Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/XHNmhL-H_lU_Ditj5DOPMU-kKtY.roa
File: XHNmhL-H_lU_Ditj5DOPMU-kKtY.roa (raw, json)
Hash identifier: bFFOvpr+igb/YTpH0FjZlwOdqO2o/Bhf2p5JdiNxZ04=
Subject key identifier: 5C:73:66:84:BF:87:FE:55:3F:0E:2B:63:E4:33:8F:31:4F:A4:2A:D6
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01A0026411B547BA1A7517708EF7C9729CAA
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/XHNmhL-H_lU_Ditj5DOPMU-kKtY.roa
Signing time: Fri 14 Aug 2026 22:28:27 +0000
ROA not before: Fri 14 Aug 2026 22:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.0.0/21 maxlen: 21
5.0.8.0/21 maxlen: 21
5.0.16.0/21 maxlen: 21
5.0.24.0/21 maxlen: 21
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.64.0/21 maxlen: 21
5.0.72.0/21 maxlen: 21
5.0.80.0/21 maxlen: 21
5.0.88.0/21 maxlen: 21
5.0.96.0/21 maxlen: 21
5.0.104.0/21 maxlen: 21
5.0.112.0/21 maxlen: 21
5.0.120.0/21 maxlen: 21
5.0.128.0/19 maxlen: 19
5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.32.0/21 maxlen: 21
5.155.40.0/21 maxlen: 21
5.155.48.0/21 maxlen: 21
5.155.56.0/21 maxlen: 21
5.155.64.0/19 maxlen: 19
5.155.64.0/21 maxlen: 21
5.155.72.0/21 maxlen: 21
5.155.80.0/21 maxlen: 21
5.155.88.0/21 maxlen: 21
5.155.96.0/19 maxlen: 19
5.155.96.0/21 maxlen: 21
5.155.104.0/21 maxlen: 21
5.155.112.0/21 maxlen: 21
5.155.120.0/21 maxlen: 21
5.155.128.0/19 maxlen: 19
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/19 maxlen: 19
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.0.0/19 maxlen: 19
31.9.32.0/20 maxlen: 20
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
91.144.48.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.64.0/21 maxlen: 21
94.47.72.0/21 maxlen: 21
94.47.80.0/21 maxlen: 21
94.47.88.0/21 maxlen: 21
94.47.96.0/19 maxlen: 19
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
194.58.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:64:11:b5:47:ba:1a:75:17:70:8e:f7:c9:72:9c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Aug 14 22:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c736684bf87fe553f0e2b63e4338f314fa42ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:f5:fd:46:45:7b:5a:88:55:d1:88:e0:40:
92:7f:98:82:71:91:bb:68:20:30:78:66:e3:53:f4:
5f:d8:17:20:ac:31:6d:63:09:4f:ef:08:1c:02:d5:
2f:68:fa:20:f9:8b:bd:65:19:11:ce:6a:6a:44:bc:
5b:82:61:57:8f:13:6b:ba:6f:38:c2:6c:39:c2:d8:
f3:8f:f9:26:ca:09:71:62:03:3a:45:e4:3f:70:98:
cc:d4:b7:0d:48:6d:d9:b6:72:0d:09:8b:df:30:07:
50:4a:cc:45:7f:c0:d2:ad:ca:f5:72:24:b8:90:6e:
43:11:45:2d:6c:a6:ef:b1:3b:80:3a:eb:2c:35:a9:
06:b9:85:2a:bf:69:08:c4:08:6b:4e:a2:2d:c1:bb:
dc:81:c2:7c:ca:47:44:9b:47:f1:17:70:d2:a0:d0:
3e:5e:ac:18:07:17:e9:7f:cb:df:c2:02:7d:4a:08:
4f:d5:10:b6:e7:67:04:f6:61:71:37:ba:6e:20:a9:
2c:1f:ab:36:80:a9:b6:0e:54:dd:a5:43:dd:de:06:
14:34:e2:95:0e:19:99:5a:be:45:3e:50:75:58:01:
32:6d:65:63:24:48:94:0f:45:fa:60:21:13:13:4d:
8f:c9:c4:3e:2d:c6:be:c9:45:56:cc:68:ff:e8:9a:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:66:84:BF:87:FE:55:3F:0E:2B:63:E4:33:8F:31:4F:A4:2A:D6
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/XHNmhL-H_lU_Ditj5DOPMU-kKtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.0.0-31.9.51.255
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0/18
94.47.0.0/17
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
194.58.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e6:62:68:78:44:a3:f9:a1:5a:d3:85:c0:2b:06:8d:e5:f8:
8b:b4:99:dc:ab:c4:6f:8d:c5:a1:a8:3d:ef:0f:05:00:36:4b:
80:ce:b5:9b:ef:f6:6c:68:fc:f6:20:62:e7:53:a5:be:5c:cd:
ba:01:11:d3:7a:b0:5d:08:09:e2:fa:1f:e4:d1:d8:b1:42:b8:
c6:d7:e4:93:a4:c4:79:98:3d:9b:24:0c:77:70:9c:4e:4a:b2:
20:ee:8e:b2:57:93:15:bf:46:f6:67:a9:22:34:59:d5:df:7d:
20:3d:b8:cf:38:5f:6e:87:bd:a1:79:0f:2c:3a:13:0a:f7:67:
85:3b:18:36:21:12:c1:d0:69:58:d5:ba:bf:85:4a:80:96:c0:
c6:49:46:02:0f:21:16:fc:81:95:27:ef:36:56:00:79:e2:e2:
94:24:e3:58:51:3c:b5:e2:04:e5:f1:23:b0:40:2b:76:d3:86:
8d:06:06:c4:be:7b:39:97:2d:f3:70:58:a4:fe:e3:9e:33:5f:
1d:10:11:c6:5e:61:d5:f8:58:e8:6e:e1:8a:12:5a:5d:25:3b:
5c:a0:b5:6f:2c:f5:20:b8:af:4a:f4:05:09:91:a2:b7:c3:73:
5d:69:59:31:06:e3:ee:0c:8d:e6:bb:16:d8:81:4c:21:b7:ee:
45:ce:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:47 2026 by rpki-client