Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa
File: HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa (raw, json)
Hash identifier: 7RSyHDJ1xj0KCQZdzozVZqOlI9r3j6g8qDcJh+l/iTA=
Subject key identifier: 1F:1B:DF:A5:7E:5A:21:F1:27:D5:4A:89:FC:94:3D:25:50:3A:ED:86
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019CC1EC2F0AF03060F9825D573110FE8F6C
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa
Signing time: Fri 06 Mar 2026 06:53:26 +0000
ROA not before: Fri 06 Mar 2026 06:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.98.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
85.117.102.0/24 maxlen: 24
85.117.103.0/24 maxlen: 24
85.117.104.0/24 maxlen: 24
85.117.105.0/24 maxlen: 24
85.117.106.0/24 maxlen: 24
85.117.107.0/24 maxlen: 24
85.117.108.0/24 maxlen: 24
85.117.109.0/24 maxlen: 24
85.117.110.0/24 maxlen: 24
85.117.111.0/24 maxlen: 24
85.117.112.0/24 maxlen: 24
85.117.113.0/24 maxlen: 24
85.117.114.0/24 maxlen: 24
85.117.115.0/24 maxlen: 24
85.117.116.0/24 maxlen: 24
85.117.117.0/24 maxlen: 24
85.117.118.0/24 maxlen: 24
85.117.119.0/24 maxlen: 24
85.117.120.0/24 maxlen: 24
85.117.121.0/24 maxlen: 24
85.117.122.0/24 maxlen: 24
85.117.123.0/24 maxlen: 24
85.117.124.0/24 maxlen: 24
85.117.125.0/24 maxlen: 24
85.117.126.0/24 maxlen: 24
85.117.127.0/24 maxlen: 24
185.57.72.0/24 maxlen: 24
185.57.73.0/24 maxlen: 24
185.57.74.0/24 maxlen: 24
185.57.75.0/24 maxlen: 24
217.76.64.0/24 maxlen: 24
217.76.65.0/24 maxlen: 24
217.76.68.0/24 maxlen: 24
217.76.69.0/24 maxlen: 24
217.76.71.0/24 maxlen: 24
217.76.72.0/24 maxlen: 24
217.76.73.0/24 maxlen: 24
217.76.74.0/24 maxlen: 24
217.76.75.0/24 maxlen: 24
217.76.76.0/24 maxlen: 24
217.76.77.0/24 maxlen: 24
217.76.78.0/24 maxlen: 24
217.76.79.0/24 maxlen: 24
2a03:32c0:a::/48 maxlen: 48
2a03:32c0:b::/48 maxlen: 48
2a03:32c0:c::/48 maxlen: 48
2a03:32c0:d::/48 maxlen: 48
2a03:32c0:16::/48 maxlen: 48
2a03:32c0:17::/48 maxlen: 48
2a03:32c0:18::/48 maxlen: 48
2a03:32c0:27::/48 maxlen: 48
2a03:32c0:28::/48 maxlen: 48
2a03:32c0:29::/48 maxlen: 48
2a03:32c0:2a::/48 maxlen: 48
2a03:32c0:2b::/48 maxlen: 48
2a03:32c0:2c::/48 maxlen: 48
2a03:32c0:2d::/48 maxlen: 48
2a03:32c0:2e::/48 maxlen: 48
2a03:32c0:2f::/48 maxlen: 48
2a03:32c0:30::/48 maxlen: 48
2a03:32c0:31::/48 maxlen: 48
2a03:32c0:32::/48 maxlen: 48
2a03:32c0:33::/48 maxlen: 48
2a03:32c0:34::/48 maxlen: 48
2a03:32c0:35::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:300a::/48 maxlen: 48
2a03:32c0:300b::/48 maxlen: 48
2a03:32c0:300c::/48 maxlen: 48
2a03:32c0:300d::/48 maxlen: 48
2a03:32c0:300e::/48 maxlen: 48
2a03:32c0:300f::/48 maxlen: 48
2a03:32c0:3010::/48 maxlen: 48
2a03:32c0:3011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:ec:2f:0a:f0:30:60:f9:82:5d:57:31:10:fe:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Mar 6 06:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f1bdfa57e5a21f127d54a89fc943d25503aed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:99:e2:85:74:9d:c1:38:27:95:7c:9c:e6:
00:0f:34:ae:5c:a4:2a:72:49:f4:a4:d5:da:a5:d9:
0a:b9:4b:d0:e6:c0:e2:52:a1:99:8c:8b:57:a4:4d:
97:1d:41:a7:b4:1f:7d:ee:3c:7d:6f:0b:f3:50:0f:
af:23:9c:66:9f:a9:c9:1e:57:31:fc:62:fe:4a:2c:
92:60:23:d8:5d:06:8a:2a:88:5e:06:8a:54:2f:dc:
40:56:b3:e2:a5:da:19:87:2c:79:85:60:b1:69:2a:
