Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/hMvyB1pcZJJ4ne7PUjEH2uYYfAo.roa
File: hMvyB1pcZJJ4ne7PUjEH2uYYfAo.roa (raw, json)
Hash identifier: yno1f6h3WcnlkHz3v3tuYAFTInjTxZGAPvAW6BrEI6I=
Subject key identifier: 84:CB:F2:07:5A:5C:64:92:78:9D:EE:CF:52:31:07:DA:E6:18:7C:0A
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019DF2D66280985DB40A50808704B7E14266
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/hMvyB1pcZJJ4ne7PUjEH2uYYfAo.roa
Signing time: Mon 04 May 2026 11:53:49 +0000
ROA not before: Mon 04 May 2026 11:53:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 31.131.8.0/23 maxlen: 23
31.131.10.0/23 maxlen: 23
64.43.100.0/22 maxlen: 22
77.36.24.0/22 maxlen: 22
81.161.0.0/23 maxlen: 23
93.120.16.0/22 maxlen: 22
93.120.20.0/22 maxlen: 22
176.96.52.0/22 maxlen: 22
176.111.160.0/23 maxlen: 23
176.111.162.0/23 maxlen: 23
176.116.32.0/22 maxlen: 22
176.116.36.0/22 maxlen: 22
178.159.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:d6:62:80:98:5d:b4:0a:50:80:87:04:b7:e1:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 4 11:53:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84cbf2075a5c6492789deecf523107dae6187c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:2e:25:4d:95:31:cb:56:a3:d0:39:4e:0a:
6e:ae:68:9b:e8:68:c9:fc:69:c8:d1:67:26:3f:8a:
aa:f8:2e:4a:f9:5b:ba:5e:23:8f:a8:a6:26:3b:78:
f3:22:ed:77:19:1e:e8:19:7b:4f:7a:e0:79:c7:e0:
3e:e0:80:9d:fb:dc:55:d0:23:0d:5e:2e:18:b5:da:
f8:bb:b2:a9:94:d6:d7:11:39:9a:9b:20:68:6d:8c:
7f:ea:0c:60:5b:27:03:9e:f1:05:11:04:96:3e:18:
8f:35:bc:1a:f9:94:9a:24:8d:fb:cf:56:c4:5b:14:
62:7f:1a:9e:35:06:dc:f2:77:c9:af:94:df:15:df:
7b:d6:24:a4:12:0e:97:7f:e2:3b:49:3c:a7:34:f7:
64:57:5a:c9:3a:24:43:f1:98:8f:01:2b:e8:f5:90:
a5:bd:57:cb:c1:35:7d:e5:83:78:de:cd:e7:4e:0d:
98:1b:11:1b:14:1d:60:ed:de:b5:70:7c:af:59:14:
45:4b:48:6e:71:e7:ce:1a:61:d3:c6:e0:6f:45:86:
93:02:50:1d:27:c8:f2:23:d9:0d:ac:42:fa:69:d8:
f8:80:d4:6f:06:09:c3:74:06:a1:d4:ca:50:90:57:
d9:86:b8:92:cf:7a:0a:7c:e5:b9:9c:d1:6e:c8:bb:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CB:F2:07:5A:5C:64:92:78:9D:EE:CF:52:31:07:DA:E6:18:7C:0A
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/hMvyB1pcZJJ4ne7PUjEH2uYYfAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/22
64.43.100.0/22
77.36.24.0/22
81.161.0.0/23
93.120.16.0/21
176.96.52.0/22
176.111.160.0/22
176.116.32.0/21
178.159.144.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e7:03:de:61:45:d1:73:eb:ac:b9:9e:f7:d7:a8:c9:dc:e7:
fd:b4:bd:de:fd:21:2d:bf:a4:55:8f:aa:3d:86:86:5d:de:15:
5d:b3:57:d1:0c:90:5c:17:5e:dc:42:d4:11:33:5e:45:e8:94:
17:35:c6:17:e6:35:e9:c8:bf:87:15:89:cb:35:04:96:2a:b1:
a0:52:31:26:53:b4:04:df:95:d2:5e:63:b3:64:a9:64:64:54:
58:4f:16:79:cd:69:7b:6b:20:16:c9:2f:33:ad:02:35:81:ed:
9a:7d:55:9e:ef:82:bf:a5:92:51:50:e7:b1:55:23:4d:66:c3:
f7:ee:66:5f:99:30:bd:fd:d1:62:25:3c:e4:29:3b:4f:d0:dc:
b0:98:66:dd:ad:c3:92:e3:5e:2f:d1:4f:aa:c2:60:43:7c:d5:
c1:29:54:13:84:be:88:3a:87:7f:8b:17:69:75:7f:a0:6d:0c:
7c:55:c9:df:ad:73:a5:f8:ae:1e:e0:66:d6:2b:62:60:32:fd:
b5:85:57:27:a5:cc:c0:6d:49:02:8f:13:ae:fe:28:43:ea:c7:
47:0a:11:ae:ff:49:71:5b:f2:c9:e8:d7:9e:91:66:9e:11:75:
b2:00:fc:cc:5b:6a:9e:2c:01:30:59:d8:9b:78:ea:19:eb:c8:
67:d3:5a:f9
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ3y1mKAmF20ClCAhwS34UJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjYwNTA0MTE1MzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGNiZjIwNzVhNWM2NDkyNzg5ZGVlY2Y1MjMxMDdkYWU2MTg3YzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JkuJU2VMctWo9A5Tgpurmib6GjJ
/GnI0WcmP4qq+C5K+Vu6XiOPqKYmO3jzIu13GR7oGXtPeuB5x+A+4ICd+9xV0CMN
Xi4Ytdr4u7KplNbXETmamyBobYx/6gxgWycDnvEFEQSWPhiPNbwa+ZSaJI37z1bE
WxRifxqeNQbc8nfJr5TfFd971iSkEg6Xf+I7STynNPdkV1rJOiRD8ZiPASvo9ZCl
vVfLwTV95YN43s3nTg2YGxEbFB1g7d61cHyvWRRFS0hucefOGmHTxuBvRYaTAlAd
J8jyI9kNrEL6adj4gNRvBgnDdAah1MpQkFfZhriSz3oKfOW5nNFuyLvE0wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFITL8gdaXGSSeJ3uz1IxB9rmGHwKMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvaE12eUIxcGNaSko0bmU3UFVqRUgydVlZZkFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCH4MIAwQC
QCtkAwQCTSQYAwQBUaEAAwQDXXgQAwQCsGA0AwQCsG+gAwQDsHQgAwQBsp+QMA0G
CSqGSIb3DQEBCwUAA4IBAQBC5wPeYUXRc+usuZ7316jJ3Of9tL3e/SEtv6RVj6o9
hoZd3hVds1fRDJBcF17cQtQRM15F6JQXNcYX5jXpyL+HFYnLNQSWKrGgUjEmU7QE
35XSXmOzZKlkZFRYTxZ5zWl7ayAWyS8zrQI1ge2afVWe74K/pZJRUOexVSNNZsP3
7mZfmTC9/dFiJTzkKTtP0NywmGbdrcOS414v0U+qwmBDfNXBKVQThL6IOod/ixdp
dX+gbQx8VcnfrXOl+K4e4GbWK2JgMv21hVcnpczAbUkCjxOu/ihD6sdHChGu/0lx
W/LJ6NeekWaeEXWyAPzMW2qeLAEwWdibeOoZ68hn01r5
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:39 2026 by rpki-client