Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HpXGEgtcefxguFPjNE94PjP7-4U.roa
File: HpXGEgtcefxguFPjNE94PjP7-4U.roa (raw, json)
Hash identifier: gMXaJFV/lOXRebHf+LQMAcgLESnScviRXZuD3Lpara8=
Subject key identifier: 1E:95:C6:12:0B:5C:79:FC:60:B8:53:E3:34:4F:78:3E:33:FB:FB:85
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0EC5FD722E71758BCE5ABDA5A9D05339B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HpXGEgtcefxguFPjNE94PjP7-4U.roa
Signing time: Tue 29 Sep 2026 08:54:58 +0000
ROA not before: Tue 29 Sep 2026 08:54:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 79.121.188.0/23 maxlen: 24
79.121.194.0/23 maxlen: 24
79.121.208.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
92.244.162.0/23 maxlen: 24
92.244.164.0/23 maxlen: 24
92.244.166.0/23 maxlen: 24
92.244.168.0/23 maxlen: 24
92.244.170.0/23 maxlen: 24
92.244.172.0/23 maxlen: 24
93.152.0.0/23 maxlen: 24
93.152.10.0/23 maxlen: 24
93.152.12.0/22 maxlen: 24
93.152.18.0/24 maxlen: 24
93.152.21.0/24 maxlen: 24
93.152.48.0/22 maxlen: 24
93.152.56.0/23 maxlen: 23
93.152.64.0/22 maxlen: 24
93.152.92.0/24 maxlen: 24
93.152.116.0/22 maxlen: 24
94.185.130.0/23 maxlen: 24
94.185.132.0/23 maxlen: 24
94.185.136.0/23 maxlen: 24
94.185.142.0/23 maxlen: 24
94.185.148.0/23 maxlen: 24
94.185.152.0/22 maxlen: 24
94.185.152.0/23 maxlen: 24
94.185.154.0/23 maxlen: 24
94.185.168.0/22 maxlen: 24
94.185.168.0/23 maxlen: 24
94.185.170.0/23 maxlen: 24
94.185.172.0/23 maxlen: 24
94.185.180.0/23 maxlen: 24
94.185.186.0/23 maxlen: 24
94.185.192.0/22 maxlen: 24
94.185.192.0/23 maxlen: 24
94.185.194.0/23 maxlen: 24
94.185.196.0/23 maxlen: 24
94.185.200.0/22 maxlen: 24
94.185.200.0/23 maxlen: 24
94.185.202.0/23 maxlen: 24
94.185.204.0/23 maxlen: 24
94.185.214.0/23 maxlen: 24
94.185.216.0/23 maxlen: 24
94.185.220.0/22 maxlen: 24
94.185.220.0/23 maxlen: 24
94.185.222.0/23 maxlen: 24
94.185.230.0/23 maxlen: 24
94.185.232.0/23 maxlen: 24
95.177.3.0/24 maxlen: 24
95.177.5.0/24 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.13.0/24 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
109.174.128.0/22 maxlen: 24
109.174.128.0/23 maxlen: 24
109.174.130.0/23 maxlen: 24
109.174.134.0/23 maxlen: 24
109.174.136.0/23 maxlen: 24
109.174.140.0/22 maxlen: 24
109.174.140.0/23 maxlen: 24
109.174.142.0/23 maxlen: 24
109.174.152.0/23 maxlen: 24
109.174.160.0/22 maxlen: 24
109.174.160.0/23 maxlen: 24
109.174.162.0/23 maxlen: 24
109.174.168.0/23 maxlen: 24
109.174.172.0/23 maxlen: 24
109.174.250.0/23 maxlen: 24
109.174.252.0/23 maxlen: 24
109.174.254.0/23 maxlen: 24
109.204.0.0/22 maxlen: 24
109.204.16.0/22 maxlen: 24
109.204.21.0/24 maxlen: 24
109.204.24.0/22 maxlen: 24
109.204.29.0/24 maxlen: 24
109.204.41.0/24 maxlen: 24
109.204.45.0/24 maxlen: 24
109.204.51.0/24 maxlen: 24
109.204.54.0/24 maxlen: 24
109.204.58.0/24 maxlen: 24
109.204.96.0/22 maxlen: 24
109.204.112.0/24 maxlen: 24
109.204.117.0/24 maxlen: 24
109.204.118.0/24 maxlen: 24
109.204.121.0/24 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 24
195.40.28.0/23 maxlen: 24
195.40.96.0/23 maxlen: 24
195.40.108.0/23 maxlen: 24
195.40.162.0/23 maxlen: 24
195.172.96.0/23 maxlen: 24
195.172.100.0/23 maxlen: 24
195.172.104.0/23 maxlen: 24
195.172.192.0/23 maxlen: 24
195.172.198.0/23 maxlen: 24
195.172.202.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 24
