Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/Huo4v4tY2uen4ePCEgqNNKeOpvs.roa
File: Huo4v4tY2uen4ePCEgqNNKeOpvs.roa (raw, json)
Hash identifier: C+3OeFCf2CN5SiRHvpAmYRQyu35YF1gv9VB5KKALnKw=
Subject key identifier: 1E:EA:38:BF:8B:58:DA:E7:A7:E1:E3:C2:12:0A:8D:34:A7:8E:A6:FB
Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f
Certificate serial: 019DDED2A209740E09885C77E603CEE2FF92
Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/Huo4v4tY2uen4ePCEgqNNKeOpvs.roa
Signing time: Thu 30 Apr 2026 14:37:19 +0000
ROA not before: Thu 30 Apr 2026 14:37:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202089
IP address blocks: 89.127.252.0/23 maxlen: 23
89.127.252.0/24 maxlen: 24
89.127.253.0/24 maxlen: 24
95.141.112.0/20 maxlen: 20
95.141.112.0/24 maxlen: 24
95.141.113.0/24 maxlen: 24
95.141.114.0/24 maxlen: 24
95.141.115.0/24 maxlen: 24
95.141.116.0/24 maxlen: 24
95.141.117.0/24 maxlen: 24
95.141.118.0/24 maxlen: 24
95.141.119.0/24 maxlen: 24
95.141.120.0/24 maxlen: 24
95.141.121.0/24 maxlen: 24
95.141.122.0/24 maxlen: 24
95.141.123.0/24 maxlen: 24
95.141.124.0/24 maxlen: 24
95.141.125.0/24 maxlen: 24
95.141.126.0/24 maxlen: 24
95.141.127.0/24 maxlen: 24
185.105.136.0/22 maxlen: 22
185.105.136.0/24 maxlen: 24
185.105.137.0/24 maxlen: 24
185.105.138.0/24 maxlen: 24
185.105.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:d2:a2:09:74:0e:09:88:5c:77:e6:03:ce:e2:ff:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f
Validity
Not Before: Apr 30 14:37:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eea38bf8b58dae7a7e1e3c2120a8d34a78ea6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:b2:dd:b7:78:dc:4a:5d:c3:d4:99:ce:52:
c1:bb:04:70:15:4d:bd:50:c6:68:cb:ab:78:f3:16:
ff:e2:bf:1c:06:5d:1b:bb:7b:8c:c0:73:dd:a7:40:
f8:73:99:bb:9d:30:dc:b7:0a:23:05:f5:ba:b3:a9:
93:28:bc:b2:eb:5f:af:55:4b:63:0d:d2:58:85:4f:
0c:43:4a:31:02:21:9c:34:43:e0:25:18:af:83:f2:
80:09:31:c4:f1:cd:b7:9d:7b:23:35:13:62:86:6c:
1c:de:98:d2:74:84:d6:3c:1a:c4:77:41:da:3d:12:
91:b5:9b:e9:a4:11:1e:7d:f6:91:77:0d:2f:d4:48:
79:2d:7c:c0:66:cd:52:61:cf:8a:c7:33:79:48:70:
7d:19:07:0d:66:4a:b0:4e:56:11:74:32:00:5e:2b:
2f:08:2e:65:f6:98:47:a6:1e:af:28:3a:e5:6f:a0:
48:48:82:cd:f7:75:3b:fe:02:24:5d:d6:2d:4d:5d:
31:dd:95:1a:a2:fd:c0:dd:ec:b7:b0:a1:7d:1f:84:
02:f9:78:ff:9a:1f:a3:77:74:15:de:f1:4c:34:fa:
0c:00:20:41:41:68:e4:8c:b3:95:20:65:b5:e0:25:
e8:e4:dc:96:63:62:a2:ff:f4:7c:84:6f:63:3f:9e:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:38:BF:8B:58:DA:E7:A7:E1:E3:C2:12:0A:8D:34:A7:8E:A6:FB
X509v3 Authority Key Identifier:
keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/Huo4v4tY2uen4ePCEgqNNKeOpvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.127.252.0/23
