Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa
File: HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa (raw, json)
Hash identifier: rohOtLkiJZ2lqEQyOwpJqZMVus71D3p6WIHeG55/DBA=
Subject key identifier: 1D:4A:B9:AF:E4:09:3A:80:89:D5:E2:C3:D3:0A:E6:37:D5:AE:95:75
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019C55D64B1AEA7E932F9394E98D2DCA45F5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa
Signing time: Fri 13 Feb 2026 07:10:33 +0000
ROA not before: Fri 13 Feb 2026 07:10:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.182.114.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:d6:4b:1a:ea:7e:93:2f:93:94:e9:8d:2d:ca:45:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 13 07:10:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d4ab9afe4093a8089d5e2c3d30ae637d5ae9575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:9d:fa:39:3f:66:f9:cd:18:b1:cd:49:2e:
04:a1:dc:08:95:7a:df:ea:c1:86:62:1c:ae:40:56:
45:00:fd:62:29:db:13:9f:54:96:98:12:18:9a:c9:
59:31:3e:92:cd:7f:54:0d:08:2b:3a:66:89:cb:1b:
ad:7f:fc:15:a6:e0:31:cb:90:2c:b2:46:98:71:3d:
db:2b:a7:8c:d5:82:d3:ff:ed:13:1d:36:55:51:85:
4d:66:84:43:7f:aa:df:54:07:46:3a:8b:30:d8:b8:
25:a8:d4:48:de:31:b3:78:af:9d:cf:ea:30:b6:68:
4a:01:e4:81:81:51:59:07:85:35:5e:bb:ed:27:ad:
e5:d9:18:7c:9d:d2:e9:cd:44:df:1c:a2:87:33:15:
ad:e2:db:3c:44:bf:f6:4c:9c:fa:2c:5b:78:55:a9:
af:3d:09:5c:c4:be:51:fa:c5:33:5f:2d:59:13:9a:
80:90:ac:74:f6:e2:82:d9:b3:d7:03:8c:8f:5c:76:
00:e9:18:6e:b0:76:80:db:bc:fd:d4:88:eb:43:1e:
c1:d6:71:61:98:74:ff:07:87:41:2a:54:c9:ec:15:
82:29:06:2d:d1:23:1c:48:e1:34:1d:da:a4:5a:ea:
31:e3:1c:2b:15:65:5f:dd:a6:30:a6:57:79:d8:b7:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4A:B9:AF:E4:09:3A:80:89:D5:E2:C3:D3:0A:E6:37:D5:AE:95:75
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
88.209.194.0/24
88.209.216.0/24
88.209.229.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:45:1e:07:c5:bf:a2:01:bd:61:ff:9d:85:02:75:e6:97:8a:
ed:01:a2:b5:b0:9a:6b:a7:f7:3d:c4:f9:9d:63:11:5a:31:c1:
ff:db:c1:2d:8d:84:c9:4f:ba:93:28:32:6d:d1:4d:54:89:e0:
43:2d:5a:c1:0f:c5:fd:73:15:00:fe:b8:6e:b1:c0:a1:23:da:
83:2b:92:cc:de:33:4e:f4:cf:26:36:7a:e5:c3:88:74:2e:d0:
52:1d:2a:55:ad:e5:f2:09:6a:69:06:7d:ff:0a:1e:77:e0:21:
f4:29:03:70:26:45:03:27:99:82:a6:70:0d:0d:31:ae:83:59:
d1:c0:cd:38:e5:f5:e7:da:72:1b:d7:4a:3c:e7:ea:26:a3:d4:
5c:af:63:cd:58:8e:96:11:e9:3b:89:0c:17:68:90:74:4c:7d:
46:8b:72:c2:ce:6b:aa:41:ba:f4:19:98:62:9b:03:57:68:8c:
77:a5:1c:6a:2e:6c:e6:c6:21:4f:83:1b:96:1e:c5:eb:ba:06:
85:41:3d:56:10:9d:7d:ac:fb:e5:5b:78:8c:29:65:b9:3a:7c:
e4:51:4b:60:44:1e:c4:05:c0:9d:6d:5a:33:e5:9f:09:d4:bd:
44:4e:b0:47:90:75:e7:36:fa:32:6d:34:78:88:ef:d0:91:45:
d6:c5:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:07 2026 by rpki-client