Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HQn80rvjgYipNCWLMlWo3hI4nok.roa
File: HQn80rvjgYipNCWLMlWo3hI4nok.roa (raw, json)
Hash identifier: apULFV2j6k/lBdb3CdL/RmUyzFFg1bTcFsKN8g6oZoc=
Subject key identifier: 1D:09:FC:D2:BB:E3:81:88:A9:34:25:8B:32:55:A8:DE:12:38:9E:89
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F23F284F3047D23BAF9A0792B97985F72
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HQn80rvjgYipNCWLMlWo3hI4nok.roa
Signing time: Thu 02 Jul 2026 17:48:43 +0000
ROA not before: Thu 02 Jul 2026 17:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
85.209.3.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.104.250.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
194.53.54.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0b:da00::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:f2:84:f3:04:7d:23:ba:f9:a0:79:2b:97:98:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 17:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d09fcd2bbe38188a934258b3255a8de12389e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:25:02:e8:99:30:46:f9:df:0c:3d:b0:6c:
73:0f:9c:84:01:5e:58:39:2a:33:27:b7:1f:48:d2:
ad:b8:98:ec:51:e7:fa:3b:75:a6:ce:e1:cf:89:e3:
5e:85:7e:24:61:bf:25:98:62:58:40:14:11:15:d7:
3a:87:45:10:cb:97:33:f5:46:00:08:d4:74:8a:2b:
3c:60:2d:33:a4:6d:6c:ee:b4:e2:8a:a2:49:dd:d3:
75:c4:43:cb:3c:59:a8:19:1f:b5:8b:b0:de:aa:86:
21:55:ee:db:c7:1d:57:7c:cf:67:c4:d7:af:32:8b:
c3:a8:23:59:50:b8:ff:22:c4:55:3d:35:89:05:a0:
fd:c9:5b:38:a9:ec:84:c1:d3:8c:f3:55:be:72:75:
f6:40:ee:91:31:ea:d2:b6:56:2b:cf:c3:c4:37:da:
0f:d7:b3:a2:a3:7a:c8:07:38:58:b9:f1:c6:b1:b0:
f2:7a:f7:6a:d0:8a:02:51:a2:80:43:39:22:53:c2:
51:8c:33:bd:f4:a1:72:0d:79:fc:f1:35:80:29:ca:
02:59:23:e8:2e:1e:4b:a6:86:31:aa:c9:92:75:9d:
f2:9e:32:c0:88:c1:82:7d:9b:25:f8:45:48:ba:4b:
ce:7d:d2:3c:18:24:91:83:0f:fa:f2:be:a7:5b:12:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:09:FC:D2:BB:E3:81:88:A9:34:25:8B:32:55:A8:DE:12:38:9E:89
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/HQn80rvjgYipNCWLMlWo3hI4nok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.9.74.0/24
45.89.64.0/24
45.133.245.0-45.133.246.255
46.17.106.0/24
85.209.0.0/24
85.209.3.0/24
95.214.8.0/24
139.28.220.0/23
185.17.2.0/24
185.58.207.0/24
185.94.167.0/24
185.104.250.0/24
185.105.118.0/24
185.112.83.0/24
185.125.228.0/24
185.125.230.0/23
185.188.181.0/24
185.229.65.0-185.229.66.255
192.162.100.0/24
192.162.102.0/23
193.0.200.0/24
193.0.202.0/23
193.109.84.0/23
193.124.180.0/23
194.36.177.0/24
194.53.54.0/24
194.63.140.0/22
194.67.200.0/24
195.66.87.0/24
IPv6:
2a0a:9300:1::/48
2a0a:9300:aaaa::/48
2a0b:da00::/30
Signature Algorithm: sha256WithRSAEncryption
14:84:c7:23:4b:d8:42:52:9b:64:ac:e8:b2:90:13:15:53:da:
1d:cd:10:0e:bc:5e:11:2a:02:d1:55:52:dc:3d:3f:27:6c:08:
c8:61:2b:15:2e:e0:28:9d:96:93:c4:e0:94:77:a9:85:97:6e:
3b:45:2e:16:71:56:56:c6:ae:de:b4:f3:6d:d2:e7:3d:b5:4e:
07:df:cb:3e:08:d8:6f:0e:bd:ae:7e:e9:ff:a2:38:86:fd:76:
f2:42:33:6a:87:9e:fe:7a:1b:bb:8c:6a:05:1d:54:e9:3f:10:
c6:62:44:05:02:b2:be:b1:5f:91:ca:76:70:af:2c:22:c0:7d:
29:21:2e:76:55:63:9c:3a:f6:6d:3a:c9:00:79:24:b8:b3:42:
db:bb:37:62:9e:ff:2d:de:3e:62:1f:fe:af:df:b2:fd:0c:40:
3e:27:6c:b6:44:3d:f0:72:fa:76:cc:e0:c8:62:f2:54:c6:8f:
7e:44:55:b5:95:d6:a8:be:6b:b5:05:eb:72:25:ff:0c:5e:fc:
5e:63:42:84:c9:76:fe:32:b1:1a:5c:ab:2d:d4:e3:e5:2c:d7:
9b:a6:2e:b2:c7:b8:db:91:20:08:78:50:43:d2:7d:ff:20:8a:
2e:3f:cb:8c:1d:4e:50:58:30:a3:b7:c3:a5:33:7c:1c:76:11:
e5:3c:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client