4a:
78:0c:99:81:fb:40:02:f4:21:82:0b:91:68:e1:b6:
a7:03:7b:64:59:79:f7:2a:f6:a0:4d:4c:73:b9:80:
ac:6a:af:3b:e0:39:fa:46:24:64:46:f0:e6:7e:60:
5f:b3:a1:ab:30:31:3d:92:83:f1:0b:74:a0:5e:28:
4b:95:bf:c4:56:67:10:e7:6b:af:1e:08:2d:bd:43:
a4:c7:7a:55:fd:86:64:5a:93:cf:36:04:b6:c7:06:
a7:42:78:e2:e3:b7:4b:1d:52:f2:b1:c1:e1:b1:07:
6a:ef:d5:05:08:e2:9a:8f:0c:b6:17:ce:f8:2b:8e:
be:b9:65:23:32:a5:12:b9:bf:c8:ca:f6:d0:5e:f3:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:EB:B5:16:81:65:26:7E:7F:5A:40:67:50:02:65:3E:8D:3F:DD
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HRfrtRaBZSZ-f1pAZ1ACZT6NP90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.26.0/24
62.105.200.0/22
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
77.67.6.0/24
77.67.9.0/24
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
212.189.118.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.198.0/24
217.8.202.0/24
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
42:65:1f:df:67:ea:bf:ee:68:59:f2:32:90:81:fb:22:2f:f5:
54:e3:2e:1a:97:f6:f3:b3:a7:13:8b:38:44:e6:95:d2:5e:87:
e8:4a:d0:f2:5d:3e:a1:28:11:4c:f6:4a:03:cf:d0:b8:d0:ea:
ae:0a:0a:ee:b2:e2:77:c7:c4:03:ed:81:13:9f:b0:4a:e9:5d:
05:e7:9d:9d:b4:78:b6:ba:5a:16:13:bd:13:94:9f:53:17:31:
2d:35:1a:aa:be:f9:39:42:bd:0c:9f:e3:1d:25:82:50:d0:81:
f9:13:7e:ac:92:ab:fa:62:4b:95:8b:89:c3:19:d3:20:15:81:
0c:2d:8a:84:0a:02:55:b8:41:1e:07:99:94:a5:7c:3c:d6:6d:
34:3d:cc:89:9d:b3:9e:b0:d7:72:7e:22:8c:11:57:b7:8a:e4:
9f:ab:a1:c0:84:69:62:90:72:c6:db:13:f8:a3:f8:4d:37:1b:
80:b5:e1:43:cb:28:f1:e1:f6:8c:8b:51:67:01:fd:2c:47:3a:
f4:84:7b:ce:f0:d5:ea:33:2f:6e:e0:e6:36:22:73:de:e7:55:
22:36:de:bb:f8:f8:a7:4e:a3:5c:e9:c1:83:af:e8:5d:00:91:
0c:a0:28:eb:f3:2b:28:ed:6c:f6:5c:e2:d7:4c:c0:b2:4d:ab:
be:5f:7f:2f
-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgISAZ9pmzVuVzGPsRzZfNKAkdNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzE2MDYyNjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDE3ZWJiNTE2ODE2NTI2N2U3ZjVhNDA2NzUwMDI2NTNlOGQzZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfLK0YpIMkr3T21P0eUSgR/JHPho
z6K1vhL1j3fGMdPFukiBFSPJuI7W5xrJI2A8OWQrhOuuGIQVdTzyUMxwJe73rxr+
hEDs8C/jqb5dmwK40iZ2zhtUm6VnvIkNkYvyeuZYydNOa4e/KB3zWX72ZH5G/MgN
/0p4DJmB+0AC9CGCC5Fo4banA3tkWXn3KvagTUxzuYCsaq874Dn6RiRkRvDmfmBf
s6GrMDE9koPxC3SgXihLlb/EVmcQ52uvHggtvUOkx3pV/YZkWpPPNgS2xwanQnji
47dLHVLyscHhsQdq79UFCOKajwy2F874K46+uWUjMqUSub/IyvbQXvMc/wIDAQAB
o4IDkzCCA48wHQYDVR0OBBYEFB0X67UWgWUmfn9aQGdQAmU+jT/dMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSFJmcnRSYUJaU1otZjFwQVoxQUNaVDZOUDkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBpwYIKwYBBQUHAQcBAf8EggGWMIIBkjCCAY4EAgABMIIB
hgMEAD4pGgMEAj5pyAMEAT7AZjAMAwQAPsBxAwQCPsBwAwQBPsB+AwQATUMGAwQA
TUMJMAwDBAFcRwIDBAFcRwQwDAMEAVxHGgMEBVxHAAMEAVxHJDAMAwQEXEcwAwQC
XEc4AwQBXEc+AwQAh8QEAwQBh8QYAwQBh8QcAwQBh8RYAwQBh8RmAwQCh8RsAwQB
h8SEAwQCh8SQAwQBh8ScAwQBh8SkAwQBh8SsAwQBh8SwAwQAh8TKAwQAh8TMAwQA
w1bfAwQA1L12AwQB1anMAwQB1anwAwQA1cmMAwQA1cmUAwQB1cmaAwQA1cmeAwQA
1cmjAwQB1cmmAwQA1cmrAwQB1cmuAwQA1cmzAwQB1cm2AwQB1cm6AwQB1cm+MAwD
BAHVycIDBADVycYDBADVycgDBADVycoDBADVycwDBAHVydADBAHVydYDBAHVydoD
BAHVyd4wDAMEAdXJ4gMEAdXJ5AMEAdXJ6gMEAdXJ7gMEANkIxgMEANkIygMEANkI
2gMEAdkI3jANBgkqhkiG9w0BAQsFAAOCAQEAQmUf32fqv+5oWfIykIH7Ii/1VOMu
Gpf287OnE4s4ROaV0l6H6ErQ8l0+oSgRTPZKA8/QuNDqrgoK7rLid8fEA+2BE5+w
SuldBeednbR4trpaFhO9E5SfUxcxLTUaqr75OUK9DJ/jHSWCUNCB+RN+rJKr+mJL
lYuJwxnTIBWBDC2KhAoCVbhBHgeZlKV8PNZtND3MiZ2znrDXcn4ijBFXt4rkn6uh
wIRpYpByxtsT+KP4TTcbgLXhQ8so8eH2jItRZwH9LEc69IR7zvDV6jMvbuDmNiJz
3udVIjbeu/j4p06jXOnBg6/oXQCRDKAo6/MrKO1s9lzi10zAsk2rvl9/Lw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:14 2026 by rpki-client