Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/hBmGlltLexkP8f3hX0SAgg3Hio0.roa
File: hBmGlltLexkP8f3hX0SAgg3Hio0.roa (raw, json)
Hash identifier: qAvglYr6lut4x7tEHzSK5Gh8yQ5C9t3pg4zrjJgOyJA=
Subject key identifier: 84:19:86:96:5B:4B:7B:19:0F:F1:FD:E1:5F:44:80:82:0D:C7:8A:8D
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019FFAAE3254F007F21ED8D631C1D8D1C666
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/hBmGlltLexkP8f3hX0SAgg3Hio0.roa
Signing time: Thu 13 Aug 2026 10:32:27 +0000
ROA not before: Thu 13 Aug 2026 10:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201550
IP address blocks: 5.0.192.0/19 maxlen: 19
5.0.224.0/21 maxlen: 21
5.0.232.0/23 maxlen: 23
5.0.234.0/23 maxlen: 23
5.0.236.0/22 maxlen: 22
5.0.240.0/20 maxlen: 20
5.155.192.0/19 maxlen: 19
5.155.224.0/21 maxlen: 21
5.155.232.0/23 maxlen: 23
5.155.234.0/23 maxlen: 23
5.155.236.0/22 maxlen: 22
5.155.240.0/20 maxlen: 20
31.9.128.0/19 maxlen: 19
31.9.160.0/21 maxlen: 21
31.9.168.0/22 maxlen: 22
31.9.172.0/22 maxlen: 22
31.9.176.0/20 maxlen: 20
31.9.192.0/19 maxlen: 19
31.9.224.0/21 maxlen: 21
31.9.232.0/22 maxlen: 22
31.9.236.0/22 maxlen: 22
31.9.240.0/20 maxlen: 20
94.47.128.0/19 maxlen: 19
94.47.160.0/19 maxlen: 19
94.47.192.0/19 maxlen: 19
94.47.224.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/20 maxlen: 20
188.133.48.0/20 maxlen: 20
188.133.64.0/20 maxlen: 20
188.133.80.0/20 maxlen: 20
188.133.96.0/20 maxlen: 20
188.133.112.0/20 maxlen: 20
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.72.0/22 maxlen: 22
193.124.72.0/23 maxlen: 23
193.124.82.0/23 maxlen: 23
193.124.96.0/21 maxlen: 21
193.124.104.0/22 maxlen: 22
193.124.108.0/22 maxlen: 22
193.124.160.0/21 maxlen: 21
193.124.168.0/21 maxlen: 21
193.124.192.0/21 maxlen: 21
193.124.208.0/21 maxlen: 21
193.124.216.0/23 maxlen: 23
193.124.218.0/24 maxlen: 24
193.124.219.0/24 maxlen: 24
193.124.220.0/22 maxlen: 22
194.58.0.0/21 maxlen: 21
194.58.8.0/23 maxlen: 23
194.58.10.0/24 maxlen: 24
194.58.11.0/24 maxlen: 24
194.58.12.0/22 maxlen: 22
194.135.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ae:32:54:f0:07:f2:1e:d8:d6:31:c1:d8:d1:c6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Aug 13 10:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=841986965b4b7b190ff1fde15f4480820dc78a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e4:af:b0:2a:61:19:fb:e2:cb:fe:b7:8a:01:
16:f8:13:e1:55:9e:79:5a:5d:11:f7:d6:82:d1:b5:
df:e2:41:3a:e0:ec:0a:e3:dd:38:f5:5c:07:fc:a3:
4f:8a:2b:82:43:56:5e:2b:a1:7d:67:9b:8e:05:6b:
0a:2e:47:1c:44:47:16:5f:75:dd:bd:73:d3:49:b3:
bf:83:38:8d:b8:4f:7c:6f:e2:e0:5b:f1:cd:d3:60:
52:1c:e6:93:4c:6b:83:34:c5:f9:ce:9e:79:2f:c4:
0d:00:c5:0c:de:65:29:e0:a1:a6:87:70:e0:b2:61:
8c:a7:08:9f:6a:fc:34:33:cf:d3:66:ec:15:e1:61:
9b:75:db:89:7c:79:3d:b0:31:4b:e8:89:e6:68:06:
1c:f2:0c:eb:71:26:07:a0:61:81:5e:46:a6:9c:cb:
3f:36:fc:42:b2:e3:49:be:2a:b7:ef:e7:1e:8c:91:
52:b3:04:17:77:de:c6:e0:dd:5d:94:6b:a9:d8:cf:
66:9e:71:2c:7e:bc:42:d9:c1:2b:0a:f1:8f:8b:ee:
2d:39:43:b3:77:7b:28:8f:b5:9d:94:ed:f9:be:16:
b0:12:9f:7e:c3:e5:c6:53:33:67:20:f3:1b:ae:9b:
15:41:d4:97:d7:10:e2:31:57:48:f6:6e:39:ae:69:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:86:96:5B:4B:7B:19:0F:F1:FD:E1:5F:44:80:82:0D:C7:8A:8D
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/hBmGlltLexkP8f3hX0SAgg3Hio0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.192.0/18
5.155.192.0/18
31.9.128.0/17
94.47.128.0/17
178.253.96.0/23
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.62.0/23
193.124.68.0/23
193.124.72.0/22
193.124.82.0/23
193.124.96.0/20
193.124.160.0/20
193.124.192.0/21
193.124.208.0/20
194.58.0.0/20
194.135.106.0/23
Signature Algorithm: sha256WithRSAEncryption
92:3c:55:ae:fe:b3:17:a8:2a:ac:cb:a8:dc:ca:ce:55:71:0e:
d6:5a:c7:19:06:4f:c5:a0:78:a7:62:24:1e:67:28:c4:6c:a7:
74:22:36:a5:4f:1a:35:33:78:c9:24:83:af:10:78:b1:59:bd:
4d:20:9d:04:5a:6c:67:96:6d:3c:be:ef:f0:ad:e6:11:2c:9b:
6c:64:e3:81:31:9e:cf:5d:4d:8f:ca:85:ac:14:9b:e9:c6:14:
8f:79:d8:5e:f7:ff:a7:6e:f8:bc:1c:a4:09:bc:54:ea:43:f3:
bb:21:3a:1a:c4:7a:9a:46:f2:95:5e:92:53:7e:83:3c:52:cb:
f3:26:73:d4:c3:aa:e7:c3:06:4d:8a:69:9b:37:1f:35:84:ba:
5c:9d:c5:a1:5a:6d:7e:87:35:ee:03:db:1d:c8:61:12:24:d1:
81:4f:6e:c8:c7:2f:01:0f:02:ed:bd:f9:ef:47:96:e8:24:db:
cc:36:4c:6d:28:9c:6a:3e:b8:88:8a:27:d5:ec:3d:c0:29:2c:
af:c1:46:43:07:c2:7b:5e:a2:08:c7:99:5c:d9:77:75:76:07:
04:6c:8e:d6:a0:84:a0:c8:12:b9:ce:7b:36:3c:27:cc:eb:7d:
31:df:4e:18:fe:2f:df:ec:50:9c:48:79:19:a7:ad:da:ed:25:
e7:af:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:36 2026 by rpki-client