Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa
File: aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa (raw, json)
Hash identifier: FlQ4woD6r87CTo56VrPgZyPlvImZWFoOO8xKo56dALc=
Subject key identifier: 68:78:86:B3:F9:1F:55:2D:43:A2:2B:84:9D:F8:E5:51:9A:C6:57:B3
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 019F2F558D0D131C716242C1F00D22339F3F
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa
Signing time: Sat 04 Jul 2026 22:52:43 +0000
ROA not before: Sat 04 Jul 2026 22:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63473
IP address blocks: 45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
85.155.176.0/20 maxlen: 24
85.155.176.0/23 maxlen: 23
85.155.178.0/23 maxlen: 23
85.155.180.0/23 maxlen: 23
85.155.182.0/23 maxlen: 23
85.155.184.0/23 maxlen: 23
85.155.186.0/23 maxlen: 23
85.155.188.0/23 maxlen: 23
85.155.190.0/23 maxlen: 23
91.190.155.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
167.104.96.0/20 maxlen: 24
167.254.240.0/23 maxlen: 23
167.254.242.0/23 maxlen: 23
185.223.207.0/24 maxlen: 24
188.93.140.0/24 maxlen: 24
188.244.117.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
212.52.0.0/24 maxlen: 24
2a0e:dc0::/30 maxlen: 48
2a0e:dc0:1::/48 maxlen: 48
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:55:8d:0d:13:1c:71:62:42:c1:f0:0d:22:33:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Jul 4 22:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=687886b3f91f552d43a22b849df8e5519ac657b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:e1:bc:07:f3:d4:39:a2:fb:98:68:09:56:
36:36:d2:4e:df:70:a4:dd:8a:ea:81:93:16:c9:90:
b0:2b:8c:85:ea:2d:b5:f0:54:8f:67:89:81:26:43:
a8:35:f6:9d:c9:a3:0a:e6:a7:50:1e:dc:55:16:8e:
7a:0e:b8:b4:42:2f:b5:2b:f8:97:b5:61:8a:cf:47:
87:de:9f:2c:1d:19:3a:75:ae:b3:16:3c:b2:9f:a1:
60:90:60:33:ed:91:08:16:15:fb:2d:ec:63:dc:7b:
f6:d0:49:2f:92:e2:f9:9a:ab:ff:e9:5d:3a:6a:62:
6f:3c:4d:91:d6:c9:7d:e5:0d:39:12:c9:a7:2d:70:
b5:89:54:27:92:7e:f7:36:52:7d:36:01:cc:7d:98:
06:d2:1d:73:80:92:b9:cb:02:bd:9b:a0:8c:cc:7a:
97:cb:2c:7b:8a:87:0c:67:58:ea:2b:c5:4d:df:bc:
59:c2:85:26:2e:0d:e3:fd:34:17:29:13:89:66:8e:
f5:32:44:1d:3e:54:59:7e:f0:ed:82:72:a5:2b:4a:
78:62:2d:78:a2:70:18:7f:a6:65:5a:dc:60:d2:13:
e6:f4:10:2c:0e:1f:f0:b3:37:86:1f:8e:35:8c:8c:
8e:78:53:4e:27:69:61:c3:b9:ce:06:50:8e:fd:04:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:86:B3:F9:1F:55:2D:43:A2:2B:84:9D:F8:E5:51:9A:C6:57:B3
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
85.155.176.0/20
91.190.155.0/24
109.205.61.0/24
167.104.96.0/20
167.254.240.0/22
185.223.207.0/24
188.93.140.0/24
188.244.117.0/24
194.29.100.0/23
194.29.186.0/23
212.52.0.0/24
IPv6:
2a0e:dc0::/30
Signature Algorithm: sha256WithRSAEncryption
43:dc:bf:31:eb:29:10:78:e9:17:07:db:09:e2:4f:2a:e7:4f:
a8:e8:29:69:b2:4f:69:29:cf:6c:8b:29:88:99:0d:9b:5b:d1:
1a:a1:0b:6f:1b:a6:2d:0d:05:ab:c5:e6:c0:e5:83:e3:e9:21:
6c:23:69:5b:45:c9:67:4b:d0:56:e7:ef:5d:ef:3d:90:f3:75:
45:7d:5a:00:df:1f:de:96:44:5f:d4:d4:a6:07:9a:59:6d:dd:
6e:05:13:cf:2e:8f:49:d6:c6:01:7a:b5:50:37:dd:46:69:27:
0b:f6:c8:72:cc:9c:e7:63:74:3c:f4:99:fd:03:2b:e1:e1:5f:
20:8a:7b:96:01:2a:2f:8b:89:90:78:a4:99:aa:9c:73:19:86:
a0:4c:2c:5c:1f:ee:73:ec:9a:e2:01:a1:cf:7d:81:d1:06:b3:
5e:13:9e:60:fa:26:fc:43:46:dc:84:0b:cc:ac:79:6f:b1:b8:
69:04:b7:8f:4b:98:a6:59:a7:89:d8:ea:2f:96:e3:a7:a4:7b:
09:45:43:4d:47:3d:bf:21:af:f5:db:5e:08:91:e9:fa:9d:b4:
d5:a8:93:a6:71:32:f5:60:e0:11:aa:a3:3a:95:a2:ea:ce:e5:
e0:12:27:a5:85:aa:43:73:36:04:d0:4c:28:63:67:9b:3e:a9:
81:87:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:48 2026 by rpki-client