Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/HiODX_GB1lr5tn-F5Ukq4bN5ZxU.roa
File: HiODX_GB1lr5tn-F5Ukq4bN5ZxU.roa (raw, json)
Hash identifier: w0l5co7lbR0eBVZRSrILn/VweaeGBPQR+RW6klO/oVE=
Subject key identifier: 1E:23:83:5F:F1:81:D6:5A:F9:B6:7F:85:E5:49:2A:E1:B3:79:67:15
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FA0105B5EE600ADAC5344519A8128F8FE
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/HiODX_GB1lr5tn-F5Ukq4bN5ZxU.roa
Signing time: Sun 26 Jul 2026 20:14:14 +0000
ROA not before: Sun 26 Jul 2026 20:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/24 maxlen: 24
61.14.226.0/23 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
79.110.181.0/24 maxlen: 24
85.202.172.0/22 maxlen: 24
85.202.173.0/24 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/24 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/22 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.145.46.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.47.0/24 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.213.16.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/23 maxlen: 24
185.225.15.0/24 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/23 maxlen: 24
185.235.122.0/24 maxlen: 24
193.3.16.0/24 maxlen: 24
193.31.112.0/24 maxlen: 24
193.31.115.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.119.0/24 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/22 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:10:5b:5e:e6:00:ad:ac:53:44:51:9a:81:28:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 26 20:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e23835ff181d65af9b67f85e5492ae1b3796715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:0c:42:d4:3a:bb:3b:ff:46:ae:dd:54:d4:
87:8f:8e:1b:f1:39:d1:21:b2:13:87:f7:a4:2d:88:
c9:21:94:18:b8:32:45:50:00:4f:a7:c9:fc:b0:ae:
9b:7e:82:91:f3:aa:f0:80:b4:81:64:80:2c:9a:25:
7d:9e:5e:b4:f3:79:e1:c6:74:a5:51:90:15:66:f2:
00:27:b9:9a:da:38:d4:16:cf:56:06:03:56:36:23:
70:2f:0c:93:44:f9:24:5d:cd:83:19:1e:98:e3:f6:
ac:6d:c5:0c:54:c2:22:83:28:14:b9:bd:d2:b4:d1:
c2:70:f4:f2:bb:28:d0:3e:41:0a:27:99:62:f0:24:
54:24:8a:2b:9e:b0:f2:3a:b4:ff:23:3c:41:2c:f2:
48:63:9c:19:16:ce:3b:4b:96:67:ca:8c:71:13:70:
e2:e2:c0:83:1a:7c:f9:7e:b6:cf:18:b2:c7:24:ed:
0d:d8:51:a7:08:e1:32:d7:8f:94:78:9d:49:a0:52:
08:a8:48:d6:8f:37:21:62:35:ee:a4:ee:57:34:73:
3d:f6:03:21:53:43:e6:75:4d:d0:76:54:57:42:89:
05:58:47:c5:b1:b9:03:3c:a2:8e:ad:c0:7d:64:6c:
80:84:8e:fc:6b:45:44:b2:a9:ed:49:1c:04:a2:8d:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:83:5F:F1:81:D6:5A:F9:B6:7F:85:E5:49:2A:E1:B3:79:67:15
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/HiODX_GB1lr5tn-F5Ukq4bN5ZxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/24
61.14.226.0/23
62.106.64.0/24
79.110.176.0/21
85.202.172.0/22
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.162.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/22
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.145.46.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.202.47.0/24
185.206.20.0/23
185.209.128.0-185.209.130.255
185.213.16.0/24
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/23
185.225.15.0/24
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0-185.235.122.255
193.3.16.0/24
193.31.112.0/24
193.31.115.0/24
193.163.35.0/24
193.176.116.0/24
193.176.119.0/24
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0/22
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
0c:10:e4:06:e9:b9:b4:03:31:7b:d2:4c:16:26:42:bc:01:7d:
cf:0b:cb:23:be:bb:67:72:95:0a:0c:c7:53:7c:6e:74:52:97:
f8:b7:ef:4c:bf:27:49:05:ce:59:e6:df:07:29:ba:17:04:6c:
73:2a:af:b5:9b:c5:65:1c:eb:98:d6:ec:80:ef:11:b8:53:0b:
a6:d4:da:7a:d1:e0:1f:e6:45:e7:70:8d:9a:b3:29:83:0a:36:
cb:52:e3:ad:3f:e5:62:ae:2b:b4:84:ba:00:83:7f:34:3f:b7:
b3:d5:0b:2a:47:37:6a:b9:75:f3:4a:6c:3d:78:73:d1:4e:77:
2d:cd:92:bb:db:a3:87:47:d5:e2:7d:13:d9:f9:90:d8:67:db:
0a:09:a2:88:16:ae:9c:74:04:8a:9b:31:d7:3d:7f:c0:aa:52:
90:cd:e5:4c:4c:03:91:33:18:0d:20:64:4c:7a:91:bc:f9:64:
f8:d9:bf:33:ac:69:d6:d9:29:9b:9b:17:e4:36:68:8e:2c:3f:
0c:e7:ff:47:78:3f:75:f5:82:e6:c2:ca:4b:fb:69:d6:c2:01:
dc:f2:88:e7:10:7d:50:75:b6:e8:32:79:b1:b7:d9:4e:3f:3b:
40:41:5a:77:02:3c:61:34:2c:98:86:05:fb:7c:8f:a9:27:7d:
17:0c:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:36:59 2026 by rpki-client