Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/HGkIWoXWSJAFqMPKvyGdKZB4SL4.roa
File: HGkIWoXWSJAFqMPKvyGdKZB4SL4.roa (raw, json)
Hash identifier: nurfiqGU75vRrs8eoR9CqeesWK96CZD5f0FnSgTblxU=
Subject key identifier: 1C:69:08:5A:85:D6:48:90:05:A8:C3:CA:BF:21:9D:29:90:78:48:BE
Certificate issuer: /CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Certificate serial: 019FBC45BF79EF7AEB27AC61050182F8CBED
Authority key identifier: 27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/HGkIWoXWSJAFqMPKvyGdKZB4SL4.roa
Signing time: Sat 01 Aug 2026 07:41:55 +0000
ROA not before: Sat 01 Aug 2026 07:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
45.95.211.0/24 maxlen: 24
85.155.156.0/22 maxlen: 24
91.218.77.0/24 maxlen: 24
109.202.224.0/23 maxlen: 24
134.255.242.0/24 maxlen: 24
143.246.160.0/21 maxlen: 24
178.16.230.0/23 maxlen: 24
185.53.33.0/24 maxlen: 24
185.231.228.0/22 maxlen: 24
185.234.101.0/24 maxlen: 24
185.253.62.0/23 maxlen: 24
194.156.132.0/23 maxlen: 24
194.156.150.0/23 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:45:bf:79:ef:7a:eb:27:ac:61:05:01:82:f8:cb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Validity
Not Before: Aug 1 07:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c69085a85d6489005a8c3cabf219d29907848be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:92:8a:7a:37:7f:67:08:d8:bf:03:04:ef:
75:04:90:8e:6a:13:5b:d9:d2:eb:32:e7:16:45:88:
c8:58:a3:76:8c:62:d3:86:ac:30:83:c6:90:ac:32:
9d:78:08:87:22:19:fd:7f:e3:2b:9e:33:3a:6a:50:
82:97:c5:52:19:3d:67:22:a9:5d:c5:53:7b:fb:43:
30:aa:91:f7:86:19:8e:a9:47:f2:77:6a:af:91:f2:
63:1c:40:80:22:af:e2:a2:10:18:b9:30:2e:92:6c:
91:3b:a9:28:7a:a1:86:98:ca:65:5f:25:1a:21:a9:
92:3c:45:d2:08:f4:e1:13:30:98:69:ba:71:6a:88:
39:67:e9:cd:24:95:66:df:7a:c5:29:0f:f9:87:25:
64:dd:1e:40:18:fa:16:d9:6a:66:f8:7a:ab:26:bc:
93:14:0a:81:f7:fd:b3:66:99:65:87:ac:5b:26:a0:
38:7b:1f:c4:b8:89:c5:52:6d:52:62:19:a6:c6:91:
b5:0a:e5:56:f5:ad:1e:fa:29:d6:56:90:35:7f:2c:
71:e0:52:1d:88:5b:b3:68:68:bd:1e:88:0a:1b:c2:
85:fe:c2:87:00:0c:9e:4a:7d:20:c3:8d:08:d5:cc:
b2:a4:c7:7d:60:c9:b5:b8:90:e9:96:18:07:94:11:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:08:5A:85:D6:48:90:05:A8:C3:CA:BF:21:9D:29:90:78:48:BE
X509v3 Authority Key Identifier:
keyid:27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/HGkIWoXWSJAFqMPKvyGdKZB4SL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
85.155.156.0/22
91.218.77.0/24
109.202.224.0/23
134.255.242.0/24
143.246.160.0/21
178.16.230.0/23
185.53.33.0/24
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
194.156.132.0/23
194.156.150.0/23
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
9f:e0:bb:73:4a:8c:a5:20:a4:2c:9d:f3:85:65:59:53:96:03:
a7:c8:8f:e7:e9:d4:f7:6f:99:85:05:5e:93:4e:15:2b:9a:42:
d2:9b:88:a7:2b:26:46:ba:c3:8a:be:b8:45:95:11:e7:d2:a5:
09:a0:69:a6:43:12:9e:40:d4:01:70:47:e5:19:46:3d:0e:69:
06:13:1e:48:00:85:25:d4:7b:38:ea:ca:ea:ac:c3:9f:fe:e0:
64:cf:8a:d4:ee:21:9a:44:e7:ec:60:bb:bf:18:ab:96:d0:6e:
ba:05:09:58:37:6e:9b:8d:5b:54:fb:43:5b:5d:9c:a4:01:ee:
57:05:da:f9:f1:51:6e:18:a5:59:47:f1:30:2e:04:7e:f9:ed:
59:49:0b:4c:84:b3:97:4e:65:86:2d:1a:02:74:1b:79:47:fd:
60:de:78:8a:a8:13:78:7e:7e:eb:05:29:13:8d:a1:98:02:64:
53:21:43:3b:6b:b6:97:38:ba:85:5e:d9:08:61:c5:b6:2e:b9:
d6:1a:fd:c6:a9:8b:64:db:f0:02:3d:e9:c2:5f:35:7c:be:d5:
ac:48:78:bd:36:d3:ff:57:b4:76:a4:bb:13:06:a8:22:4a:28:
cd:c9:e6:3d:68:60:2a:56:d7:5b:63:90:79:4d:b6:8e:58:63:
c1:d8:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:13 2026 by rpki-client