95.141.112.0/20
185.105.136.0/22
Signature Algorithm: sha256WithRSAEncryption
af:cd:48:7b:93:d2:5d:06:21:58:13:c5:d8:9d:d1:1c:72:66:
eb:e2:45:ef:0f:e7:d2:13:d8:47:0a:06:10:23:61:45:c5:3f:
64:fa:fa:48:fa:0a:af:f8:2d:28:95:ea:13:3c:9c:f1:5d:24:
d4:f8:42:73:e9:0e:ed:af:65:e0:c2:4c:af:38:54:1c:68:bb:
c8:bb:05:79:87:19:69:dc:fa:b5:dc:fd:ba:70:2e:f8:d0:9d:
61:72:20:86:47:a1:9d:bc:b8:93:42:13:8d:fe:7b:11:69:f5:
d4:67:96:68:5a:57:bd:b1:ba:b9:ef:f8:e1:d1:78:d9:60:da:
09:e9:84:82:ef:0d:b8:dd:c4:0f:a6:e4:80:e0:1d:6c:1c:4c:
9f:dd:22:a5:c8:8f:6c:17:5a:2f:99:79:46:15:28:ea:ac:cd:
53:d3:14:8d:1a:95:a4:42:d4:c3:60:a0:7a:71:24:0b:d0:eb:
b4:69:59:88:69:e3:63:78:6d:49:49:41:ca:fb:43:b5:33:04:
de:6d:27:c2:4e:a7:82:52:3d:67:a4:49:15:e2:e9:52:e0:07:
cf:bc:de:b7:87:34:da:61:26:a4:6e:30:2b:38:1f:48:da:c9:
c3:93:cc:f1:a1:4e:40:d6:8c:66:97:8c:f4:f2:cd:ae:63:79:
03:83:97:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ3e0qIJdA4JiFx35gPO4v+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzJkY2E0ZWZiMDhjNzFhN2FmMDZiZWMwMjFjODg3MTMw
ZDQ3OGYwHhcNMjYwNDMwMTQzNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWVhMzhiZjhiNThkYWU3YTdlMWUzYzIxMjBhOGQzNGE3OGVhNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGWy3bd43Epdw9SZzlLBuwRwFU29
UMZoy6t48xb/4r8cBl0bu3uMwHPdp0D4c5m7nTDctwojBfW6s6mTKLyy61+vVUtj
DdJYhU8MQ0oxAiGcNEPgJRivg/KACTHE8c23nXsjNRNihmwc3pjSdITWPBrEd0Ha
PRKRtZvppBEeffaRdw0v1Eh5LXzAZs1SYc+KxzN5SHB9GQcNZkqwTlYRdDIAXisv
CC5l9phHph6vKDrlb6BISILN93U7/gIkXdYtTV0x3ZUaov3A3ey3sKF9H4QC+Xj/
mh+jd3QV3vFMNPoMACBBQWjkjLOVIGW14CXo5NyWY2Ki//R8hG9jP56qeQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB7qOL+LWNrnp+HjwhIKjTSnjqb7MB8GA1UdIwQY
MBaAFMUy3KTvsIxxp68GvsAhyIcTDUePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRMY3BPLXdqSEducndhLXdDSEloeE1OUjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NzdiMjItYTgxZi00YmNmLWJjNzUt
YzkyYTkwYzEyMWU4LzEvSHVvNHY0dFkydWVuNGVQQ0VncU5OS2VPcHZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NzdiMjItYTgxZi00YmNmLWJjNzUtYzkyYTkwYzEyMWU4
LzEveFRMY3BPLXdqSEducndhLXdDSEloeE1OUjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWX/8AwQE
X41wAwQCuWmIMA0GCSqGSIb3DQEBCwUAA4IBAQCvzUh7k9JdBiFYE8XYndEccmbr
4kXvD+fSE9hHCgYQI2FFxT9k+vpI+gqv+C0oleoTPJzxXSTU+EJz6Q7tr2Xgwkyv
OFQcaLvIuwV5hxlp3Pq13P26cC740J1hciCGR6GdvLiTQhON/nsRafXUZ5ZoWle9
sbq57/jh0XjZYNoJ6YSC7w243cQPpuSA4B1sHEyf3SKlyI9sF1ovmXlGFSjqrM1T
0xSNGpWkQtTDYKB6cSQL0Ou0aVmIaeNjeG1JSUHK+0O1MwTebSfCTqeCUj1npEkV
4ulS4AfPvN63hzTaYSakbjArOB9I2snDk8zxoU5A1oxml4z08s2uY3kDg5c2
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:02:13 2026 by rpki-client