Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/HmF9BlW0N9Gf90qlurIxvLh06Qk.roa
File: HmF9BlW0N9Gf90qlurIxvLh06Qk.roa (raw, json)
Hash identifier: ZSkQkLJR9FAk0rQTmxE9Q0nn/fbR18zVkksGDExkMjk=
Subject key identifier: 1E:61:7D:06:55:B4:37:D1:9F:F7:4A:A5:BA:B2:31:BC:B8:74:E9:09
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019FAD3E12D8697C64D96C097E17DA93BC66
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/HmF9BlW0N9Gf90qlurIxvLh06Qk.roa
Signing time: Wed 29 Jul 2026 09:39:14 +0000
ROA not before: Wed 29 Jul 2026 09:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8400
IP address blocks: 5.134.104.0/21 maxlen: 21
5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.148.64.0/18 maxlen: 18
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
194.106.160.0/19 maxlen: 19
195.178.32.0/19 maxlen: 19
195.252.64.0/18 maxlen: 18
195.252.82.0/24 maxlen: 24
195.252.88.0/24 maxlen: 24
195.252.92.0/22 maxlen: 22
212.62.59.0/24 maxlen: 24
212.115.120.0/22 maxlen: 22
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.16.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:3e:12:d8:69:7c:64:d9:6c:09:7e:17:da:93:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jul 29 09:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e617d0655b437d19ff74aa5bab231bcb874e909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:5d:48:9c:c7:dd:20:82:c1:06:17:1d:fc:
7d:b4:8a:2d:75:0c:fb:18:e7:f8:a3:ac:bf:33:a3:
de:bf:1e:6b:b4:5e:af:04:54:4d:78:8a:a7:8d:fe:
02:ec:10:97:f5:4b:b2:3c:a8:dd:bc:03:b2:a8:99:
d1:2f:f0:6c:ad:63:4d:a7:e9:bb:43:ce:ca:1f:43:
c3:ca:bb:74:03:d0:82:77:9e:00:93:fc:15:41:b5:
e8:31:cc:b5:2b:f8:26:93:9e:e6:00:0a:82:ce:bd:
dc:da:82:77:a9:33:26:af:13:2d:75:44:62:97:29:
4a:68:71:3e:49:37:75:83:56:bc:d6:74:7e:bb:ec:
6c:8b:e8:9a:9e:3d:f3:6d:63:e2:03:f3:1a:5a:61:
49:98:2d:f8:ff:92:0f:31:e0:39:25:e0:d7:38:d9:
24:0f:39:c6:f5:b1:41:f8:b7:c7:09:62:93:71:17:
91:80:da:77:6c:92:57:57:25:91:f2:94:03:84:e4:
62:d3:48:61:5a:02:57:ef:51:eb:b8:51:0d:20:f1:
94:65:56:d9:59:33:40:36:03:f4:ca:ec:d8:3c:ad:
e3:63:d7:db:b8:d2:32:75:68:e0:b3:08:34:0d:86:
f9:a3:4f:92:de:57:93:b2:5c:2b:f1:55:75:19:d0:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:7D:06:55:B4:37:D1:9F:F7:4A:A5:BA:B2:31:BC:B8:74:E9:09
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/HmF9BlW0N9Gf90qlurIxvLh06Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.104.0/21
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.148.64.0/18
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
194.106.160.0/19
195.178.32.0/19
195.252.64.0/18
212.62.59.0/24
212.115.120.0/22
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:d6:3c:b0:08:8d:f2:56:d0:bd:78:3e:5d:31:38:f9:6c:ef:
fe:34:9c:0e:2b:3f:e5:44:90:48:b9:ab:20:cd:b9:87:c3:99:
8f:e5:b8:1c:16:7b:e8:a8:25:0e:8e:84:ee:14:c0:5a:fb:3e:
94:ad:1b:28:04:1d:b2:12:af:3d:81:ef:01:05:22:0b:a2:5e:
51:8d:3d:db:10:8c:f0:30:c7:39:a3:60:d8:a0:0c:7c:6e:23:
89:78:19:dd:e1:01:f6:4b:ea:41:b9:61:b6:67:7c:49:0e:9f:
20:fd:d4:ed:8f:8c:f3:fc:a2:51:32:ae:4f:c1:74:62:c7:3b:
90:32:c7:d3:a0:0a:eb:11:7c:81:05:ff:d1:b4:58:bc:5b:c7:
95:7f:c6:b5:b2:aa:7f:ef:f1:58:e7:1a:ed:8e:38:1f:7d:28:
4a:a5:38:19:7a:eb:d8:55:03:9c:5b:89:96:40:75:c8:61:9f:
7a:cf:ad:0e:f2:d4:96:7a:63:cf:4d:ac:87:73:1a:83:27:cd:
51:c2:5a:a5:c4:e3:67:6a:5d:66:d1:d1:10:d4:39:cd:5e:e4:
43:40:b5:cb:e4:62:88:7a:5f:4a:08:82:f0:fe:1a:85:b1:90:
10:56:b9:c7:b7:a1:90:5d:16:6c:af:c7:22:f6:4a:80:2d:53:
b4:34:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 19:51:49 2026 by rpki-client