Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/hyPmPy2feRYcwGFDHEDCYbQZci4.roa
File: hyPmPy2feRYcwGFDHEDCYbQZci4.roa (raw, json)
Hash identifier: K9lCMWKYICu1V3Rsxcvipn6/hnzPsgOcAQgIMhNbnAg=
Subject key identifier: 87:23:E6:3F:2D:9F:79:16:1C:C0:61:43:1C:40:C2:61:B4:19:72:2E
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019F5A5A6EA1D3F40A20101F6EAC6E6C9D4A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/hyPmPy2feRYcwGFDHEDCYbQZci4.roa
Signing time: Mon 13 Jul 2026 07:21:43 +0000
ROA not before: Mon 13 Jul 2026 07:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16190
IP address blocks: 5.134.80.0/22 maxlen: 24
217.113.0.0/21 maxlen: 24
217.113.0.0/22 maxlen: 22
217.113.0.0/23 maxlen: 23
217.113.2.0/23 maxlen: 23
217.113.4.0/22 maxlen: 22
217.113.4.0/23 maxlen: 23
217.113.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:5a:6e:a1:d3:f4:0a:20:10:1f:6e:ac:6e:6c:9d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 13 07:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8723e63f2d9f79161cc061431c40c261b419722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:05:55:ba:f7:de:1f:60:9c:1a:5b:e0:6d:
76:ae:a5:be:23:2d:56:48:db:b3:73:03:1a:ee:df:
83:4d:b8:ba:bd:41:a4:78:e5:5d:4e:c3:bb:5b:34:
32:46:d7:b0:c3:9d:ff:34:0e:5b:af:21:28:1d:bb:
aa:06:f5:c8:66:35:c8:e0:dc:15:fd:78:32:f4:e7:
9b:fd:49:bd:65:08:17:88:28:17:99:3b:9e:94:4f:
a3:0d:69:55:01:86:89:23:86:e6:f9:78:b0:d5:df:
f9:14:a4:5f:94:b7:ae:ca:84:0c:66:dc:89:d4:27:
45:b1:29:89:81:9e:93:a7:cb:cf:0e:95:1a:9b:93:
d1:ce:49:2e:a8:3f:d5:d1:ae:ce:74:ea:2b:9e:a7:
e9:cc:cb:4e:43:6b:e0:1a:9b:6e:82:8d:13:cf:e6:
11:c4:bc:21:76:41:db:46:e4:58:7b:7d:35:0e:2f:
3c:c6:8d:98:ba:61:0b:34:72:ca:e6:df:8b:dc:4f:
0a:f0:25:af:da:e2:79:3a:b2:aa:39:8b:c5:86:38:
56:79:de:6f:f2:44:d7:66:4c:a6:a5:22:be:b6:85:
0e:28:c3:21:e3:f6:0a:20:a9:65:cd:4e:79:1e:6a:
25:6c:42:aa:95:21:bf:e4:be:3b:da:a0:91:92:aa:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:E6:3F:2D:9F:79:16:1C:C0:61:43:1C:40:C2:61:B4:19:72:2E
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/hyPmPy2feRYcwGFDHEDCYbQZci4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.80.0/22
217.113.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:89:e3:c8:4e:d4:33:e1:73:1d:33:f0:16:38:41:df:50:a1:
39:31:1a:85:55:91:b4:f4:32:d8:86:34:4d:a1:59:c4:ec:ca:
4c:f4:a3:c3:01:d8:49:69:d0:9e:0f:56:e0:83:e8:81:9e:c0:
69:62:80:aa:6d:8c:fc:b3:de:91:39:56:48:13:b8:53:9a:9d:
cc:be:8d:34:b9:90:b0:4c:7f:b1:52:f2:5d:8a:82:db:3c:36:
ed:50:21:5d:ae:cd:21:b6:25:8f:42:b5:c3:60:e1:83:d1:c6:
00:b5:9e:38:eb:24:e5:ae:76:4b:6e:7c:01:69:ae:e6:15:f7:
e1:fd:e6:0a:f1:6f:eb:cb:90:91:3e:be:a9:f7:e7:18:89:1b:
1e:27:1a:b2:ad:4f:a4:27:e0:1c:2c:5e:d2:32:6e:86:6a:37:
43:d0:c1:dc:d5:99:18:85:fb:8f:cf:b6:83:59:86:84:e4:37:
24:bc:80:89:25:03:70:fd:fe:92:b9:73:c3:1f:93:d9:89:9d:
7c:d2:37:1a:3b:bc:c0:f9:d7:71:d1:c4:9c:47:89:f1:5a:33:
4e:7e:ec:db:8b:16:c0:51:bf:88:31:16:c2:8b:21:fc:e4:0d:
5e:71:66:c3:dd:9e:23:19:db:e1:8a:48:a0:a5:7b:2b:cf:b4:
ee:07:e8:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9aWm6h0/QKIBAfbqxubJ1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjYwNzEzMDcyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzIzZTYzZjJkOWY3OTE2MWNjMDYxNDMxYzQwYzI2MWI0MTk3MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7YFVbr33h9gnBpb4G12rqW+Iy1W
SNuzcwMa7t+DTbi6vUGkeOVdTsO7WzQyRteww53/NA5bryEoHbuqBvXIZjXI4NwV
/Xgy9Oeb/Um9ZQgXiCgXmTuelE+jDWlVAYaJI4bm+Xiw1d/5FKRflLeuyoQMZtyJ
1CdFsSmJgZ6Tp8vPDpUam5PRzkkuqD/V0a7OdOornqfpzMtOQ2vgGptugo0Tz+YR
xLwhdkHbRuRYe301Di88xo2YumELNHLK5t+L3E8K8CWv2uJ5OrKqOYvFhjhWed5v
8kTXZkympSK+toUOKMMh4/YKIKllzU55HmolbEKqlSG/5L472qCRkqrmewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIcj5j8tn3kWHMBhQxxAwmG0GXIuMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvaHlQbVB5MmZlUlljd0dGREhFRENZYlFaY2k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBYZQAwQD
2XEAMA0GCSqGSIb3DQEBCwUAA4IBAQBsiePITtQz4XMdM/AWOEHfUKE5MRqFVZG0
9DLYhjRNoVnE7MpM9KPDAdhJadCeD1bgg+iBnsBpYoCqbYz8s96ROVZIE7hTmp3M
vo00uZCwTH+xUvJdioLbPDbtUCFdrs0htiWPQrXDYOGD0cYAtZ446yTlrnZLbnwB
aa7mFffh/eYK8W/ry5CRPr6p9+cYiRseJxqyrU+kJ+AcLF7SMm6GajdD0MHc1ZkY
hfuPz7aDWYaE5DckvICJJQNw/f6SuXPDH5PZiZ180jcaO7zA+ddx0cScR4nxWjNO
fuzbixbAUb+IMRbCiyH85A1ecWbD3Z4jGdvhikigpXsrz7TuB+iA
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:51 2026 by rpki-client