Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hQIImJotzOyoDddNbMK0fz3Mq0I.roa
File: hQIImJotzOyoDddNbMK0fz3Mq0I.roa (raw, json)
Hash identifier: DzqbADKRid3XT0ekhDtVYyi9jfxSFrJlX0rdbSlS8uw=
Subject key identifier: 85:02:08:98:9A:2D:CC:EC:A8:0D:D7:4D:6C:C2:B4:7F:3D:CC:AB:42
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019C5767E6FBF93F0B40CFAF9A35054E4EA6
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hQIImJotzOyoDddNbMK0fz3Mq0I.roa
Signing time: Fri 13 Feb 2026 14:29:13 +0000
ROA not before: Fri 13 Feb 2026 14:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.68.245.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.184.0/23 maxlen: 23
185.81.186.0/23 maxlen: 23
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 22
185.96.38.0/24 maxlen: 24
185.96.39.0/24 maxlen: 24
185.96.81.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.96.133.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.101.203.0/24 maxlen: 24
185.175.224.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:67:e6:fb:f9:3f:0b:40:cf:af:9a:35:05:4e:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 13 14:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=850208989a2dcceca80dd74d6cc2b47f3dccab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:22:4e:f9:59:33:7c:c1:01:33:a9:42:c9:
82:fc:b9:0b:6e:ad:4d:39:68:ea:a5:79:02:cc:6d:
29:64:69:60:7f:62:dd:d2:29:7b:1e:7f:85:f9:c4:
46:7e:a8:c7:93:49:62:4c:fe:11:27:92:be:a7:f0:
ed:97:68:ff:f8:28:e1:8a:ca:ec:c7:8a:8e:5e:2a:
0e:46:78:d2:e0:b4:19:ed:47:0a:35:95:f4:b6:62:
89:96:e6:f9:cb:f2:74:8f:54:1d:2e:c0:fb:81:ec:
42:d2:f0:29:4e:e2:84:27:48:aa:c7:84:e9:d4:7a:
eb:a7:d6:b0:6b:85:bb:9c:92:47:c1:45:fb:35:2c:
78:e2:81:3a:9d:64:3e:46:22:5d:a9:4d:f7:91:99:
36:1b:7a:8d:56:3a:3b:79:4e:6a:ea:58:1f:20:c6:
f4:32:14:54:e8:9a:f2:0f:93:4a:d9:61:18:95:12:
0e:f9:10:ee:16:1e:91:26:90:55:6f:2f:54:b3:5c:
c9:90:3d:1b:97:18:f1:13:92:d4:65:33:a9:49:da:
6c:3f:4a:3d:f4:a6:f5:7d:67:fe:69:c9:df:7c:36:
f4:63:b5:4e:f5:aa:d3:88:db:9e:10:7e:e1:4a:2e:
e6:88:ea:32:41:53:d3:c8:85:1f:a0:03:fe:a4:03:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:08:98:9A:2D:CC:EC:A8:0D:D7:4D:6C:C2:B4:7F:3D:CC:AB:42
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hQIImJotzOyoDddNbMK0fz3Mq0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.68.245.0/24
185.81.174.0/23
185.81.184.0/22
185.89.104.0/21
185.96.38.0/23
185.96.81.0/24
185.96.132.0/23
185.97.0.0/22
185.101.203.0/24
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:49:be:85:5a:79:bb:e3:52:68:a6:83:e0:73:16:27:4b:2f:
08:b0:13:4e:fd:6b:d4:78:a4:17:9c:bd:2a:35:71:6d:6c:f5:
5b:ab:b5:9e:3b:ba:f3:58:8c:33:66:7f:62:bb:44:62:78:85:
81:84:0e:1d:95:06:38:43:b3:9f:81:72:15:6a:20:89:47:dd:
f6:4b:b2:f4:68:bd:59:cc:36:b0:fc:17:b8:41:0d:cc:55:d0:
f8:fb:3f:9c:00:2e:db:73:cc:5f:49:bc:f7:6f:5b:87:3f:5e:
40:7a:ce:5a:bb:4f:c0:93:97:30:04:f1:55:f5:8c:f3:05:0d:
1e:69:fe:10:e0:71:9e:4e:62:11:d6:51:fd:1b:c5:22:f0:f2:
fc:21:72:ec:ee:ba:52:81:27:38:c4:45:e5:05:44:17:1b:bb:
92:44:74:f2:e8:d0:68:43:55:ae:64:98:f3:13:5b:e9:2c:22:
e2:8c:8b:86:15:e9:89:6e:3a:5b:e8:33:44:cc:2c:ae:e2:92:
77:9a:77:6b:af:90:2d:a3:15:27:73:a7:32:e7:9e:8a:28:40:
3e:b4:ad:82:53:33:16:e8:3c:f5:9d:e7:c4:42:2e:2f:34:19:
e2:bd:4a:9c:c8:58:3f:67:fe:72:02:ed:8f:82:f7:d8:7a:8b:
d8:1a:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:32 2026 by rpki-client