Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HGI7Gj5Wt3XPF_wVUIsUFgUNghI.roa
File: HGI7Gj5Wt3XPF_wVUIsUFgUNghI.roa (raw, json)
Hash identifier: w2PJcEzvTOSjGzFjAX45+IutqIB0ucg7R8zZ//K7w1I=
Subject key identifier: 1C:62:3B:1A:3E:56:B7:75:CF:17:FC:15:50:8B:14:16:05:0D:82:12
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019E1BD7A104C1BB74BA3D8B979B604B815F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HGI7Gj5Wt3XPF_wVUIsUFgUNghI.roa
Signing time: Tue 12 May 2026 10:59:36 +0000
ROA not before: Tue 12 May 2026 10:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d7:a1:04:c1:bb:74:ba:3d:8b:97:9b:60:4b:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 12 10:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c623b1a3e56b775cf17fc15508b1416050d8212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:be:8c:a1:03:01:35:11:28:a0:11:f1:8d:
f9:ad:b7:1d:d0:32:ac:cf:3b:e5:1b:e5:61:47:58:
63:aa:24:64:fc:31:4a:46:16:43:d0:1d:c8:69:2e:
5b:48:39:ea:77:45:a2:0d:73:2a:83:dd:2a:d5:8d:
29:6a:d5:da:1c:ba:d3:2b:4b:3c:75:a3:36:e7:0a:
33:04:5f:c9:1f:94:e0:ee:a9:ac:2c:97:d1:ce:57:
31:20:a4:6c:22:88:ab:9b:14:9d:72:f7:44:e9:5f:
5a:0a:3c:be:ed:b1:37:85:92:e2:92:14:3c:b5:25:
be:d3:df:a9:6d:08:91:50:ad:ad:66:d2:67:75:4a:
f9:dc:11:d9:0a:98:7d:b5:af:0f:b9:30:f1:f2:58:
a2:10:2f:7a:fc:a5:03:ad:fc:f7:6b:ad:e4:36:f1:
01:40:e7:e2:f5:44:66:f1:9d:b0:27:f3:c1:36:43:
4f:80:06:e1:56:12:4a:b8:7b:f0:b7:10:da:af:ef:
13:8b:ee:17:6a:a6:4f:d4:ad:d8:37:78:1f:d1:6f:
03:85:43:93:79:63:43:25:4e:c9:73:0d:3d:67:14:
b4:44:76:4b:b7:a5:a4:be:c0:2a:f6:ab:0e:67:cf:
94:b4:83:b1:92:f1:41:d8:71:04:b3:70:61:68:4a:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:3B:1A:3E:56:B7:75:CF:17:FC:15:50:8B:14:16:05:0D:82:12
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HGI7Gj5Wt3XPF_wVUIsUFgUNghI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.203.0/24
194.143.205.0-194.143.207.255
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.196.0-195.114.198.255
195.114.201.0-195.114.203.255
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.6.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
Signature Algorithm: sha256WithRSAEncryption
13:0e:01:e1:26:0f:f6:a1:a2:de:14:a4:4d:63:f1:0d:8d:13:
fa:76:7d:b5:22:a5:63:1a:c9:27:ed:82:00:5a:c3:fd:6e:e2:
c9:b5:de:e2:93:43:40:83:ef:2f:67:15:4d:2b:25:c8:4b:67:
85:ed:f6:ba:95:6e:52:02:40:5d:72:63:99:6c:a5:15:ee:51:
b3:4c:82:5f:43:17:63:d4:55:ef:53:81:83:b0:83:3b:0c:f2:
b5:5b:ab:6c:68:48:8b:85:b5:08:3c:32:e2:f3:18:61:04:ef:
e1:a6:56:e4:c2:94:5f:4d:e2:b9:2c:af:80:5b:58:fe:ec:fd:
97:b1:9d:b3:89:04:0b:1f:53:b8:0f:1c:70:02:18:3b:ad:57:
17:4c:46:ae:a2:33:ae:06:79:2f:2b:5a:fd:c1:9b:ca:4e:dd:
92:e6:73:d0:34:a4:92:eb:7b:3b:6a:79:90:13:64:82:b4:8d:
10:e8:a2:dd:18:13:b5:40:28:6d:1d:81:af:d1:42:f7:9f:2d:
39:e4:eb:50:fd:bd:38:81:25:d2:d1:0b:0b:c3:2f:e8:65:1a:
45:54:2e:d4:8f:ea:af:8a:40:d0:1a:e6:73:6d:ce:b0:e0:04:
89:8f:4e:9b:69:a4:ec:cc:33:b4:36:9e:a5:cc:0f:40:19:81:
9f:55:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:39 2026 by rpki-client