Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/HZLY9WI4GIXtiYWfo4yHEoYT1XM.roa
File: HZLY9WI4GIXtiYWfo4yHEoYT1XM.roa (raw, json)
Hash identifier: T+Ay/vI5FtgSJpMrAE1oWUA6OzWQjny9x3es6X3cTlg=
Subject key identifier: 1D:92:D8:F5:62:38:18:85:ED:89:85:9F:A3:8C:87:12:86:13:D5:73
Certificate issuer: /CN=534a61abbfd0162cef00ff43108a7adf2e417f63
Certificate serial: 019DCF768F8E5EF48B779500C858E29CA933
Authority key identifier: 53:4A:61:AB:BF:D0:16:2C:EF:00:FF:43:10:8A:7A:DF:2E:41:7F:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/HZLY9WI4GIXtiYWfo4yHEoYT1XM.roa
Signing time: Mon 27 Apr 2026 15:02:26 +0000
ROA not before: Mon 27 Apr 2026 15:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25375
IP address blocks: 37.131.184.0/21 maxlen: 21
109.71.88.0/21 maxlen: 21
185.33.248.0/22 maxlen: 22
193.246.110.0/23 maxlen: 23
212.203.32.0/19 maxlen: 19
2a00:aac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:76:8f:8e:5e:f4:8b:77:95:00:c8:58:e2:9c:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534a61abbfd0162cef00ff43108a7adf2e417f63
Validity
Not Before: Apr 27 15:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d92d8f562381885ed89859fa38c87128613d573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:78:85:03:9b:70:7c:5c:2b:78:94:b5:a1:
de:9f:91:63:e4:57:e2:35:68:68:09:b4:85:0d:af:
fc:40:da:7b:f3:f7:44:01:78:88:19:0d:e2:71:f3:
f3:c4:78:ad:30:71:9d:04:09:12:86:75:03:32:69:
4a:83:9c:33:e8:8c:63:5e:fd:e4:57:4f:7b:fe:08:
21:14:8f:e9:49:51:26:3b:59:05:10:ad:97:6c:74:
3f:27:55:98:f2:fe:0c:44:f5:83:4a:3f:c0:ca:ca:
3d:58:be:76:8c:0d:59:cd:9b:e9:9e:79:39:a7:5f:
53:5f:20:24:3c:74:b7:32:82:3c:6f:a8:e2:48:7a:
22:be:5f:a6:c5:54:e9:0b:db:cb:61:22:21:d2:33:
d0:db:db:fc:81:e5:22:fa:58:d7:77:e4:b4:80:f9:
75:a9:6c:3d:17:c8:6d:60:89:a1:4d:29:55:10:b4:
7d:d6:b9:bc:f4:76:fd:65:54:56:72:17:80:de:c5:
f5:ea:5b:c4:2a:b6:9c:80:b5:6b:9c:56:4b:f2:0b:
a0:de:f6:3c:2d:fb:f9:24:e7:3c:ef:90:95:8b:b2:
2b:0b:fb:7f:d6:e3:35:d7:f5:ff:55:fe:26:0c:bb:
74:5b:76:bc:fc:11:9d:18:b7:c1:e8:0d:4b:83:7e:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:D8:F5:62:38:18:85:ED:89:85:9F:A3:8C:87:12:86:13:D5:73
X509v3 Authority Key Identifier:
keyid:53:4A:61:AB:BF:D0:16:2C:EF:00:FF:43:10:8A:7A:DF:2E:41:7F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/HZLY9WI4GIXtiYWfo4yHEoYT1XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.184.0/21
109.71.88.0/21
185.33.248.0/22
193.246.110.0/23
212.203.32.0/19
IPv6:
2a00:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:c2:47:ca:00:8c:4c:55:18:5c:30:bc:6c:a9:b7:55:bd:ce:
9a:7c:c8:4f:49:0a:79:e5:79:23:fb:0a:43:17:32:c6:0b:09:
93:7b:67:23:61:fd:b0:93:33:dc:86:97:fc:55:ea:21:50:58:
64:fe:ad:7b:98:7b:cc:b0:00:84:7f:d9:96:7f:7e:2d:9a:5c:
4f:78:3c:91:44:f4:88:71:fa:b2:b0:5c:cd:f3:07:48:92:70:
68:70:30:94:c9:c0:94:94:a5:eb:bf:cf:c7:7f:53:e2:0b:67:
b9:fe:65:20:55:8b:da:fe:38:23:4c:ce:86:89:78:98:62:17:
82:ea:a8:49:ee:08:4c:a4:71:ac:50:2a:78:25:14:e9:8e:7c:
78:45:0c:7a:30:9d:ae:c9:94:94:83:9a:4f:28:da:a6:0f:5e:
b1:20:3e:d6:74:38:9a:28:67:f2:fc:f6:87:e1:94:61:a0:6b:
3f:a2:17:60:81:82:96:ce:0a:83:75:3c:95:41:7b:e4:0e:e8:
5f:95:ca:d5:8d:57:9b:79:e8:96:ab:2e:a1:c6:27:93:ad:fa:
59:32:d3:a9:55:b9:c2:e1:4b:df:bc:e7:5a:0c:8c:a0:ff:89:
b2:0f:fc:df:98:73:e2:d9:7d:d4:ee:5e:c8:b5:11:cd:27:14:
86:ae:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:51 2026 by rpki-client