Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/hHlbFAlqvd5BQcthbraH-DMYB8A.roa
File: hHlbFAlqvd5BQcthbraH-DMYB8A.roa (raw, json)
Hash identifier: WNUwiEZLkvGkVr3edrDoWpoXYrKZmK8eeC+uz8i6EEk=
Subject key identifier: 84:79:5B:14:09:6A:BD:DE:41:41:CB:61:6E:B6:87:F8:33:18:07:C0
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A1933DD65A443BE9539B47506EF8F7717B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/hHlbFAlqvd5BQcthbraH-DMYB8A.roa
Signing time: Sat 31 Oct 2026 18:34:25 +0000
ROA not before: Sat 31 Oct 2026 18:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
45.132.253.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
85.209.3.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.104.250.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.106.95.0/24 maxlen: 24
185.109.21.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
194.53.54.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0b:da00::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:3d:d6:5a:44:3b:e9:53:9b:47:50:6e:f8:f7:71:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Oct 31 18:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84795b14096abdde4141cb616eb687f8331807c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:d5:fa:a4:25:d1:58:55:6f:c4:1c:7f:ad:
12:0a:9e:47:1c:f8:3f:d7:7e:fa:3d:8d:86:23:06:
ad:58:4b:57:3b:c9:15:77:82:8d:c2:00:81:d3:ca:
15:b3:98:5e:29:cd:d4:9c:9a:ea:80:00:be:4e:1d:
a7:1a:01:f8:5e:93:ee:ce:6c:6d:bb:6e:b0:c5:39:
ff:73:49:93:30:d0:ef:b5:8c:72:2a:60:d4:e0:f4:
3f:db:90:bb:9a:af:d6:b6:6f:02:c8:49:f5:1a:40:
ee:b2:08:36:f2:f3:f0:68:34:1d:cb:24:08:54:c3:
bf:2f:2e:3d:f4:47:f8:d6:f8:9e:40:7e:1b:ab:d4:
02:26:34:ba:11:7b:b4:82:47:f8:61:a2:d2:5f:e2:
ce:37:ab:98:56:09:72:94:90:7b:03:e3:bc:c2:67:
dc:14:1b:72:11:f2:50:b7:94:25:21:c2:b6:da:6a:
60:f4:05:c6:a5:92:d8:e7:64:0e:30:54:6f:cf:63:
3d:26:6e:d8:75:c3:2f:7a:de:ab:03:c4:5c:28:5c:
c7:4c:ab:0f:98:ed:ce:84:3b:48:35:9a:ff:b6:e2:
b5:89:24:10:76:d9:d4:82:fc:25:ba:28:d5:f1:af:
4a:e7:4f:a0:85:54:02:3a:1e:3d:ba:74:d5:18:db:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:79:5B:14:09:6A:BD:DE:41:41:CB:61:6E:B6:87:F8:33:18:07:C0
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/hHlbFAlqvd5BQcthbraH-DMYB8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.9.74.0/24
45.89.64.0/24
45.132.253.0/24
45.133.245.0-45.133.246.255
46.17.106.0/24
85.209.0.0/24
85.209.3.0/24
95.214.8.0/24
139.28.220.0/23
185.17.2.0/24
185.58.207.0/24
185.94.167.0/24
185.104.250.0/24
185.105.118.0/24
185.106.95.0/24
185.109.21.0/24
185.112.83.0/24
185.112.100.0/24
185.125.228.0/24
185.125.230.0/23
185.188.181.0/24
185.229.65.0-185.229.66.255
192.162.100.0/24
192.162.102.0/23
193.0.200.0/24
193.0.202.0/23
193.109.84.0/23
193.124.180.0/23
194.36.177.0/24
194.53.54.0/24
194.63.140.0/22
194.67.200.0/24
195.66.87.0/24
IPv6:
2a0a:9300:1::/48
2a0a:9300:aaaa::/48
2a0b:da00::/30
Signature Algorithm: sha256WithRSAEncryption
35:a1:54:3a:6c:0c:f8:fe:53:d8:16:de:f3:cf:4b:49:8e:01:
6c:32:26:06:b1:ab:3a:38:cb:15:c1:21:07:8f:1d:d7:51:40:
90:db:70:fe:66:0f:19:8c:6c:fa:91:ce:3c:36:98:ee:00:52:
b7:0e:43:fd:cc:86:16:04:e6:87:bb:c7:5a:35:39:f0:d5:30:
16:6f:6b:65:2c:17:07:5d:cc:dd:99:a2:ca:ac:78:2a:d8:3b:
85:52:6a:35:dd:44:96:78:aa:c2:d9:4a:96:17:64:93:d6:b7:
40:ba:48:6a:6b:df:1c:02:0f:eb:1e:7c:3d:51:19:ec:47:df:
04:1c:3a:15:40:e0:5e:8c:94:ca:49:9c:1f:82:da:bb:06:49:
b7:4c:ee:f6:31:08:be:62:61:5e:5f:cd:2d:7d:66:ff:da:95:
9f:40:c4:e9:bd:f8:74:bb:88:22:38:93:67:95:64:07:93:44:
0a:6f:b9:b2:e7:11:6b:77:e3:c3:32:7a:a3:f2:c7:a8:52:a2:
4e:de:c9:d1:8f:8b:08:c8:04:fe:41:41:80:25:b3:5b:f9:84:
ef:7c:8a:e4:73:94:c9:0e:f1:87:32:71:2c:15:b5:0a:3f:7c:
dd:30:ef:23:88:66:b8:f2:8a:e7:7b:42:b5:d0:35:b9:ed:9c:
b9:89:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:59 2026 by rpki-client