Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/hgQSUnJubAL4-EZRnXtz-EERDh8.roa
File: hgQSUnJubAL4-EZRnXtz-EERDh8.roa (raw, json)
Hash identifier: /WEvukiM8zuCEI80FycN6ubUk7Q1iYXiN7WF7p6NooQ=
Subject key identifier: 86:04:12:52:72:6E:6C:02:F8:F8:46:51:9D:7B:73:F8:41:11:0E:1F
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 019DCE4C196BAEE87350088B1BD00831050C
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/hgQSUnJubAL4-EZRnXtz-EERDh8.roa
Signing time: Mon 27 Apr 2026 09:36:26 +0000
ROA not before: Mon 27 Apr 2026 09:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 155.231.208.0/24 maxlen: 24
155.231.209.0/24 maxlen: 24
195.104.228.0/24 maxlen: 24
195.104.229.0/24 maxlen: 24
195.104.230.0/24 maxlen: 24
195.104.231.0/24 maxlen: 24
195.104.236.0/24 maxlen: 24
195.105.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:4c:19:6b:ae:e8:73:50:08:8b:1b:d0:08:31:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Apr 27 09:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86041252726e6c02f8f846519d7b73f841110e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:b7:08:51:7f:38:f5:d2:e7:a4:e5:51:58:
ba:e7:4e:0c:41:aa:a3:a1:be:28:67:9e:df:d8:02:
ae:61:f7:99:ba:4e:fc:96:c5:3d:dd:7e:13:e3:5e:
02:cb:91:bf:ec:17:88:47:71:11:78:61:76:7a:8d:
c9:16:f0:49:73:3f:3f:1c:21:e6:05:74:05:7e:a0:
06:34:1a:53:43:33:0a:0a:9e:f2:9b:e1:c9:98:c8:
fe:73:30:fc:5e:29:40:ed:c4:e9:03:f0:65:51:fc:
fa:d5:60:48:a9:25:97:c2:df:d5:06:4c:18:32:fd:
72:a7:99:83:c3:bc:ae:c6:b0:62:9e:3d:98:b7:bb:
aa:41:5e:bb:9c:26:4d:55:fc:ae:71:e7:7b:c8:5d:
42:9e:f5:84:92:75:4e:c0:39:4d:8d:b5:e9:f1:30:
3b:3e:a0:6c:2c:52:2f:6a:65:d6:e9:54:d8:c2:da:
ac:0c:22:c1:bd:32:86:35:d0:eb:8f:cd:c0:fd:73:
2d:94:f1:ef:03:ea:81:b3:8e:aa:3b:62:8d:6b:d9:
d3:82:65:2f:7e:1f:44:a6:b8:7c:1f:9d:8f:b3:33:
93:2c:e0:e5:d9:09:9b:a3:31:89:60:3b:bf:f0:80:
df:8b:6d:ce:da:d7:48:5b:48:04:66:71:97:0f:7d:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:12:52:72:6E:6C:02:F8:F8:46:51:9D:7B:73:F8:41:11:0E:1F
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/hgQSUnJubAL4-EZRnXtz-EERDh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.208.0/23
195.104.228.0/22
195.104.236.0/24
195.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
40:05:c4:14:c7:a8:b9:ed:4f:f8:ab:81:2f:ef:0a:29:59:42:
cc:ce:35:e0:34:40:0b:3e:0d:b9:c4:7f:53:83:a8:b5:d3:ca:
6f:5a:58:65:1d:8e:de:76:2b:7d:ea:3d:3d:d0:b3:78:11:21:
b7:19:07:01:74:9d:c7:d2:80:e7:2a:12:b3:d0:6d:5d:8c:f1:
7b:0f:1e:0c:1c:02:95:c8:98:d6:3d:e6:62:51:d8:7b:98:5f:
14:51:dc:86:de:ea:05:bc:47:b1:75:55:91:0a:42:d0:17:6b:
9c:a7:68:7c:7d:86:38:33:1a:1d:63:41:f5:ca:50:eb:e4:c4:
e7:05:f2:c3:84:dd:b6:72:d2:e7:87:6a:34:3b:64:97:73:f1:
50:cf:66:6b:5d:e5:d7:da:82:d7:ca:62:01:b2:f9:13:70:e0:
a9:9b:3b:ea:a4:3e:85:3d:3a:af:cb:e6:74:63:83:e1:f8:84:
21:e5:f4:e3:27:b7:60:20:23:c2:3b:0d:4e:60:88:d6:d5:b3:
67:da:50:de:68:7a:f6:11:7c:78:63:b8:c1:ef:80:f3:8a:ce:
21:34:52:3a:c8:e3:25:39:21:86:51:29:24:fc:0b:32:0e:37:
b2:43:c1:41:32:0f:7d:07:c2:97:11:f9:66:11:b3:29:60:5d:
53:a3:8f:ed
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ3OTBlrruhzUAiLG9AIMQUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3
OTFkYjQwHhcNMjYwNDI3MDkzNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjA0MTI1MjcyNmU2YzAyZjhmODQ2NTE5ZDdiNzNmODQxMTEwZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGW3CFF/OPXS56TlUVi6504MQaqj
ob4oZ57f2AKuYfeZuk78lsU93X4T414Cy5G/7BeIR3EReGF2eo3JFvBJcz8/HCHm
BXQFfqAGNBpTQzMKCp7ym+HJmMj+czD8XilA7cTpA/BlUfz61WBIqSWXwt/VBkwY
Mv1yp5mDw7yuxrBinj2Yt7uqQV67nCZNVfyuced7yF1CnvWEknVOwDlNjbXp8TA7
PqBsLFIvamXW6VTYwtqsDCLBvTKGNdDrj83A/XMtlPHvA+qBs46qO2KNa9nTgmUv
fh9Eprh8H52PszOTLODl2QmbozGJYDu/8IDfi23O2tdIW0gEZnGXD3221wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIYEElJybmwC+PhGUZ17c/hBEQ4fMB8GA1UdIwQY
MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt
M2E2MTFjMDkzYTJjLzEvaGdRU1VuSnViQUw0LUVaUm5YdHotRUVSRGg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj
LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBm+fQAwQC
w2jkAwQAw2jsAwQAw2kaMA0GCSqGSIb3DQEBCwUAA4IBAQBABcQUx6i57U/4q4Ev
7wopWULMzjXgNEALPg25xH9Tg6i108pvWlhlHY7edit96j090LN4ESG3GQcBdJ3H
0oDnKhKz0G1djPF7Dx4MHAKVyJjWPeZiUdh7mF8UUdyG3uoFvEexdVWRCkLQF2uc
p2h8fYY4MxodY0H1ylDr5MTnBfLDhN22ctLnh2o0O2SXc/FQz2ZrXeXX2oLXymIB
svkTcOCpmzvqpD6FPTqvy+Z0Y4Ph+IQh5fTjJ7dgICPCOw1OYIjW1bNn2lDeaHr2
EXx4Y7jB74Dzis4hNFI6yOMlOSGGUSkk/AsyDjeyQ8FBMg99B8KXEflmEbMpYF1T
o4/t
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:52 2026 by rpki-client