Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/HstWiDATrlQgiKOc7WUSd0XSkVY.roa
File: HstWiDATrlQgiKOc7WUSd0XSkVY.roa (raw, json)
Hash identifier: MSETSFOqUl87jozQfpl+PamcjLepoDMMRdp2+zVLIUg=
Subject key identifier: 1E:CB:56:88:30:13:AE:54:20:88:A3:9C:ED:65:12:77:45:D2:91:56
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019DBA24306C6650851F28DE5625EC4C98D5
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/HstWiDATrlQgiKOc7WUSd0XSkVY.roa
Signing time: Thu 23 Apr 2026 11:40:26 +0000
ROA not before: Thu 23 Apr 2026 11:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215148
IP address blocks: 31.170.249.0/24 maxlen: 24
31.171.108.0/24 maxlen: 24
31.171.109.0/24 maxlen: 24
31.171.111.0/24 maxlen: 24
31.171.119.0/24 maxlen: 24
31.171.124.0/24 maxlen: 24
62.212.224.0/24 maxlen: 24
62.212.225.0/24 maxlen: 24
62.212.226.0/24 maxlen: 24
62.212.227.0/24 maxlen: 24
62.212.228.0/24 maxlen: 24
62.212.233.0/24 maxlen: 24
62.212.234.0/24 maxlen: 24
62.212.236.0/24 maxlen: 24
62.212.244.0/24 maxlen: 24
62.212.245.0/24 maxlen: 24
77.81.56.0/24 maxlen: 24
85.132.1.0/24 maxlen: 24
85.132.3.0/24 maxlen: 24
85.132.12.0/24 maxlen: 24
85.132.17.0/24 maxlen: 24
85.132.18.0/24 maxlen: 24
85.132.43.0/24 maxlen: 24
85.132.44.0/24 maxlen: 24
85.132.46.0/24 maxlen: 24
85.132.47.0/24 maxlen: 24
85.132.48.0/24 maxlen: 24
85.132.49.0/24 maxlen: 24
85.132.52.0/24 maxlen: 24
85.132.53.0/24 maxlen: 24
85.132.54.0/24 maxlen: 24
85.132.55.0/24 maxlen: 24
85.132.57.0/24 maxlen: 24
85.132.61.0/24 maxlen: 24
85.132.67.0/24 maxlen: 24
85.132.69.0/24 maxlen: 24
85.132.71.0/24 maxlen: 24
85.132.72.0/24 maxlen: 24
85.132.75.0/24 maxlen: 24
85.132.76.0/24 maxlen: 24
85.132.78.0/24 maxlen: 24
85.132.79.0/24 maxlen: 24
85.132.81.0/24 maxlen: 24
85.132.84.0/24 maxlen: 24
85.132.85.0/24 maxlen: 24
85.132.88.0/24 maxlen: 24
85.132.89.0/24 maxlen: 24
85.132.91.0/24 maxlen: 24
85.132.95.0/24 maxlen: 24
85.132.96.0/24 maxlen: 24
85.132.99.0/24 maxlen: 24
85.132.100.0/24 maxlen: 24
85.132.101.0/24 maxlen: 24
85.132.107.0/24 maxlen: 24
85.132.109.0/24 maxlen: 24
85.132.111.0/24 maxlen: 24
85.132.115.0/24 maxlen: 24
85.132.116.0/24 maxlen: 24
85.132.123.0/24 maxlen: 24
85.132.124.0/24 maxlen: 24
94.20.16.0/24 maxlen: 24
94.20.20.0/24 maxlen: 24
94.20.21.0/24 maxlen: 24
94.20.30.0/24 maxlen: 24
94.20.40.0/24 maxlen: 24
94.20.45.0/24 maxlen: 24
94.20.47.0/24 maxlen: 24
94.20.49.0/24 maxlen: 24
94.20.60.0/24 maxlen: 24
94.20.62.0/24 maxlen: 24
94.20.64.0/24 maxlen: 24
94.20.65.0/24 maxlen: 24
94.20.68.0/24 maxlen: 24
94.20.71.0/24 maxlen: 24
94.20.72.0/24 maxlen: 24
94.20.74.0/24 maxlen: 24
94.20.77.0/24 maxlen: 24
94.20.81.0/24 maxlen: 24
94.20.84.0/24 maxlen: 24
94.20.85.0/24 maxlen: 24
94.20.94.0/24 maxlen: 24
94.20.95.0/24 maxlen: 24
94.20.105.0/24 maxlen: 24
94.20.137.0/24 maxlen: 24
94.20.138.0/24 maxlen: 24
94.20.142.0/24 maxlen: 24
94.20.147.0/24 maxlen: 24
94.20.178.0/24 maxlen: 24
94.20.179.0/24 maxlen: 24
94.20.216.0/24 maxlen: 24
94.20.217.0/24 maxlen: 24
94.20.225.0/24 maxlen: 24
94.20.229.0/24 maxlen: 24
94.20.230.0/24 maxlen: 24
94.20.246.0/24 maxlen: 24
94.20.248.0/24 maxlen: 24
2a01:6480:40::/48 maxlen: 48
