Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/htk5_Ys53NUFXCuBYB_z_0MPpw0.roa
File: htk5_Ys53NUFXCuBYB_z_0MPpw0.roa (raw, json)
Hash identifier: sjTe5PKqbaPLZKrvLHmJ12rc3TssTL2KpMPCebpyXjo=
Subject key identifier: 86:D9:39:FD:8B:39:DC:D5:05:5C:2B:81:60:1F:F3:FF:43:0F:A7:0D
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A131B13312278A4E89F1017AD8C989F8F5
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/htk5_Ys53NUFXCuBYB_z_0MPpw0.roa
Signing time: Mon 12 Oct 2026 19:57:38 +0000
ROA not before: Mon 12 Oct 2026 19:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48018
IP address blocks: 31.172.64.0/24 maxlen: 24
31.172.66.0/24 maxlen: 24
31.172.67.0/24 maxlen: 24
31.172.76.0/24 maxlen: 24
81.85.78.0/24 maxlen: 24
89.127.197.0/24 maxlen: 24
89.127.209.0/24 maxlen: 24
89.127.217.0/24 maxlen: 24
130.17.2.0/24 maxlen: 24
130.17.11.0/24 maxlen: 24
199.68.197.0/24 maxlen: 24
199.195.195.0/24 maxlen: 24
213.193.198.0/24 maxlen: 24
217.177.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b1:33:12:27:8a:4e:89:f1:01:7a:d8:c9:89:f8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 12 19:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86d939fd8b39dcd5055c2b81601ff3ff430fa70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:45:9f:1f:fe:53:f5:34:52:c7:7c:d8:7a:
05:5a:5c:5b:92:68:4d:f2:1e:b9:90:1b:1f:dd:c5:
5e:52:aa:56:42:73:8d:d9:4a:16:a6:21:4d:fe:2f:
c7:cc:b4:8d:8b:e0:d4:9e:5f:32:4f:21:76:8b:52:
65:02:cf:8c:b1:b8:22:f9:b2:41:13:1d:c3:88:ca:
be:d1:79:f5:fe:a9:4b:25:a1:09:d4:f1:fc:e4:00:
1d:d8:2c:12:3d:5d:67:96:46:cc:d5:67:f1:10:51:
4d:7e:3b:94:e1:f5:ea:14:8d:8a:59:75:cd:63:99:
0e:0d:4a:e5:8b:4c:f8:57:3e:ae:96:29:99:25:fe:
45:f7:eb:f1:6d:a3:24:f8:40:61:92:b4:5c:dd:d7:
2c:a9:3d:e4:87:22:fc:fc:e2:4d:46:f9:93:9f:17:
5c:d3:af:98:cb:f8:99:04:b5:4a:da:ba:8d:a5:eb:
e1:02:45:78:46:c5:1f:a9:31:e7:0f:ce:fa:fc:8f:
5a:fe:15:68:3c:6c:20:07:25:41:ce:1d:fe:51:23:
12:36:15:67:aa:85:3c:21:e0:08:bd:05:82:66:fb:
e3:97:bc:c6:b7:54:e2:41:d8:55:ec:39:24:80:40:
98:56:b8:d8:72:a0:7d:6b:b9:30:04:29:17:03:10:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:39:FD:8B:39:DC:D5:05:5C:2B:81:60:1F:F3:FF:43:0F:A7:0D
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/htk5_Ys53NUFXCuBYB_z_0MPpw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.64.0/24
31.172.66.0/23
31.172.76.0/24
81.85.78.0/24
89.127.197.0/24
89.127.209.0/24
