Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HxnClv0WXV_o69Iqf1i23F1CK0M.roa
File: HxnClv0WXV_o69Iqf1i23F1CK0M.roa (raw, json)
Hash identifier: aWKTzl5PyhGTa4WRK6qlMWrfNZ/w2ynCDx4YlLiTyq4=
Subject key identifier: 1F:19:C2:96:FD:16:5D:5F:E8:EB:D2:2A:7F:58:B6:DC:5D:42:2B:43
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A15309E1AEA6D4BC04D4C53223E2856253
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HxnClv0WXV_o69Iqf1i23F1CK0M.roa
Signing time: Mon 19 Oct 2026 07:21:58 +0000
ROA not before: Mon 19 Oct 2026 07:21:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 134.49.67.0/24 maxlen: 24
134.49.69.0/24 maxlen: 24
134.49.72.0/24 maxlen: 24
134.49.76.0/24 maxlen: 24
134.49.80.0/24 maxlen: 24
134.49.83.0/24 maxlen: 24
134.49.85.0/24 maxlen: 24
134.49.88.0/24 maxlen: 24
136.176.168.0/24 maxlen: 24
136.176.177.0/24 maxlen: 24
136.176.185.0/24 maxlen: 24
145.63.161.0/24 maxlen: 24
145.63.163.0/24 maxlen: 24
145.63.165.0/24 maxlen: 24
145.63.168.0/24 maxlen: 24
145.63.172.0/24 maxlen: 24
145.63.177.0/24 maxlen: 24
145.63.181.0/24 maxlen: 24
145.63.184.0/24 maxlen: 24
145.63.186.0/24 maxlen: 24
145.63.187.0/24 maxlen: 24
145.63.189.0/24 maxlen: 24
147.90.16.0/24 maxlen: 24
147.90.21.0/24 maxlen: 24
147.90.22.0/24 maxlen: 24
147.90.34.0/24 maxlen: 24
147.90.52.0/24 maxlen: 24
147.90.77.0/24 maxlen: 24
147.90.194.0/24 maxlen: 24
147.90.203.0/24 maxlen: 24
147.90.204.0/24 maxlen: 24
147.90.215.0/24 maxlen: 24
147.90.225.0/24 maxlen: 24
147.90.228.0/24 maxlen: 24
147.90.232.0/24 maxlen: 24
147.90.233.0/24 maxlen: 24
149.245.126.0/24 maxlen: 24
149.245.127.0/24 maxlen: 24
158.173.185.0/24 maxlen: 24
158.173.200.0/24 maxlen: 24
158.173.202.0/24 maxlen: 24
158.173.207.0/24 maxlen: 24
158.173.213.0/24 maxlen: 24
158.173.226.0/24 maxlen: 24
173.209.1.0/24 maxlen: 24
173.209.3.0/24 maxlen: 24
173.209.9.0/24 maxlen: 24
173.209.14.0/24 maxlen: 24
173.209.15.0/24 maxlen: 24
173.209.17.0/24 maxlen: 24
173.209.20.0/24 maxlen: 24
173.209.23.0/24 maxlen: 24
173.209.26.0/24 maxlen: 24
173.209.27.0/24 maxlen: 24
173.209.29.0/24 maxlen: 24
185.161.110.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:09:e1:ae:a6:d4:bc:04:d4:c5:32:23:e2:85:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 19 07:21:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f19c296fd165d5fe8ebd22a7f58b6dc5d422b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:00:1d:27:bb:47:c8:5c:84:3a:2a:a7:16:
3c:07:78:39:75:a1:2a:24:4b:a3:9a:38:55:d3:a9:
8e:c8:a4:e2:28:92:12:04:e4:1b:fb:df:a6:94:93:
90:0a:f1:ac:19:9b:17:1a:22:8c:95:51:fb:df:05:
8e:cf:03:4d:13:a9:22:48:ef:3e:e5:9d:97:aa:e8:
ef:62:c2:64:66:4c:7a:62:70:03:93:ea:83:a1:7b:
88:30:62:00:fc:1c:54:56:c0:5f:bc:2a:fa:5b:d1:
cc:10:82:0f:fa:12:b6:0e:c4:0d:ee:e6:ed:f1:fb:
32:4a:d9:77:02:b1:c8:b4:1f:38:9e:eb:c2:84:a8:
2e:cd:34:ee:21:d3:59:1f:09:a6:aa:61:53:04:7f:
70:ae:67:c3:3c:f0:c6:a4:18:16:f2:3c:ab:9b:1b:
3e:74:69:53:88:aa:0f:f9:3c:40:c0:0b:cb:f6:93:
bb:12:04:d2:29:d3:4e:f1:7f:c6:76:ef:98:17:cf:
b1:68:a7:92:8d:3e:d4:44:ac:df:f8:db:88:19:c5:
b9:0c:da:a6:9d:a6:87:3b:54:08:84:af:b0:bc:d6:
b4:2d:fe:c1:30:96:60:d0:80:6e:0d:1a:21:d7:6c:
61:7b:83:d7:bb:7f:1d:6a:ab:3a:3a:30:76:de:3d:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:19:C2:96:FD:16:5D:5F:E8:EB:D2:2A:7F:58:B6:DC:5D:42:2B:43
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HxnClv0WXV_o69Iqf1i23F1CK0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.67.0/24