2a01:6480:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:24:30:6c:66:50:85:1f:28:de:56:25:ec:4c:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Apr 23 11:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ecb56883013ae542088a39ced65127745d29156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:50:b3:ab:52:d6:4d:1e:af:69:3a:19:fb:
a3:77:8f:23:55:0c:6c:8f:10:48:2f:cd:22:73:97:
db:07:e7:85:6c:90:a8:dd:81:29:01:14:92:13:46:
0c:f6:65:1b:d3:1d:cf:6a:d1:b5:e7:66:3b:6f:81:
ae:e2:7d:8c:ae:c5:5e:97:79:09:6e:d2:df:8b:c5:
f1:87:f1:c3:87:61:39:fd:92:03:1d:e3:35:ee:3c:
db:9a:ba:ad:73:95:7f:fc:a0:a0:56:4f:65:c9:d4:
58:fa:88:c0:56:de:55:99:40:2b:1e:19:f5:e3:f2:
20:e8:0b:50:a7:96:dc:1f:e2:12:d7:be:3f:e4:39:
1c:2a:86:9d:a6:ac:97:97:46:0b:6b:0c:4b:5f:1d:
6b:70:17:88:4f:2c:6c:2f:ae:30:cc:45:ca:5a:24:
8c:28:53:83:b7:ff:64:95:5d:77:30:5d:e8:ff:6e:
1c:23:6c:19:06:ee:f4:88:f9:3e:53:c1:e4:32:6b:
05:a7:f1:08:24:3c:14:35:91:59:e1:e2:6a:7c:34:
8f:2f:03:e7:f3:7e:8c:11:28:3e:d8:ce:9f:be:7f:
df:e5:8e:8a:4d:06:f2:ea:4e:83:74:81:f4:e9:4d:
07:32:cc:d3:33:ad:7e:72:fd:1b:18:b7:9e:2a:cd:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:56:88:30:13:AE:54:20:88:A3:9C:ED:65:12:77:45:D2:91:56
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/HstWiDATrlQgiKOc7WUSd0XSkVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.249.0/24
31.171.108.0/23
31.171.111.0/24
31.171.119.0/24
31.171.124.0/24
62.212.224.0-62.212.228.255
62.212.233.0-62.212.234.255
62.212.236.0/24
62.212.244.0/23
77.81.56.0/24
85.132.1.0/24
85.132.3.0/24
85.132.12.0/24
85.132.17.0-85.132.18.255
85.132.43.0-85.132.44.255
85.132.46.0-85.132.49.255
85.132.52.0/22
85.132.57.0/24
85.132.61.0/24
85.132.67.0/24
85.132.69.0/24
85.132.71.0-85.132.72.255
85.132.75.0-85.132.76.255
85.132.78.0/23
85.132.81.0/24
85.132.84.0/23
85.132.88.0/23
85.132.91.0/24
85.132.95.0-85.132.96.255
85.132.99.0-85.132.101.255
85.132.107.0/24
85.132.109.0/24
85.132.111.0/24
85.132.115.0-85.132.116.255
85.132.123.0-85.132.124.255
94.20.16.0/24
94.20.20.0/23
94.20.30.0/24
94.20.40.0/24
94.20.45.0/24
94.20.47.0/24
94.20.49.0/24
94.20.60.0/24
94.20.62.0/24
94.20.64.0/23
94.20.68.0/24
94.20.71.0-94.20.72.255
94.20.74.0/24
94.20.77.0/24
94.20.81.0/24
94.20.84.0/23
94.20.94.0/23
94.20.105.0/24
94.20.137.0-94.20.138.255
94.20.142.0/24
94.20.147.0/24
94.20.178.0/23
94.20.216.0/23
94.20.225.0/24
94.20.229.0-94.20.230.255
94.20.246.0/24
94.20.248.0/24
IPv6:
2a01:6480:40::/47
Signature Algorithm: sha256WithRSAEncryption
0e:53:e2:97:99:da:9f:31:5b:4b:d7:d6:8c:9e:cf:73:aa:df:
e3:d0:d4:d8:2d:e7:fc:85:02:4a:42:60:96:1f:33:1e:a8:ac:
7e:d6:8c:27:6b:c7:60:28:66:7f:60:da:f4:61:ef:d5:41:ba:
bf:5f:a3:a4:43:1b:3d:a1:09:a1:b9:c8:47:32:1f:e5:04:c4:
20:c7:be:bc:d4:f4:35:50:4f:ec:6c:6f:b7:9b:d3:34:fc:29:
80:39:90:fb:51:bc:73:98:4b:e7:ec:4b:d9:b8:5b:e0:a1:3e:
49:9f:b8:d7:46:38:69:cd:91:ef:3e:8d:cf:3a:65:db:de:ee:
c0:22:f9:29:e1:e0:53:38:df:d6:54:e6:64:56:bd:ef:e2:4a:
8f:d7:2f:c4:8b:92:37:33:e5:d7:2a:31:92:d8:fd:1c:66:51:
9d:87:72:c3:04:45:8e:ff:f0:ef:59:2a:0d:e5:f7:e9:03:e8:
94:08:9a:43:ea:b4:f6:8d:cc:a8:2d:c5:9d:4d:83:a8:bc:6f:
67:3c:13:65:10:97:84:2e:5e:17:84:34:4d:63:6c:2a:da:e3:
28:24:86:56:18:17:0b:88:b9:31:94:59:a5:4d:ee:3d:85:f7:
98:9a:00:03:8d:3e:91:d4:21:9c:da:f8:1d:eb:94:da:61:0e:
42:b3:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:09:26 2026 by rpki-client