Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/HuBqJxrPz8cJIEhWPQ734TMtT-k.roa
File: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (raw, json)
Hash identifier: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=
Subject key identifier: 1E:E0:6A:27:1A:CF:CF:C7:09:20:48:56:3D:0E:F7:E1:33:2D:4F:E9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019ED433FA43FB445C317E4D80377BCE26BD
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/HuBqJxrPz8cJIEhWPQ734TMtT-k.roa
Signing time: Wed 17 Jun 2026 06:10:36 +0000
ROA not before: Wed 17 Jun 2026 06:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35745
IP address blocks: 37.131.160.0/20 maxlen: 20
37.131.160.0/24 maxlen: 24
37.131.164.0/23 maxlen: 23
37.131.168.0/23 maxlen: 23
46.20.48.0/20 maxlen: 20
46.20.56.0/23 maxlen: 23
46.20.58.0/24 maxlen: 24
91.206.108.0/23 maxlen: 23
91.208.50.0/24 maxlen: 24
93.175.128.0/20 maxlen: 20
93.175.128.0/24 maxlen: 24
93.175.129.0/24 maxlen: 24
93.175.132.0/22 maxlen: 22
93.175.136.0/21 maxlen: 21
128.127.80.0/20 maxlen: 20
128.127.80.0/21 maxlen: 21
185.15.232.0/22 maxlen: 22
188.125.224.0/19 maxlen: 19
188.125.242.0/23 maxlen: 23
188.125.244.0/22 maxlen: 22
213.109.32.0/20 maxlen: 20
213.109.33.0/24 maxlen: 24
213.109.34.0/23 maxlen: 23
213.109.39.0/24 maxlen: 24
213.109.40.0/24 maxlen: 24
213.109.45.0/24 maxlen: 24
2a00:10a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:33:fa:43:fb:44:5c:31:7e:4d:80:37:7b:ce:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jun 17 06:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ee06a271acfcfc7092048563d0ef7e1332d4fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:fd:9f:f6:5c:7d:9f:03:49:7a:e8:51:3d:
be:0d:8b:6a:52:78:20:04:d1:ad:ea:6a:cd:4c:7f:
2f:4b:c7:70:22:33:f2:11:4a:1e:bb:16:2c:ed:37:
22:43:3e:bf:c4:57:7c:53:24:9d:cd:5e:71:07:cb:
42:a5:28:45:c0:99:a0:42:5e:5a:fe:ab:de:3b:24:
ef:9e:4e:21:9d:ab:d1:f2:7b:11:b0:6a:41:43:74:
6c:70:92:5a:a5:fd:27:e2:39:4a:6a:60:f7:a8:08:
4a:07:f2:80:45:54:0e:d6:db:ac:d2:80:3b:69:d2:
e8:64:e6:40:84:72:7e:09:ec:88:a8:d9:05:c6:63:
12:71:e9:31:39:84:f0:94:51:6b:e8:ef:f6:ba:e3:
b0:c5:c5:ad:36:8c:f1:1f:6f:78:56:e8:6e:8e:1e:
66:d3:77:30:64:30:1f:6c:27:32:bf:be:0b:fa:38:
4d:69:a0:51:77:b2:70:d2:a5:32:06:53:61:23:94:
3e:90:2a:94:a8:68:23:e4:fd:ac:7b:db:02:c8:98:
ce:d6:c2:cf:03:ac:4c:f6:86:c7:c1:01:c1:72:9e:
5c:c0:56:38:e5:42:6d:37:19:69:0a:07:f2:d2:df:
b0:2e:23:11:4d:79:24:a3:e3:48:9e:d0:a8:fc:29:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:6A:27:1A:CF:CF:C7:09:20:48:56:3D:0E:F7:E1:33:2D:4F:E9
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/HuBqJxrPz8cJIEhWPQ734TMtT-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.160.0/20
46.20.48.0/20
91.206.108.0/23
91.208.50.0/24
93.175.128.0/20
128.127.80.0/20
185.15.232.0/22
188.125.224.0/19
213.109.32.0/20
IPv6:
2a00:10a0::/32
Signature Algorithm: sha256WithRSAEncryption
44:8d:dc:2d:37:4c:c5:11:01:42:ec:10:a0:3e:df:e2:95:de:
0f:d3:20:9e:6c:d9:f5:6d:9d:04:30:0b:ee:bb:e9:6a:15:ec:
58:f5:93:6e:72:a1:a1:15:43:ce:f4:12:06:8a:d4:6c:5b:fe:
f0:4a:89:84:84:9d:3a:01:dd:41:1d:b5:3e:d0:ca:7f:e8:7e:
9a:b1:78:ce:e1:78:37:d1:31:60:00:19:95:e7:38:89:63:6e:
40:02:2c:a8:f9:0f:a6:36:a4:5b:d1:ff:2b:2a:41:a0:4e:d5:
31:b4:52:6e:c7:29:5d:a8:c6:a6:95:1d:99:89:80:90:bd:63:
c3:99:fa:78:79:b7:db:8b:02:13:e5:80:c3:78:a3:91:82:64:
92:ab:1d:c8:9c:19:38:63:6e:cf:bf:70:50:d6:48:60:55:be:
76:6f:14:d0:f9:2a:cc:7f:4f:2b:16:06:b6:20:8e:10:94:45:
fb:ac:cb:21:f0:3c:f3:a3:d1:e5:bf:7f:d2:a3:1a:e3:5f:f9:
ef:11:7e:18:ef:fb:d3:93:12:85:5e:77:62:e8:a9:15:b7:e5:
c5:e4:b7:a1:89:64:1f:e0:40:5d:3b:7d:46:a9:c5:a8:e8:32:
bf:65:13:fd:cb:79:86:94:d0:03:57:95:b3:49:68:a0:64:87:
2d:a1:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:09 2026 by rpki-client