Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/HXko48DsG-Bya1dIti8-LvDq3H8.roa
File: HXko48DsG-Bya1dIti8-LvDq3H8.roa (raw, json)
Hash identifier: MzOU+mjm3TwsEbn7ZG7Zw97plhx1Jgrxj4lUsWw8XZw=
Subject key identifier: 1D:79:28:E3:C0:EC:1B:E0:72:6B:57:48:B6:2F:3E:2E:F0:EA:DC:7F
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019F441DAF000E85F426EB78F9E420F9E97B
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/HXko48DsG-Bya1dIti8-LvDq3H8.roa
Signing time: Wed 08 Jul 2026 23:43:43 +0000
ROA not before: Wed 08 Jul 2026 23:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
9.151.128.0/18 maxlen: 18
9.151.236.0/22 maxlen: 22
9.232.80.0/20 maxlen: 20
9.249.0.0/21 maxlen: 21
9.249.8.0/21 maxlen: 21
9.249.24.0/22 maxlen: 22
9.249.72.0/22 maxlen: 22
135.132.0.0/19 maxlen: 24
135.132.97.0/24 maxlen: 24
135.132.99.0/24 maxlen: 24
135.132.100.0/24 maxlen: 24
135.132.102.0/24 maxlen: 24
135.132.104.0/23 maxlen: 23
135.132.106.0/24 maxlen: 24
135.132.108.0/23 maxlen: 23
135.132.110.0/24 maxlen: 24
135.132.112.0/24 maxlen: 24
135.132.114.0/23 maxlen: 23
135.132.117.0/24 maxlen: 24
135.132.118.0/24 maxlen: 24
135.132.120.0/23 maxlen: 23
135.132.123.0/24 maxlen: 24
135.132.124.0/24 maxlen: 24
135.132.126.0/24 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
151.145.160.0/19 maxlen: 19
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.152.0/21 maxlen: 21
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:44:1d:af:00:0e:85:f4:26:eb:78:f9:e4:20:f9:e9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 8 23:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d7928e3c0ec1be0726b5748b62f3e2ef0eadc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:25:83:37:4f:6b:68:d0:39:75:4c:6e:ee:
c5:3f:50:9c:fc:05:8c:31:f8:cf:4e:49:75:5d:a9:
b4:f4:8a:ea:d3:11:78:94:2a:7b:60:52:d8:76:54:
f0:64:e8:25:36:74:2e:a8:df:fe:e1:5e:b3:0f:fb:
b0:20:16:75:45:3f:65:3a:08:5b:a8:c1:79:9f:63:
21:44:de:22:3c:2f:7b:2f:cf:89:76:62:74:f9:a7:
e0:a1:ac:ae:b2:cd:ea:f1:59:71:65:e0:60:2e:93:
3b:3c:54:cc:6b:45:27:64:d1:cb:9b:75:12:ba:a9:
62:44:0a:18:ae:4c:bb:2c:bc:7b:f2:7a:5f:50:a6:
33:71:c5:4a:79:82:4f:46:0f:c7:76:d7:f1:40:5b:
a2:3e:76:cc:de:a4:d2:0f:82:4b:8a:c5:b6:53:6d:
5f:7f:36:c5:27:d6:7b:54:56:8c:ad:57:f3:4c:e9:
01:b5:93:ff:47:ad:68:27:ff:7f:59:ee:31:0d:49:
a5:be:03:4d:5d:86:5d:98:fd:ec:aa:e7:d6:d5:57:
c4:5b:34:c0:42:23:e5:bc:78:95:2a:d7:13:5d:ef:
0c:d8:28:ea:3a:ae:57:a2:f2:54:c9:e4:93:83:0a:
b0:aa:3d:b3:c2:c0:60:8a:7b:b4:b7:3d:27:1f:31:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:28:E3:C0:EC:1B:E0:72:6B:57:48:B6:2F:3E:2E:F0:EA:DC:7F
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/HXko48DsG-Bya1dIti8-LvDq3H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
9.151.128.0/18
9.151.236.0/22
9.232.80.0/20
9.249.0.0/20
9.249.24.0/22
9.249.72.0/22
135.132.0.0/19
135.132.97.0/24
135.132.99.0-135.132.100.255
135.132.102.0/24
