Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kHu_rboNFT8ETY1yB9MYxArAReU.roa
File: kHu_rboNFT8ETY1yB9MYxArAReU.roa (raw, json)
Hash identifier: FX+vCx3sztak+YZZT+sc2ImUxAj0ywR2OO7lw6Me0qw=
Subject key identifier: 90:7B:BF:AD:BA:0D:15:3F:04:4D:8D:72:07:D3:18:C4:0A:C0:45:E5
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019FA8A949A9F16E64B3876C580694732264
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kHu_rboNFT8ETY1yB9MYxArAReU.roa
Signing time: Tue 28 Jul 2026 12:18:14 +0000
ROA not before: Tue 28 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.74.245.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
66.228.86.0/24 maxlen: 24
66.228.87.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:a9:49:a9:f1:6e:64:b3:87:6c:58:06:94:73:22:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=907bbfadba0d153f044d8d7207d318c40ac045e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:d5:b6:23:36:b7:93:13:fd:a9:60:77:14:
ef:28:1e:0c:5a:33:6f:a6:fb:e3:ef:3c:fd:d6:02:
99:82:fc:d0:05:12:15:70:65:b3:e1:c9:6b:9d:f2:
58:44:9b:1d:6c:ff:c7:7a:c1:20:ca:f5:ff:c6:53:
77:3f:6c:a8:92:29:f9:a8:ac:5a:f5:0d:1f:7c:3d:
0b:dc:c1:27:ab:26:90:1f:c1:d6:2f:a7:d8:1c:3a:
16:88:31:86:e3:10:cb:e6:64:b8:ec:1f:52:6e:59:
3d:bd:f2:3a:58:37:29:09:0e:06:aa:fe:b5:fd:ad:
01:1c:c9:75:0d:8c:18:1a:a1:7e:4f:05:d3:99:a6:
8f:e0:dd:f6:23:ac:30:5d:a7:54:e3:6e:b3:3d:23:
07:74:17:3f:ed:1a:3b:b9:c8:e4:57:0b:eb:8d:5d:
52:f0:71:89:af:f6:61:cd:bb:af:48:da:5b:eb:d5:
b4:92:68:2e:36:b4:5c:53:db:44:b4:11:70:55:52:
3c:17:59:7b:3a:b5:cd:3e:78:fa:41:81:f2:89:d2:
92:a9:d1:84:7b:5e:2a:74:aa:52:f0:62:a8:84:84:
ba:7c:9c:83:71:62:61:63:81:42:4e:75:98:ee:1e:
ef:29:6b:87:5a:23:2a:e9:90:ab:13:2e:27:da:fa:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:BF:AD:BA:0D:15:3F:04:4D:8D:72:07:D3:18:C4:0A:C0:45:E5
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kHu_rboNFT8ETY1yB9MYxArAReU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.74.244.0/23
45.131.0.0/24
45.136.4.0/24
66.228.86.0/23
77.83.200.0/22
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
63:93:c4:aa:2c:ec:94:38:f7:29:c2:1d:db:e6:77:5b:5b:a2:
20:71:7f:9d:99:d6:a5:6f:cb:47:bc:83:06:91:fd:2a:c0:68:
b5:fe:8a:f9:5c:93:f2:5a:3d:f3:06:47:94:b7:76:a0:60:06:
fb:5a:2d:81:ed:fb:e8:4a:16:dc:f8:fc:32:20:cc:b5:a6:63:
39:19:32:e3:a6:05:6e:5a:17:05:ba:3e:84:9a:95:69:b5:3a:
f6:c4:32:8c:1e:47:71:ff:f4:49:3b:f5:2d:ef:91:bf:eb:92:
05:20:92:e4:06:ab:48:2e:3a:36:9f:0d:c1:93:65:e5:87:d1:
56:0e:1a:70:f8:47:44:d5:3f:a6:32:75:fb:9c:3c:59:2e:98:
4b:60:bd:ce:b0:bb:90:0b:c9:db:6b:80:98:8b:7c:95:d1:03:
25:a3:9d:04:7f:b2:f9:bb:da:24:24:67:20:d0:6f:b0:e0:aa:
27:63:6b:e9:3f:c2:bd:3d:ee:e6:11:c9:bb:19:ea:03:15:95:
b1:ef:c9:e0:65:94:c6:a2:6f:36:c0:e6:0a:14:50:02:34:de:
3d:b8:4e:77:f0:10:b2:6a:36:59:67:c2:43:b4:73:83:20:ef:
bd:15:b8:09:58:e1:52:95:b4:48:73:02:89:74:30:6e:74:7b:
13:4f:b0:fe
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZ+oqUmp8W5ks4dsWAaUcyJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwNzI4MTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDdiYmZhZGJhMGQxNTNmMDQ0ZDhkNzIwN2QzMThjNDBhYzA0NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzbVtiM2t5MT/algdxTvKB4MWjNv
pvvj7zz91gKZgvzQBRIVcGWz4clrnfJYRJsdbP/HesEgyvX/xlN3P2yokin5qKxa
9Q0ffD0L3MEnqyaQH8HWL6fYHDoWiDGG4xDL5mS47B9Sblk9vfI6WDcpCQ4Gqv61
/a0BHMl1DYwYGqF+TwXTmaaP4N32I6wwXadU426zPSMHdBc/7Ro7ucjkVwvrjV1S
8HGJr/ZhzbuvSNpb69W0kmguNrRcU9tEtBFwVVI8F1l7OrXNPnj6QYHyidKSqdGE
e14qdKpS8GKohIS6fJyDcWJhY4FCTnWY7h7vKWuHWiMq6ZCrEy4n2vqr2wIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFJB7v626DRU/BE2NcgfTGMQKwEXlMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEva0h1X3Jib05GVDhFVFkxeUI5TVl4QXJBUmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjBEBAIAATA+MAwDBAAF
tGkDBAIFtGgDBAAtSrADBAAtSvIDBAEtSvQDBAAtgwADBAAtiAQDBAFC5FYDBAJN
U8gDBADCdO0wZgQCAAIwYAMFAyoJh4ADBQMqD7cAAwUDKg/pAAMFAyoP6wADBQMq
D+0AAwUDKg/5AAMHACoTpEAAADASAwcAKhOkQAADAwcBKhOkQAAEAwcAKhOkQAAH
MA4DBQAqE6RBAwUDKhOkQDANBgkqhkiG9w0BAQsFAAOCAQEAY5PEqizslDj3KcId
2+Z3W1uiIHF/nZnWpW/LR7yDBpH9KsBotf6K+VyT8lo98wZHlLd2oGAG+1otge37
6EoW3Pj8MiDMtaZjORky46YFbloXBbo+hJqVabU69sQyjB5Hcf/0STv1Le+Rv+uS
BSCS5AarSC46Np8NwZNl5YfRVg4acPhHRNU/pjJ1+5w8WS6YS2C9zrC7kAvJ22uA
mIt8ldEDJaOdBH+y+bvaJCRnINBvsOCqJ2Nr6T/CvT3u5hHJuxnqAxWVse/J4GWU
xqJvNsDmChRQAjTePbhOd/AQsmo2WWfCQ7RzgyDvvRW4CVjhUpW0SHMCiXQwbnR7
E0+w/g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:53 2026 by rpki-client