89.127.217.0/24
130.17.2.0/24
130.17.11.0/24
199.68.197.0/24
199.195.195.0/24
213.193.198.0/24
217.177.74.0/24
Signature Algorithm: sha256WithRSAEncryption
79:db:a6:d6:74:d5:5e:a9:dd:4e:89:34:b1:bf:77:51:bb:c6:
36:4b:1a:f2:12:db:19:60:8a:46:14:e9:d8:af:e6:bb:64:06:
d1:3d:82:cd:a4:1b:dc:3b:a6:c7:56:a2:4e:d6:ec:d9:2a:d6:
a2:92:be:91:86:c0:aa:3e:ce:4d:ec:25:59:26:1a:d7:bd:7a:
b5:fd:3d:bb:bc:89:7a:9f:d0:3c:5e:5a:37:37:7b:bb:00:31:
3b:9a:e8:b7:de:86:6d:6e:c5:9a:56:e8:32:b9:db:4c:3c:d7:
47:da:46:d6:7c:1a:3f:e8:c2:66:d2:57:96:02:46:65:70:ba:
91:af:b0:70:14:46:54:33:70:80:d6:75:32:c3:dd:74:95:0f:
1c:46:b7:f1:39:83:38:8e:09:49:1d:4b:c5:a4:5b:ef:28:3a:
05:63:46:a5:6d:2d:84:5f:84:ce:8d:2c:d5:ec:11:e8:ee:69:
69:7a:02:d5:dd:02:a5:d8:fd:81:97:e3:3f:01:d4:81:25:ba:
4d:cc:66:15:fa:9e:3e:6b:5c:8d:8d:8f:ff:b0:84:4a:57:48:
6f:02:69:2c:14:ea:7b:7d:b8:ed:7f:5f:1a:1a:98:ab:36:d6:
e2:4c:fa:5c:95:3b:20:4d:b8:b4:4e:e9:d8:8d:58:e0:b1:00:
d5:1e:30:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAaExsTMSJ4pOifEBetjJifj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYxMDEyMTk1NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmQ5MzlmZDhiMzlkY2Q1MDU1YzJiODE2MDFmZjNmZjQzMGZhNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3NFnx/+U/U0Usd82HoFWlxbkmhN
8h65kBsf3cVeUqpWQnON2UoWpiFN/i/HzLSNi+DUnl8yTyF2i1JlAs+Msbgi+bJB
Ex3DiMq+0Xn1/qlLJaEJ1PH85AAd2CwSPV1nlkbM1WfxEFFNfjuU4fXqFI2KWXXN
Y5kODUrli0z4Vz6ulimZJf5F9+vxbaMk+EBhkrRc3dcsqT3khyL8/OJNRvmTnxdc
06+Yy/iZBLVK2rqNpevhAkV4RsUfqTHnD876/I9a/hVoPGwgByVBzh3+USMSNhVn
qoU8IeAIvQWCZvvjl7zGt1TiQdhV7DkkgECYVrjYcqB9a7kwBCkXAxDLEwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFIbZOf2LOdzVBVwrgWAf8/9DD6cNMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvaHRrNV9ZczUzTlVGWEN1QllCX3pfME1QcHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAH6xAAwQB
H6xCAwQAH6xMAwQAUVVOAwQAWX/FAwQAWX/RAwQAWX/ZAwQAghECAwQAghELAwQA
x0TFAwQAx8PDAwQA1cHGAwQA2bFKMA0GCSqGSIb3DQEBCwUAA4IBAQB526bWdNVe
qd1OiTSxv3dRu8Y2SxryEtsZYIpGFOnYr+a7ZAbRPYLNpBvcO6bHVqJO1uzZKtai
kr6RhsCqPs5N7CVZJhrXvXq1/T27vIl6n9A8Xlo3N3u7ADE7mui33oZtbsWaVugy
udtMPNdH2kbWfBo/6MJm0leWAkZlcLqRr7BwFEZUM3CA1nUyw910lQ8cRrfxOYM4
jglJHUvFpFvvKDoFY0albS2EX4TOjSzV7BHo7mlpegLV3QKl2P2Bl+M/AdSBJbpN
zGYV+p4+a1yNjY//sIRKV0hvAmksFOp7fbjtf18aGpirNtbiTPpclTsgTbi0TunY
jVjgsQDVHjAy
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:04:46 2026 by rpki-client