135.132.104.0-135.132.106.255
135.132.108.0-135.132.110.255
135.132.112.0/24
135.132.114.0/23
135.132.117.0-135.132.118.255
135.132.120.0/23
135.132.123.0-135.132.124.255
135.132.126.0/24
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
151.145.160.0/19
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
170.100.152.0/21
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
13:91:0d:6d:ec:b5:6f:ea:8a:72:69:78:f0:e7:0b:a7:ba:b8:
a0:a1:7a:4e:d3:51:c8:3b:57:aa:5c:69:72:9e:cd:7e:5c:8f:
7d:35:94:45:f4:56:b9:17:a8:43:1f:e1:dc:c8:1a:4a:08:4b:
fe:7b:1b:3b:43:e1:37:6c:14:e2:1e:6b:0e:0c:f6:9c:09:a5:
63:ee:bd:4e:90:69:a4:01:8f:d6:e8:3f:ca:61:c2:c0:24:c7:
8e:83:80:4d:9c:34:02:8a:f3:41:71:12:7b:e9:8a:ff:b9:24:
a8:4d:3b:da:01:47:70:c7:27:e4:ec:a3:6e:3e:bb:61:65:a5:
16:b3:ca:36:4d:44:d9:0b:49:a7:4d:e6:94:fe:de:f5:34:45:
3c:3e:07:a2:68:3b:b4:9e:34:f5:96:64:8a:84:3f:b0:db:00:
ca:ef:05:c2:9c:d3:d0:7c:ed:5e:c7:6e:a2:0a:49:18:2b:c6:
1a:7d:c7:da:bc:66:44:2c:99:86:89:52:f9:e8:84:6d:25:57:
ce:b4:d1:76:b6:9f:6f:a3:2d:50:44:90:59:dd:7d:e7:fe:44:
fd:c9:0d:70:8c:e5:3e:52:47:e1:6c:89:7c:32:bd:37:d2:d5:
d7:73:5b:87:bb:be:e4:a6:97:66:ba:23:fd:93:9e:02:3b:36:
e6:62:ff:9e
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISAZ9EHa8ADoX0Jut4+eQg+el7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwNzA4MjM0MzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDc5MjhlM2MwZWMxYmUwNzI2YjU3NDhiNjJmM2UyZWYwZWFkYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDUlgzdPa2jQOXVMbu7FP1Cc/AWM
MfjPTkl1Xam09Irq0xF4lCp7YFLYdlTwZOglNnQuqN/+4V6zD/uwIBZ1RT9lOghb
qMF5n2MhRN4iPC97L8+JdmJ0+afgoayuss3q8VlxZeBgLpM7PFTMa0UnZNHLm3US
uqliRAoYrky7LLx78npfUKYzccVKeYJPRg/HdtfxQFuiPnbM3qTSD4JLisW2U21f
fzbFJ9Z7VFaMrVfzTOkBtZP/R61oJ/9/We4xDUmlvgNNXYZdmP3squfW1VfEWzTA
QiPlvHiVKtcTXe8M2CjqOq5XovJUyeSTgwqwqj2zwsBginu0tz0nHzHnKwIDAQAB
o4IDIDCCAxwwHQYDVR0OBBYEFB15KOPA7BvgcmtXSLYvPi7w6tx/MB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvSFhrbzQ4RHNHLUJ5YTFkSXRpOC1MdkRxM0g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNAYIKwYBBQUHAQcBAf8EggEjMIIBHzCCARsEAgABMIIB
EwMDAAmOAwQGCZeAAwQCCZfsAwQECehQAwQECfkAAwQCCfkYAwQCCflIAwQFh4QA
AwQAh4RhMAwDBACHhGMDBACHhGQDBACHhGYwDAMEA4eEaAMEAIeEajAMAwQCh4Rs
AwQAh4RuAwQAh4RwAwQBh4RyMAwDBACHhHUDBACHhHYDBAGHhHgwDAMEAIeEewME
AIeEfAMEAIeEfgMEBIeEoAMEBIriIAMEA4riUDAMAwQDiuJ4AwQGiuKAAwQDiuLI
AwQFl5GgAwQAnngxAwQAnngzAwQAnng1AwQAnng3AwQAnng5AwQAnng7AwQAnng9
AwQAnng/AwQDqmSYAwQDwC64AwQCwC7IAwQDwDVAAwQDwDWIMA0GCSqGSIb3DQEB
CwUAA4IBAQATkQ1t7LVv6opyaXjw5wunurigoXpO01HIO1eqXGlyns1+XI99NZRF
9Fa5F6hDH+HcyBpKCEv+exs7Q+E3bBTiHmsODPacCaVj7r1OkGmkAY/W6D/KYcLA
JMeOg4BNnDQCivNBcRJ76Yr/uSSoTTvaAUdwxyfk7KNuPrthZaUWs8o2TUTZC0mn
TeaU/t71NEU8PgeiaDu0njT1lmSKhD+w2wDK7wXCnNPQfO1ex26iCkkYK8Yafcfa
vGZELJmGiVL56IRtJVfOtNF2tp9voy1QRJBZ3X3n/kT9yQ1wjOU+UkfhbIl8Mr03
0tXXc1uHu77kppdmuiP9k54COzbmYv+e
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client