134.49.69.0/24
134.49.72.0/24
134.49.76.0/24
134.49.80.0/24
134.49.83.0/24
134.49.85.0/24
134.49.88.0/24
136.176.168.0/24
136.176.177.0/24
136.176.185.0/24
145.63.161.0/24
145.63.163.0/24
145.63.165.0/24
145.63.168.0/24
145.63.172.0/24
145.63.177.0/24
145.63.181.0/24
145.63.184.0/24
145.63.186.0/23
145.63.189.0/24
147.90.16.0/24
147.90.21.0-147.90.22.255
147.90.34.0/24
147.90.52.0/24
147.90.77.0/24
147.90.194.0/24
147.90.203.0-147.90.204.255
147.90.215.0/24
147.90.225.0/24
147.90.228.0/24
147.90.232.0/23
149.245.126.0/23
158.173.185.0/24
158.173.200.0/24
158.173.202.0/24
158.173.207.0/24
158.173.213.0/24
158.173.226.0/24
173.209.1.0/24
173.209.3.0/24
173.209.9.0/24
173.209.14.0/23
173.209.17.0/24
173.209.20.0/24
173.209.23.0/24
173.209.26.0/23
173.209.29.0/24
185.161.110.0/24
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7a:39:5c:29:4e:69:c0:f2:4f:8e:d0:a2:73:9d:07:b2:0c:
d8:15:59:2c:5d:26:fe:42:a3:19:ab:f9:91:1e:c6:ae:73:b0:
61:a6:3d:d6:be:5d:c4:7b:f2:f2:15:17:cf:90:11:f3:cd:ff:
25:69:85:41:cb:23:6f:5d:5b:6a:a3:45:5e:d4:b1:d7:d7:ba:
1d:35:8f:33:c7:ab:4a:bd:56:1b:82:4c:cb:26:e7:14:a2:b8:
f6:6b:c8:6f:f1:d5:0a:d9:b2:2d:7b:4c:27:37:09:59:6c:a9:
f7:bc:5e:62:77:f8:ca:9f:ca:6f:5b:12:77:15:47:8a:d7:fe:
6e:a5:72:74:16:c1:25:d0:b7:b0:49:f0:07:c9:5d:8a:c3:3f:
d8:55:34:47:36:79:02:89:56:63:74:a0:9c:10:5d:d3:42:50:
a7:a3:e5:b0:ca:4e:80:5f:fd:2e:d1:fc:87:85:77:f2:db:4b:
d9:3a:83:22:02:a9:ca:6f:1a:b8:a2:3f:ca:86:6e:ed:8f:ca:
04:d3:cf:82:4c:d9:e8:5c:b2:38:1e:46:62:37:83:1a:c3:16:
cc:15:bf:ee:d9:fb:4a:3e:d5:66:30:f8:da:c7:ba:be:36:c6:
7a:93:04:81:6a:d5:b3:b3:ba:de:28:02:57:62:60:72:fa:95:
a2:53:b0:49
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAaFTCeGuptS8BNTFMiPihWJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYxMDE5MDcyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE5YzI5NmZkMTY1ZDVmZThlYmQyMmE3ZjU4YjZkYzVkNDIyYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yYAHSe7R8hchDoqpxY8B3g5daEq
JEujmjhV06mOyKTiKJISBOQb+9+mlJOQCvGsGZsXGiKMlVH73wWOzwNNE6kiSO8+
5Z2XqujvYsJkZkx6YnADk+qDoXuIMGIA/BxUVsBfvCr6W9HMEIIP+hK2DsQN7ubt
8fsyStl3ArHItB84nuvChKguzTTuIdNZHwmmqmFTBH9wrmfDPPDGpBgW8jyrmxs+
dGlTiKoP+TxAwAvL9pO7EgTSKdNO8X/Gdu+YF8+xaKeSjT7URKzf+NuIGcW5DNqm
naaHO1QIhK+wvNa0Lf7BMJZg0IBuDRoh12xhe4PXu38daqs6OjB23j0ZeQIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFB8Zwpb9Fl1f6OvSKn9YttxdQitDMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvSHhuQ2x2MFdYVl9vNjlJcWYxaTIzRjFDSzBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAIYxQwMEAIYxRQMEAIYxSAMEAIYxTAMEAIYxUAMEAIYxUwMEAIYxVQMEAIYx
WAMEAIiwqAMEAIiwsQMEAIiwuQMEAJE/oQMEAJE/owMEAJE/pQMEAJE/qAMEAJE/
rAMEAJE/sQMEAJE/tQMEAJE/uAMEAZE/ugMEAJE/vQMEAJNaEDAMAwQAk1oVAwQA
k1oWAwQAk1oiAwQAk1o0AwQAk1pNAwQAk1rCMAwDBACTWssDBACTWswDBACTWtcD
BACTWuEDBACTWuQDBAGTWugDBAGV9X4DBACerbkDBACercgDBACercoDBACerc8D
BACerdUDBACereIDBACt0QEDBACt0QMDBACt0QkDBAGt0Q4DBACt0REDBACt0RQD
BACt0RcDBAGt0RoDBACt0R0DBAC5oW4DBADLvKgwDQYJKoZIhvcNAQELBQADggEB
AGZ6OVwpTmnA8k+O0KJznQeyDNgVWSxdJv5Coxmr+ZEexq5zsGGmPda+XcR78vIV
F8+QEfPN/yVphUHLI29dW2qjRV7UsdfXuh01jzPHq0q9VhuCTMsm5xSiuPZryG/x
1QrZsi17TCc3CVlsqfe8XmJ3+Mqfym9bEncVR4rX/m6lcnQWwSXQt7BJ8AfJXYrD
P9hVNEc2eQKJVmN0oJwQXdNCUKej5bDKToBf/S7R/IeFd/LbS9k6gyICqcpvGrii
P8qGbu2PygTTz4JM2ehcsjgeRmI3gxrDFswVv+7Z+0o+1WYw+NrHur42xnqTBIFq
1bOzut4oAldiYHL6laJTsEk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:50:14 2026 by rpki-client