Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HGSRUC_uzcRNcaOVqUyM1Bl8D10.roa
File: HGSRUC_uzcRNcaOVqUyM1Bl8D10.roa (raw, json)
Hash identifier: wiAbynJs1hofHG//4TekKCicnMtFD/l3hpowwmxX3PI=
Subject key identifier: 1C:64:91:50:2F:EE:CD:C4:4D:71:A3:95:A9:4C:8C:D4:19:7C:0F:5D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01A163320F9FACF96A803F9EF50A237667F5
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HGSRUC_uzcRNcaOVqUyM1Bl8D10.roa
Signing time: Thu 22 Oct 2026 10:39:47 +0000
ROA not before: Thu 22 Oct 2026 10:39:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.241.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
138.16.128.0/24 maxlen: 24
138.16.129.0/24 maxlen: 24
138.16.130.0/24 maxlen: 24
185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:32:0f:9f:ac:f9:6a:80:3f:9e:f5:0a:23:76:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 22 10:39:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c6491502feecdc44d71a395a94c8cd4197c0f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:f0:90:43:66:03:35:41:c6:5d:3a:df:e4:
01:cc:b8:5a:83:68:73:77:e3:6e:9f:63:87:d9:57:
5b:08:ef:92:ad:fc:ac:a5:ce:e1:72:4a:a2:cc:43:
95:4c:ef:fc:6d:55:ff:81:61:eb:5e:f3:14:70:c2:
ca:cc:2c:7a:ba:85:5e:f0:e4:c8:26:a0:67:c6:61:
50:8f:c0:42:7a:f9:41:3c:c1:0e:12:2e:b0:e8:1c:
14:90:fe:e0:13:25:bf:f1:d5:fe:f5:c9:e2:0d:18:
be:44:81:f0:5d:6d:cf:bf:fe:bb:28:1f:e1:c7:4f:
22:1a:b2:96:71:fa:04:f7:1f:78:ef:8a:50:90:aa:
55:97:d1:31:61:99:91:c3:01:a3:1c:c8:09:3d:30:
bd:8d:4c:07:2d:eb:a1:27:07:78:75:a4:19:bc:cd:
5b:89:bf:d4:c1:0b:0a:23:f6:c3:56:cc:3d:2d:46:
39:e4:13:8c:fe:2e:e5:31:68:5b:77:23:be:11:74:
f4:48:46:5e:97:51:81:ca:74:ca:a4:74:00:af:29:
73:c4:0b:e7:69:1c:a9:85:be:7b:e4:e7:5f:bc:17:
1e:ad:3a:1c:83:4a:83:f7:55:d0:0b:88:a8:49:dd:
8b:f6:3f:da:e6:c0:ac:e9:40:a3:9e:78:37:77:2e:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:91:50:2F:EE:CD:C4:4D:71:A3:95:A9:4C:8C:D4:19:7C:0F:5D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HGSRUC_uzcRNcaOVqUyM1Bl8D10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/22
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
138.16.128.0-138.16.130.255
185.42.24.0/24
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
9d:5d:35:b7:ff:10:07:cb:0a:6b:f3:a9:d2:2d:fc:2f:c5:60:
90:28:c9:7a:35:10:39:0e:13:7a:c4:d6:3f:c0:5d:82:64:57:
c8:e3:3b:30:d1:d2:eb:9e:1c:e4:83:ff:8b:71:21:43:90:9e:
d6:a2:47:cc:5a:60:37:04:b8:9f:3d:26:f6:f3:61:53:82:3a:
1f:3a:29:df:03:f5:8a:93:bd:88:0f:db:85:c5:41:0a:38:aa:
18:99:da:fd:3f:c5:48:38:1b:58:41:49:00:34:77:53:8c:93:
a7:0c:99:c6:f4:59:fd:a4:57:46:6b:db:7e:b3:2a:f1:48:9a:
fe:c9:72:52:61:57:15:6c:f7:0e:50:59:b7:ad:f3:43:46:68:
e2:2c:b9:14:43:bc:bf:46:b3:00:80:c8:9f:51:84:ac:15:91:
51:25:2d:a8:64:4a:4a:7b:9b:80:73:06:19:e9:cd:04:82:d5:
2a:61:f6:ab:a3:da:85:c8:17:d4:90:d8:cb:bd:66:d6:69:c3:
8b:d4:f9:d7:bf:61:38:0a:f0:d6:67:e0:30:45:44:02:7f:5e:
f4:93:1b:f6:3f:b6:6b:b5:74:6c:bf:44:22:9b:ae:bb:98:73:
0b:7c:ab:35:b4:2f:f2:70:02:aa:0c:d4:54:ed:8c:e3:9b:7b:
10:0b:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:53:11 2026 by rpki-client