8a:f0:5b:a6:2f:b6:52:b9:1c:40:5b:e1:f6:7e:e6:
cc:f6:76:6e:c3:7b:e9:22:fb:11:a7:de:73:78:6d:
21:98:12:fd:2b:87:51:c7:62:6b:01:3f:13:8b:a0:
2a:fe:e4:44:85:7d:e0:82:59:47:a8:67:a7:ec:9f:
f5:50:48:01:54:15:ed:a3:82:fc:f1:a2:53:aa:8e:
cc:5c:a5:66:9c:93:1f:6f:1b:0c:88:e5:c8:12:44:
dc:aa:ae:f7:c1:ec:ed:a7:f8:16:11:5c:36:d9:19:
0e:ba:fc:4e:60:5a:80:d9:c9:2d:2e:cd:4e:67:33:
6c:41:00:41:84:df:89:f5:8b:c3:25:dc:7c:e7:39:
9c:88:98:df:ed:e5:38:ae:87:4d:0f:bf:19:46:0d:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1B:DF:A5:7E:5A:21:F1:27:D5:4A:89:FC:94:3D:25:50:3A:ED:86
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/19
185.57.72.0/22
217.76.64.0/23
217.76.68.0/23
217.76.71.0-217.76.79.255
IPv6:
2a03:32c0:a::-2a03:32c0:d:ffff:ffff:ffff:ffff:ffff
2a03:32c0:16::-2a03:32c0:18:ffff:ffff:ffff:ffff:ffff
2a03:32c0:27::-2a03:32c0:35:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::/45
2a03:32c0:300a::-2a03:32c0:3011:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:8f:3d:51:c5:a0:7a:c2:b1:4f:90:a0:33:f4:b1:1f:c9:5d:
bc:1c:75:db:85:7e:0c:ba:ce:8b:af:33:51:0c:1b:de:14:b5:
b1:77:38:a8:16:d9:54:10:5f:a6:30:86:3d:05:e2:be:d6:ef:
0b:92:0a:de:cc:e4:a1:2b:60:6f:23:d6:4f:c2:cb:e6:3c:f0:
50:fa:26:bd:97:d3:26:85:d5:5c:2f:27:09:00:a8:c2:2f:dd:
3d:ba:ff:df:37:9a:43:8a:06:79:11:f8:a3:37:aa:db:47:1a:
05:44:98:1e:ed:fc:94:85:40:ce:c4:60:80:23:31:87:6c:a3:
04:aa:cb:65:94:71:45:a6:b4:03:c1:db:8e:f9:16:f2:e7:1c:
70:c8:72:65:4f:ee:c1:d7:d6:8e:05:2e:f2:12:e7:cd:67:ad:
9a:83:71:97:d1:af:5d:13:f4:92:74:38:8c:b9:cc:e4:6c:ea:
9c:e8:3b:d9:63:3f:1b:4c:e5:9d:09:b3:b1:47:41:a9:92:5a:
26:bc:9d:aa:a9:d2:59:64:10:ec:8a:4a:e2:c9:90:40:c4:6b:
18:35:57:16:3e:88:38:0f:63:b9:1e:37:93:b5:63:12:89:41:
08:34:5f:00:95:1c:7a:88:c8:4e:66:1c:64:07:93:e8:a5:eb:
24:e5:05:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgISAZzB7C8K8DBg+YJdVzEQ/o9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjYwMzA2MDY1MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjFiZGZhNTdlNWEyMWYxMjdkNTRhODlmYzk0M2QyNTUwM2FlZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfCZ4oV0ncE4J5V8nOYADzSuXKQq
ckn0pNXapdkKuUvQ5sDiUqGZjItXpE2XHUGntB997jx9bwvzUA+vI5xmn6nJHlcx
/GL+SiySYCPYXQaKKoheBopUL9xAVrPipdoZhyx5hWCxaSqK8FumL7ZSuRxAW+H2
fubM9nZuw3vpIvsRp95zeG0hmBL9K4dRx2JrAT8Ti6Aq/uREhX3ggllHqGen7J/1
UEgBVBXto4L88aJTqo7MXKVmnJMfbxsMiOXIEkTcqq73weztp/gWEVw22RkOuvxO
YFqA2cktLs1OZzNsQQBBhN+J9YvDJdx85zmciJjf7eU4rodND78ZRg1SvQIDAQAB
o4ICjTCCAokwHQYDVR0OBBYEFB8b36V+WiHxJ9VKifyUPSVQOu2GMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvSHh2ZnBYNWFJZkVuMVVxSl9KUTlKVkE2N1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzAsBAIAATAmAwQFVXVg
AwQCuTlIAwQB2UxAAwQB2UxEMAwDBADZTEcDBATZTEAwXwQCAAIwWTASAwcBKgMy
wAAKAwcBKgMywAAMMBIDBwEqAzLAABYDBwAqAzLAABgwEgMHACoDMsAAJwMHASoD
MsAANAMHAyoDMsAwADASAwcBKgMywDAKAwcBKgMywDAQMA0GCSqGSIb3DQEBCwUA
A4IBAQA6jz1RxaB6wrFPkKAz9LEfyV28HHXbhX4Mus6LrzNRDBveFLWxdzioFtlU
EF+mMIY9BeK+1u8LkgrezOShK2BvI9ZPwsvmPPBQ+ia9l9MmhdVcLycJAKjCL909
uv/fN5pDigZ5EfijN6rbRxoFRJge7fyUhUDOxGCAIzGHbKMEqstllHFFprQDwduO
+Rby5xxwyHJlT+7B19aOBS7yEufNZ62ag3GX0a9dE/SSdDiMuczkbOqc6DvZYz8b
TOWdCbOxR0GpklomvJ2qqdJZZBDsikriyZBAxGsYNVcWPog4D2O5HjeTtWMSiUEI
NF8AlRx6iMhOZhxkB5Popesk5QXB
-----END CERTIFICATE-----
Generated at Fri Mar 13 23:06:05 2026 by rpki-client