Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HKJt-t8Thc7M4oyMAKJGCIOumPU.roa
File: HKJt-t8Thc7M4oyMAKJGCIOumPU.roa (raw, json)
Hash identifier: wIMaCh3ZtpiI8G5MXjWL9Oh9DA50qELLW33EjLUbhwE=
Subject key identifier: 1C:A2:6D:FA:DF:13:85:CE:CC:E2:8C:8C:00:A2:46:08:83:AE:98:F5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C2D18E08CCFAFBE9BADC7284F27871CD
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HKJt-t8Thc7M4oyMAKJGCIOumPU.roa
Signing time: Mon 21 Sep 2026 07:15:08 +0000
ROA not before: Mon 21 Sep 2026 07:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.107.88.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.197.0/24 maxlen: 24
82.152.200.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.119.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.66.0/24 maxlen: 24
89.213.67.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d1:8e:08:cc:fa:fb:e9:ba:dc:72:84:f2:78:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 07:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ca26dfadf1385cecce28c8c00a2460883ae98f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:f1:87:07:cc:fd:fd:09:fb:18:69:c8:6c:
f6:fb:4e:20:10:b8:a9:57:c3:b8:34:64:1d:19:24:
60:b0:36:ea:59:07:34:7f:0e:16:4d:39:52:fc:6e:
df:ce:98:e4:49:53:fe:fb:0e:3f:98:4b:7c:ac:44:
58:38:92:e8:4a:11:1b:e7:84:33:95:d1:60:97:3f:
57:9e:12:d5:12:c5:7c:b7:4e:ce:dc:0f:b9:6d:db:
11:03:7f:ed:ce:a3:ac:f0:04:f2:3b:70:16:8f:a8:
44:1a:e8:1e:21:f5:c2:1d:29:c7:f6:d1:14:3b:e4:
c4:a2:72:3a:37:e1:c1:46:65:0a:c6:b7:bd:ed:bb:
1e:9a:55:1d:10:f3:1d:0e:8c:05:0e:d0:c3:f4:bd:
4f:0d:85:57:9d:6a:23:df:e9:b3:51:dc:62:e9:a0:
96:94:0b:1f:c6:4b:4f:ef:3f:2d:cd:d2:ad:c8:6d:
ed:cc:5f:51:b9:bd:60:d2:e4:b3:44:ff:c3:e2:e5:
e5:77:3c:e1:f0:4b:29:9e:ac:2d:9a:4f:69:8e:6f:
cb:5c:47:00:bc:3b:50:34:6d:28:02:78:a5:ff:96:
4c:82:a2:c6:19:27:d6:af:a4:ea:4d:6d:c7:89:12:
c9:aa:a0:fa:0d:94:75:81:11:7b:40:d8:e0:fb:49:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:6D:FA:DF:13:85:CE:CC:E2:8C:8C:00:A2:46:08:83:AE:98:F5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HKJt-t8Thc7M4oyMAKJGCIOumPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.88.0/24
80.240.94.0/24
81.168.32.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.197.0/24
82.152.200.0/24
82.152.211.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.119.0/24
82.153.205.0/24
89.213.66.0/23
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e6:6f:61:b5:7a:bd:72:2d:02:34:b7:d7:67:d6:d2:cc:98:
14:44:67:35:4c:c0:2f:1c:3b:02:a1:e4:c1:94:5d:eb:4f:10:
91:c5:41:69:a2:ab:ec:1f:2f:61:e7:c9:c3:74:6f:10:f6:97:
af:91:bc:43:06:ce:9b:77:17:5e:4f:5e:ae:ee:a8:68:8d:59:
87:ed:ac:ba:e8:49:74:e8:a6:c9:57:30:eb:d3:c0:ae:0b:e3:
b0:f7:ac:3b:07:97:8e:cb:88:58:a6:c8:0f:79:96:c5:6b:18:
d8:cd:60:96:83:e2:fc:a2:94:23:95:27:88:1c:bc:f9:da:29:
14:4d:0b:19:30:47:38:7c:c3:54:05:d3:89:55:b8:7e:36:93:
7e:00:17:08:22:58:8b:40:21:c7:ec:0c:0b:55:39:65:6b:cb:
dd:dd:2d:bb:9a:ba:f5:02:5f:65:d7:aa:27:8e:2f:7c:c9:f8:
7b:6a:47:7a:82:35:23:fa:9d:7a:81:e2:e7:e6:11:7b:81:3f:
4d:c9:ef:2e:25:12:e2:82:9a:15:66:05:aa:98:23:3a:d0:04:
9b:5b:89:cb:17:5b:ff:61:1c:e4:a6:8f:9a:18:50:24:7f:1a:
61:0f:56:6b:73:93:9a:c5:e3:a0:53:64:70:98:9c:2e:f1:cc:
3e:cc:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:44:55 2026 by rpki-client