Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/HYR7suAoxZFnHUn4UXq9B5vF84c.roa
File: HYR7suAoxZFnHUn4UXq9B5vF84c.roa (raw, json)
Hash identifier: OfYZDqFDE0JPzosM65TT4BEoJbyAfR8HJmA3MMGddgo=
Subject key identifier: 1D:84:7B:B2:E0:28:C5:91:67:1D:49:F8:51:7A:BD:07:9B:C5:F3:87
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 019CFB1085012D8BF71DC62BC2F057D334ED
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/HYR7suAoxZFnHUn4UXq9B5vF84c.roa
Signing time: Tue 17 Mar 2026 09:11:29 +0000
ROA not before: Tue 17 Mar 2026 09:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206238
IP address blocks: 31.14.180.0/23 maxlen: 23
45.81.170.0/23 maxlen: 23
91.132.40.0/22 maxlen: 22
178.239.16.0/22 maxlen: 24
185.160.74.0/23 maxlen: 23
188.212.112.0/22 maxlen: 22
188.213.88.0/21 maxlen: 24
194.145.194.0/23 maxlen: 23
217.148.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:10:85:01:2d:8b:f7:1d:c6:2b:c2:f0:57:d3:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Mar 17 09:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d847bb2e028c591671d49f8517abd079bc5f387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:04:f3:80:dd:80:4a:d3:bb:d3:82:f4:9b:
d8:d2:56:03:54:72:0d:e0:cd:38:34:84:33:8e:42:
d8:0c:77:75:b8:a8:9b:0d:51:16:5b:a1:14:4f:5c:
13:7f:37:33:d1:07:e8:4d:45:56:27:42:f6:a3:c2:
04:31:60:8e:fb:34:27:54:9e:69:00:39:e2:c3:a9:
7a:92:f9:10:86:35:4f:5a:78:14:1f:49:28:f1:f7:
8c:80:b9:e4:35:61:b1:d2:f8:7d:0a:79:c1:c8:59:
e7:a7:07:d8:c9:f3:d0:89:d1:61:7a:16:42:a5:a1:
51:0d:2b:ed:16:a2:c4:0a:a4:4a:cb:8b:bf:f0:45:
06:1b:ec:01:1d:df:56:a5:07:b8:48:83:0c:44:63:
6f:f8:2f:e5:0d:9e:78:d9:df:9d:9f:b5:e2:a7:59:
c7:15:03:5f:8e:3d:eb:99:aa:dd:bf:12:59:51:fd:
04:d6:58:58:a6:6f:12:81:ec:4e:62:79:89:b2:67:
6e:12:93:bb:fe:1e:e2:40:15:c0:e6:c5:4a:04:92:
93:59:c5:f1:c4:71:79:4b:cf:48:95:57:67:e7:45:
02:19:92:a8:09:b1:5d:33:05:0c:3b:61:86:d9:ef:
b0:e9:3f:ab:5d:4d:a6:a9:77:11:98:3e:b3:06:08:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:7B:B2:E0:28:C5:91:67:1D:49:F8:51:7A:BD:07:9B:C5:F3:87
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/HYR7suAoxZFnHUn4UXq9B5vF84c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.180.0/23
45.81.170.0/23
91.132.40.0/22
178.239.16.0/22
185.160.74.0/23
188.212.112.0/22
188.213.88.0/21
194.145.194.0/23
217.148.134.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a4:94:1f:72:0f:d2:82:fb:46:6a:1e:78:17:fb:7e:eb:29:
ff:cc:7a:44:e5:e8:a4:c3:a7:7d:a8:e1:c5:43:9d:e3:be:26:
05:07:56:eb:d0:e0:ff:4b:a5:8e:83:1f:52:0e:be:c6:54:4e:
19:0d:59:3a:37:26:86:58:c8:c1:59:35:1e:26:e0:f5:d8:61:
06:c5:82:03:c4:9a:7c:aa:a1:44:98:02:bd:bb:fa:8a:e2:31:
52:f2:16:6b:eb:5e:1f:e4:7b:1a:b2:25:e4:e8:7d:79:18:6f:
5f:42:96:1c:33:7a:bf:1f:c0:ef:12:20:d3:92:bc:8c:e7:a8:
ba:ab:5a:37:b7:ab:7c:dc:db:48:f2:59:89:b9:27:99:a6:4c:
21:bb:ae:71:81:e4:bb:19:51:12:09:b0:3c:54:f8:63:40:34:
ef:d2:fc:fe:60:eb:62:6b:cd:16:63:d7:68:89:53:53:3c:ba:
52:b2:9a:b1:4a:98:cf:ba:13:79:c4:3b:82:11:3a:10:e0:4b:
9c:e4:89:40:b4:05:d0:88:80:d9:f9:25:4f:e0:2a:a0:11:1b:
ae:f9:69:3b:6a:b5:6e:aa:9b:ca:c3:7d:df:65:2f:ae:12:58:
e4:4e:42:3b:97:63:73:8c:2e:f7:d6:c3:c2:12:79:b9:64:b6:
81:b3:d4:3f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZz7EIUBLYv3HcYrwvBX0zTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2
ZTg5OTYwHhcNMjYwMzE3MDkxMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDg0N2JiMmUwMjhjNTkxNjcxZDQ5Zjg1MTdhYmQwNzliYzVmMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8E84DdgErTu9OC9JvY0lYDVHIN
4M04NIQzjkLYDHd1uKibDVEWW6EUT1wTfzcz0QfoTUVWJ0L2o8IEMWCO+zQnVJ5p
ADniw6l6kvkQhjVPWngUH0ko8feMgLnkNWGx0vh9CnnByFnnpwfYyfPQidFhehZC
paFRDSvtFqLECqRKy4u/8EUGG+wBHd9WpQe4SIMMRGNv+C/lDZ542d+dn7Xip1nH
FQNfjj3rmardvxJZUf0E1lhYpm8SgexOYnmJsmduEpO7/h7iQBXA5sVKBJKTWcXx
xHF5S89IlVdn50UCGZKoCbFdMwUMO2GG2e+w6T+rXU2mqXcRmD6zBgiS3QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFB2Ee7LgKMWRZx1J+FF6vQebxfOHMB8GA1UdIwQY
MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt
ZjY2MzE3OTc3OTY4LzEvSFlSN3N1QW94WkZuSFVuNFVYcTlCNXZGODRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4
LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBHw60AwQB
LVGqAwQCW4QoAwQCsu8QAwQBuaBKAwQCvNRwAwQDvNVYAwQBwpHCAwQB2ZSGMA0G
CSqGSIb3DQEBCwUAA4IBAQBBpJQfcg/SgvtGah54F/t+6yn/zHpE5eikw6d9qOHF
Q53jviYFB1br0OD/S6WOgx9SDr7GVE4ZDVk6NyaGWMjBWTUeJuD12GEGxYIDxJp8
qqFEmAK9u/qK4jFS8hZr614f5HsasiXk6H15GG9fQpYcM3q/H8DvEiDTkryM56i6
q1o3t6t83NtI8lmJuSeZpkwhu65xgeS7GVESCbA8VPhjQDTv0vz+YOtia80WY9do
iVNTPLpSspqxSpjPuhN5xDuCEToQ4Euc5IlAtAXQiIDZ+SVP4CqgERuu+Wk7arVu
qpvKw33fZS+uEljkTkI7l2NzjC731sPCEnm5ZLaBs9Q/
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:06:54 2026 by rpki-client