Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/HSSRUKBEGAwzctbuSfK5pqFW7og.roa
File: HSSRUKBEGAwzctbuSfK5pqFW7og.roa (raw, json)
Hash identifier: JzHF9cnYKiNULXtoW5fjwRQd1kJW6OGN1ZbOkNwiJFU=
Subject key identifier: 1D:24:91:50:A0:44:18:0C:33:72:D6:EE:49:F2:B9:A6:A1:56:EE:88
Certificate issuer: /CN=68d542f47276148fac7b8994efcd2af10e7a484a
Certificate serial: 019F2368FE2EC40486C21A6F2A33B250FFD6
Authority key identifier: 68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/HSSRUKBEGAwzctbuSfK5pqFW7og.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12601
IP address blocks: 64.126.192.0/23 maxlen: 23
64.126.194.0/23 maxlen: 23
64.126.200.0/22 maxlen: 22
64.126.208.0/24 maxlen: 24
64.126.209.0/24 maxlen: 24
64.126.212.0/22 maxlen: 22
64.126.212.0/24 maxlen: 24
80.94.176.0/22 maxlen: 22
80.94.182.0/23 maxlen: 23
80.94.184.0/24 maxlen: 24
80.94.185.0/24 maxlen: 24
80.94.188.0/23 maxlen: 23
185.113.40.0/22 maxlen: 22
185.194.80.0/22 maxlen: 22
185.211.140.0/22 maxlen: 22
194.5.134.0/24 maxlen: 24
194.126.236.0/24 maxlen: 24
213.159.9.0/24 maxlen: 24
2a00:1220:4000::/34 maxlen: 34
2a00:1220:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:2e:c4:04:86:c2:1a:6f:2a:33:b2:50:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d542f47276148fac7b8994efcd2af10e7a484a
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d249150a044180c3372d6ee49f2b9a6a156ee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:52:53:ba:f6:bc:d4:fd:90:8b:74:05:cf:
88:a2:51:68:8a:9a:a9:9d:f9:10:5f:cf:4b:f3:ce:
de:0e:bd:36:c5:df:03:04:e1:0a:4d:ee:bc:c5:97:
ef:9c:de:11:06:67:9a:92:ce:1a:e1:f8:47:f5:33:
ba:cd:9d:70:94:e9:4c:6d:9e:8f:a5:d0:9c:04:46:
12:08:67:05:a7:68:78:63:20:d8:3d:77:d8:a2:7c:
dd:22:bc:30:ec:73:88:21:2a:23:41:bb:3f:37:fb:
c9:ec:3f:e0:0d:80:44:ce:d5:cf:2d:cb:ae:ef:3d:
99:f0:84:40:de:1b:a3:ca:09:91:84:e8:db:55:a3:
93:3c:8d:c1:1d:bf:86:1c:60:3a:fa:30:c3:89:12:
19:c4:57:05:02:78:7d:57:bb:3b:9d:82:2f:c6:d0:
b9:77:65:3c:ba:da:66:c3:87:d4:fe:8f:25:ad:c5:
89:d6:66:a4:bc:03:cf:09:1a:33:3a:6e:65:7d:8e:
37:b6:3d:c9:5b:19:cb:2d:7f:f4:3a:8c:23:cb:ca:
3e:f5:ea:cd:bd:7d:e7:b1:ed:eb:99:ba:6e:e2:1b:
6d:f8:b2:f9:ee:7e:b2:0d:97:68:15:b9:48:9f:1a:
48:10:16:2b:d4:98:7a:3a:be:e9:5d:99:6e:84:f5:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:91:50:A0:44:18:0C:33:72:D6:EE:49:F2:B9:A6:A1:56:EE:88
X509v3 Authority Key Identifier:
keyid:68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/HSSRUKBEGAwzctbuSfK5pqFW7og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.126.192.0/22
64.126.200.0/22
64.126.208.0/23
64.126.212.0/22
80.94.176.0/22
80.94.182.0-80.94.185.255
80.94.188.0/23
185.113.40.0/22
185.194.80.0/22
185.211.140.0/22
194.5.134.0/24
194.126.236.0/24
213.159.9.0/24
IPv6:
2a00:1220:4000::-2a00:1220:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:bf:5c:19:af:16:ed:a8:38:32:f5:84:d8:6c:e7:33:5e:8e:
2f:b3:09:c9:3e:f3:ce:31:1d:2d:34:f0:75:59:75:9b:f6:b3:
6c:dd:b3:75:cc:ab:91:eb:ae:ca:a8:2d:d1:e1:7e:47:33:99:
f9:71:21:ef:75:3f:26:b2:7b:a2:28:6a:a4:7c:53:7e:eb:fc:
5c:35:85:29:6d:9a:33:81:84:84:3e:cb:ee:b7:68:1b:d6:a1:
98:66:1f:2e:d2:0a:3f:f4:8c:3d:a3:3a:62:50:d3:18:6d:be:
1f:35:d3:0c:06:ca:f6:1b:13:12:df:9e:aa:a0:7b:f8:cb:32:
16:79:12:d2:37:44:71:b4:88:95:16:9c:aa:65:0d:ed:91:df:
af:4a:83:99:ad:9f:84:d5:d7:2a:87:44:13:a3:17:38:31:40:
a9:09:71:1d:71:95:df:cd:a7:01:9a:31:9c:4e:35:93:7f:4c:
37:d6:b3:f4:81:4b:6d:16:d1:54:8b:36:31:8a:1a:dc:b5:84:
7f:c2:38:7f:bc:45:1e:87:14:0a:d1:9f:ab:31:cf:00:74:58:
64:f9:e8:54:e0:28:b2:90:d8:79:00:52:cd:28:ea:b5:f9:3a:
a1:69:e3:c7:ea:ec:b1:f7:23:f4:7a:89:6e:44:c7:a1:7e:55:
04:d1:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:56:47 2026 by rpki-client