212.135.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:5f:d7:22:e7:17:58:bc:e5:ab:da:5a:9d:05:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 29 08:54:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e95c6120b5c79fc60b853e3344f783e33fbfb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:56:18:82:2c:c5:09:90:ed:55:be:23:47:
5d:5c:c4:8c:48:e9:09:fe:14:67:a9:50:cd:9a:85:
ac:f1:33:99:ec:cc:a5:ee:6e:a1:a3:3a:6b:4a:c8:
37:21:0a:cc:e3:a9:d3:ee:54:32:55:ab:f5:6c:5d:
21:4b:44:fb:c2:df:fd:93:df:c3:9c:44:7b:ab:60:
13:b0:8d:72:e9:97:ad:cd:05:e7:32:81:bc:4e:2a:
35:76:e3:22:50:c2:4e:15:bf:9b:4e:94:c3:f0:79:
39:b0:91:a9:7c:e9:4c:30:b4:f6:fe:30:e3:dc:1c:
65:31:66:c1:7d:ae:4d:19:6f:3c:50:44:5c:ad:49:
a5:a7:da:a7:ac:38:e4:32:c6:c3:28:5b:74:a0:28:
04:97:bd:0b:2a:bd:3f:9c:02:7b:47:be:32:b0:18:
41:2c:e0:53:81:92:23:9c:e3:6d:8a:c5:1b:61:0f:
90:e7:71:2d:64:a4:85:a1:97:ec:e6:1b:0b:0f:7c:
b2:23:ae:c0:59:58:19:97:31:5c:0c:b4:fb:66:c0:
76:d3:b5:e1:6b:5e:7d:5f:64:85:c6:66:d3:14:9d:
2d:4a:c3:40:9f:a8:22:03:57:d6:80:3c:8d:aa:6e:
9f:95:e2:23:c3:87:7c:70:ba:07:a5:e5:ad:a9:43:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:C6:12:0B:5C:79:FC:60:B8:53:E3:34:4F:78:3E:33:FB:FB:85
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HpXGEgtcefxguFPjNE94PjP7-4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.188.0/23
79.121.194.0/23
79.121.208.0/23
79.121.222.0/23
79.121.226.0/23
79.121.238.0/23
92.244.162.0-92.244.173.255
93.152.0.0/23
93.152.10.0-93.152.15.255
93.152.18.0/24
93.152.21.0/24
93.152.48.0/22
93.152.56.0/23
93.152.64.0/22
93.152.92.0/24
93.152.116.0/22
94.185.130.0-94.185.133.255
94.185.136.0/23
94.185.142.0/23
94.185.148.0/23
94.185.152.0/22
94.185.168.0-94.185.173.255
94.185.180.0/23
94.185.186.0/23
94.185.192.0-94.185.197.255
94.185.200.0-94.185.205.255
94.185.214.0-94.185.217.255
94.185.220.0/22
94.185.230.0-94.185.233.255
95.177.3.0/24
95.177.5.0/24
95.177.8.0/23
95.177.13.0/24
95.177.54.0/23
95.177.72.0/23
109.174.128.0/22
109.174.134.0-109.174.137.255
109.174.140.0/22
109.174.152.0/23
109.174.160.0/22
109.174.168.0/23
109.174.172.0/23
109.174.250.0-109.174.255.255
109.204.0.0/22
109.204.16.0/22
109.204.21.0/24
109.204.24.0/22
109.204.29.0/24
109.204.41.0/24
109.204.45.0/24
109.204.51.0/24
109.204.54.0/24
109.204.58.0/24
109.204.96.0/22
109.204.112.0/24
109.204.117.0-109.204.118.255
109.204.121.0/24
109.204.124.0/23
195.40.18.0/23
195.40.28.0/23
195.40.96.0/23
195.40.108.0/23
195.40.162.0/23
195.172.96.0/23
195.172.100.0/23
195.172.104.0/23
195.172.192.0/23
195.172.198.0/23
195.172.202.0/23
212.134.11.0/24
212.135.0.0/24
212.135.2.0/23
212.135.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:95:de:c0:da:cf:eb:32:8d:d6:68:5a:e3:19:2b:0d:87:4d:
2e:30:0b:76:f1:96:b2:21:79:4a:92:5d:6b:f8:73:b8:9d:62:
2f:5f:95:f4:c5:b4:b6:a2:01:17:cb:3f:81:4e:e1:0d:76:d7:
95:db:54:1a:ea:50:47:a3:2a:75:aa:4e:73:c5:70:f4:cc:f7:
c5:54:92:83:88:03:bb:98:85:73:78:ca:53:99:d2:37:d3:a1:
df:df:fe:f9:d7:1d:e5:69:d0:b6:b5:81:70:42:ab:32:d7:27:
4a:c3:29:2f:25:a5:ad:9c:0e:69:de:fe:90:09:79:62:45:05:
9f:fb:74:80:d0:68:74:01:97:59:6b:80:27:e5:7d:7a:25:a8:
06:3a:b1:db:7a:09:38:39:bf:bd:98:6d:d6:d3:e2:39:7d:79:
a1:b1:da:c7:d5:0c:a8:ee:f2:b3:5e:03:27:86:d4:de:cb:d5:
2b:d8:cc:8f:5d:c8:44:4d:09:ba:89:2d:48:6a:8e:d4:e1:7c:
c1:3d:f9:9a:b7:b3:dc:bf:ad:a1:44:a8:6d:98:6a:ee:d9:21:
10:3f:4a:95:a4:21:34:3d:5e:53:4b:25:83:86:b6:60:d0:98:
bf:6e:0c:6f:2b:d4:93:45:3a:5d:75:ff:6e:b3:14:b4:07:79:
1f:ad:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:09 2026 by rpki-client