Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/hnvq3pRthcjO1-TGGNz1XSTuQG0.roa
File: hnvq3pRthcjO1-TGGNz1XSTuQG0.roa (raw, json)
Hash identifier: 7ZUbGgpQhcghNbJg4E8b9X/DmpobGiMLJ+Qkr5N9OMw=
Subject key identifier: 86:7B:EA:DE:94:6D:85:C8:CE:D7:E4:C6:18:DC:F5:5D:24:EE:40:6D
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01A15996C08D7E8FA3E215491206EAB40121
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/hnvq3pRthcjO1-TGGNz1XSTuQG0.roa
Signing time: Tue 20 Oct 2026 13:53:34 +0000
ROA not before: Tue 20 Oct 2026 13:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.248.0/24 maxlen: 24
45.66.249.0/24 maxlen: 24
45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
45.150.108.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
62.106.66.0/24 maxlen: 24
62.204.35.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
83.97.79.0/24 maxlen: 24
91.211.27.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.236.230.0/24 maxlen: 24
91.242.228.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
130.49.155.0/24 maxlen: 24
146.19.49.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
155.212.242.0/24 maxlen: 24
155.212.243.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.43.104.0/24 maxlen: 24
193.104.75.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.59.183.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.20.17.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
2a10:1fc0:13::/48 maxlen: 48
2a10:1fc0:14::/48 maxlen: 48
2a10:1fc0:15::/48 maxlen: 48
2a10:1fc0:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:96:c0:8d:7e:8f:a3:e2:15:49:12:06:ea:b4:01:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Oct 20 13:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=867beade946d85c8ced7e4c618dcf55d24ee406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:e5:4c:9a:9b:ac:b0:9f:9d:fd:cd:65:4a:
90:79:8c:a9:5e:83:48:b6:01:59:b8:f0:f7:6a:2f:
72:77:8d:06:49:34:f0:fa:8b:cd:02:2a:1a:2f:2b:
8b:4d:db:7f:1a:65:ed:df:af:85:f7:a5:b1:ae:4f:
de:06:fa:d4:69:62:ed:e7:18:40:df:71:6c:8b:7f:
a2:52:3e:cb:6a:8b:74:a5:a4:0c:b4:ee:e1:b5:56:
99:3d:96:98:aa:58:ee:b3:b5:ae:44:c4:04:7a:7f:
53:0b:ff:23:71:12:d7:6d:be:6a:d1:6b:f1:ea:6b:
60:ba:9f:be:5d:61:96:b3:a0:14:2d:2f:c3:2b:e5:
d4:8f:43:ed:44:31:d0:70:a9:00:cc:15:a3:d4:64:
c8:8d:31:62:f2:ce:05:87:33:91:c7:47:75:f0:1f:
8a:f0:87:94:86:f2:a9:47:26:77:f7:26:c6:74:f4:
95:48:ce:37:c5:a2:6b:9a:c8:33:80:c9:c4:02:2c:
84:29:6e:56:07:47:c6:e6:7b:c4:5c:e7:7f:52:16:
31:5e:16:c4:1f:e5:e9:6d:e5:4a:5c:fb:87:7e:4c:
68:90:50:66:52:35:62:f7:f2:ec:2a:54:7f:8a:0c:
0b:ba:7f:20:fe:a5:09:78:ee:d1:ea:87:1b:6e:e6:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:EA:DE:94:6D:85:C8:CE:D7:E4:C6:18:DC:F5:5D:24:EE:40:6D
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/hnvq3pRthcjO1-TGGNz1XSTuQG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
45.150.108.0/23
62.106.66.0/24
62.204.35.0/24
77.72.85.0/24
83.97.79.0/24
91.211.27.0/24
91.235.234.0/24
91.236.230.0/24
91.242.228.0/24
91.242.241.0/24
130.49.155.0/24
146.19.49.0/24
146.19.143.0/24
146.19.185.0/24
146.19.254.0/24
155.212.242.0/23
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.43.104.0/24
193.104.75.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.59.183.0/24
194.61.120.0/23
195.20.17.0/24
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:16:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:80:0b:38:ea:a7:53:4b:18:22:8f:58:1d:ec:55:dc:70:16:
ef:ce:9a:3f:a8:ab:ec:44:7d:01:af:d5:fc:b9:a4:7a:4f:fc:
e6:1f:98:87:45:f1:ee:7e:e5:27:a8:49:ba:f7:11:7c:d6:8b:
51:10:03:d0:94:0c:a4:4f:56:c5:e0:cb:6d:ef:cc:3e:a7:ae:
4e:26:f4:0d:d8:43:52:0d:4a:10:a8:86:e9:f6:6a:35:b4:40:
ea:a7:91:4a:b6:ed:b2:f4:5d:c7:0c:21:51:91:50:a5:80:c9:
5d:0c:d2:6b:45:83:9f:f1:18:96:09:2f:9e:aa:f5:fb:05:7b:
7f:04:32:ed:81:c7:e7:5b:8c:15:12:54:37:fc:e2:ce:e2:ed:
9f:47:62:e8:2e:9e:0b:db:8d:63:ad:80:7b:14:41:19:39:34:
09:55:f7:0f:83:32:b4:13:19:f6:55:18:14:a8:b8:2d:fe:f5:
bc:6e:2c:1c:4d:7f:ff:e4:ea:fe:f9:5b:07:44:3d:2a:11:01:
8c:f0:6d:0b:79:ff:ab:a3:dc:70:13:dc:81:b7:67:2a:86:66:
d5:d1:bc:d8:0c:83:66:46:0e:68:f6:0c:88:ac:1a:c4:f1:0e:
24:47:29:77:35:c4:06:34:4a:4f:97:0a:14:00:00:c4:41:a6:
59:b4:16:86
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgISAaFZlsCNfo+j4hVJEgbqtAEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjYxMDIwMTM1MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjdiZWFkZTk0NmQ4NWM4Y2VkN2U0YzYxOGRjZjU1ZDI0ZWU0MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNzlTJqbrLCfnf3NZUqQeYypXoNI
tgFZuPD3ai9yd40GSTTw+ovNAioaLyuLTdt/GmXt36+F96Wxrk/eBvrUaWLt5xhA
33Fsi3+iUj7Laot0paQMtO7htVaZPZaYqljus7WuRMQEen9TC/8jcRLXbb5q0Wvx
6mtgup++XWGWs6AULS/DK+XUj0PtRDHQcKkAzBWj1GTIjTFi8s4FhzORx0d18B+K
8IeUhvKpRyZ39ybGdPSVSM43xaJrmsgzgMnEAiyEKW5WB0fG5nvEXOd/UhYxXhbE
H+XpbeVKXPuHfkxokFBmUjVi9/LsKlR/igwLun8g/qUJeO7R6ocbbuacDQIDAQAB
o4IDHDCCAxgwHQYDVR0OBBYEFIZ76t6UbYXIztfkxhjc9V0k7kBtMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvaG52cTNwUnRoY2pPMS1UR0dOejFYU1R1UUcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMAYIKwYBBQUHAQcBAf8EggEfMIIBGzCB3wQCAAEwgdgD
BAEtQvgDBAEtVuQDBAAtVucDBAAtgccDBAEtj6YDBAEtlmwDBAA+akIDBAA+zCMD
BABNSFUDBABTYU8DBABb0xsDBABb6+oDBABb7OYDBABb8uQDBABb8vEDBACCMZsD
BACSEzEDBACSE48DBACSE7kDBACSE/4DBAGb1PIDBAGwfCADBAC5JxIDBAC5ezUD
BADBK2gDBADBaEsDBADBbXgDBAHByBADBADCGo0DBADCO7cDBAHCPXgDBADDFBED
BADDNqADBADULiYDBADVbZMDBADVbcAwNwQCAAIwMTASAwcAKhAfwAABAwcAKhAf
wAAGAwcBKhAfwAAIMBIDBwAqEB/AAAsDBwAqEB/AABYwDQYJKoZIhvcNAQELBQAD
ggEBAIuACzjqp1NLGCKPWB3sVdxwFu/Omj+oq+xEfQGv1fy5pHpP/OYfmIdF8e5+
5SeoSbr3EXzWi1EQA9CUDKRPVsXgy23vzD6nrk4m9A3YQ1INShCohun2ajW0QOqn
kUq27bL0XccMIVGRUKWAyV0M0mtFg5/xGJYJL56q9fsFe38EMu2Bx+dbjBUSVDf8
4s7i7Z9HYugungvbjWOtgHsUQRk5NAlV9w+DMrQTGfZVGBSouC3+9bxuLBxNf//k
6v75WwdEPSoRAYzwbQt5/6uj3HAT3IG3ZyqGZtXRvNgMg2ZGDmj2DIisGsTxDiRH
KXc1xAY0Sk+XChQAAMRBplm0FoY=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:54:27 2026 by rpki-client