Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Hoi5HubrS2JM4URpCrK1c7GaXMQ.roa
File: Hoi5HubrS2JM4URpCrK1c7GaXMQ.roa (raw, json)
Hash identifier: 2qPlpMqAxGq8RM4kZUoFlAIu4yJ3aJV7/ebhGgxT5AM=
Subject key identifier: 1E:88:B9:1E:E6:EB:4B:62:4C:E1:44:69:0A:B2:B5:73:B1:9A:5C:C4
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019C97F2A381D310CA0F6E9BF40DB67B93FD
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Hoi5HubrS2JM4URpCrK1c7GaXMQ.roa
Signing time: Thu 26 Feb 2026 03:16:27 +0000
ROA not before: Thu 26 Feb 2026 03:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54253
IP address blocks: 79.72.22.0/23 maxlen: 23
79.72.36.0/23 maxlen: 23
79.72.39.0/24 maxlen: 24
79.72.96.0/22 maxlen: 22
79.72.96.0/23 maxlen: 23
79.72.98.0/23 maxlen: 23
79.72.100.0/23 maxlen: 23
79.72.104.0/21 maxlen: 21
79.72.112.0/21 maxlen: 21
79.72.128.0/22 maxlen: 22
79.72.128.0/23 maxlen: 23
79.72.130.0/23 maxlen: 23
79.72.132.0/23 maxlen: 23
79.72.136.0/21 maxlen: 21
79.72.144.0/21 maxlen: 21
79.76.21.0/24 maxlen: 24
79.76.22.0/23 maxlen: 23
79.76.64.0/22 maxlen: 22
79.76.64.0/23 maxlen: 23
79.76.66.0/23 maxlen: 23
79.76.68.0/23 maxlen: 23
79.76.72.0/21 maxlen: 21
79.76.80.0/21 maxlen: 21
80.225.0.0/22 maxlen: 22
80.225.0.0/23 maxlen: 23
80.225.2.0/23 maxlen: 23
80.225.4.0/23 maxlen: 23
80.225.8.0/21 maxlen: 21
80.225.16.0/21 maxlen: 21
80.225.32.0/22 maxlen: 22
80.225.32.0/23 maxlen: 23
80.225.34.0/23 maxlen: 23
80.225.36.0/23 maxlen: 23
80.225.40.0/21 maxlen: 21
80.225.48.0/21 maxlen: 21
80.225.96.0/22 maxlen: 22
80.225.96.0/23 maxlen: 23
80.225.98.0/23 maxlen: 23
80.225.100.0/23 maxlen: 23
80.225.104.0/21 maxlen: 21
80.225.112.0/21 maxlen: 21
84.8.0.0/22 maxlen: 22
84.8.0.0/23 maxlen: 23
84.8.2.0/23 maxlen: 23
84.8.4.0/23 maxlen: 23
84.8.8.0/21 maxlen: 21
84.8.16.0/21 maxlen: 21
84.8.32.0/22 maxlen: 22
84.8.32.0/23 maxlen: 23
84.8.34.0/23 maxlen: 23
84.8.36.0/23 maxlen: 23
84.8.40.0/21 maxlen: 21
84.8.48.0/21 maxlen: 21
84.8.160.0/22 maxlen: 22
84.8.160.0/23 maxlen: 23
84.8.162.0/23 maxlen: 23
84.8.164.0/23 maxlen: 23
84.8.168.0/21 maxlen: 21
84.8.176.0/21 maxlen: 21
84.235.128.0/22 maxlen: 22
84.235.128.0/23 maxlen: 23
84.235.130.0/23 maxlen: 23
84.235.132.0/23 maxlen: 23
84.235.136.0/21 maxlen: 21
84.235.144.0/21 maxlen: 21
84.235.194.0/23 maxlen: 23
92.4.0.0/22 maxlen: 22
92.4.0.0/23 maxlen: 23
92.4.2.0/23 maxlen: 23
92.4.4.0/23 maxlen: 23
92.4.8.0/21 maxlen: 21
92.4.16.0/21 maxlen: 21
92.4.96.0/22 maxlen: 24
92.4.96.0/23 maxlen: 24
92.4.98.0/23 maxlen: 24
92.4.100.0/23 maxlen: 24
92.4.104.0/21 maxlen: 24
92.4.112.0/21 maxlen: 24
141.253.128.0/22 maxlen: 22
141.253.128.0/23 maxlen: 23
141.253.130.0/23 maxlen: 23
141.253.132.0/23 maxlen: 23
141.253.136.0/21 maxlen: 21
141.253.144.0/21 maxlen: 21
141.253.224.0/22 maxlen: 22
141.253.224.0/23 maxlen: 23
141.253.226.0/23 maxlen: 23
141.253.228.0/23 maxlen: 23
141.253.232.0/21 maxlen: 21
141.253.240.0/21 maxlen: 21
145.241.136.0/22 maxlen: 22
213.35.64.0/22 maxlen: 22
213.35.64.0/23 maxlen: 23
213.35.66.0/23 maxlen: 23
213.35.68.0/23 maxlen: 23
213.35.72.0/21 maxlen: 21
213.35.80.0/21 maxlen: 21
217.142.192.0/22 maxlen: 22
217.142.192.0/23 maxlen: 23
217.142.194.0/23 maxlen: 23
217.142.196.0/23 maxlen: 23
217.142.200.0/21 maxlen: 21
217.142.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:f2:a3:81:d3:10:ca:0f:6e:9b:f4:0d:b6:7b:93:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Feb 26 03:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e88b91ee6eb4b624ce144690ab2b573b19a5cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:71:c4:30:6c:d8:b3:d8:b2:48:37:3a:e1:ab:
0c:53:b0:45:d1:7c:a7:89:01:a8:c8:3a:5b:bc:99:
af:4b:b6:ea:9d:48:57:86:c7:3c:9c:e7:60:5d:ba:
ae:71:62:1b:27:43:d2:3b:9c:c0:e0:85:07:6d:88:
7f:c0:49:05:2b:d0:30:6e:a8:3c:2a:a8:ae:9f:81:
01:78:e3:17:33:d5:de:e9:b7:35:37:1c:e7:c9:8f:
ee:d0:8f:1e:01:04:8f:c8:f4:93:fe:da:81:91:f2:
47:c5:19:62:10:e8:70:5f:7b:93:2c:25:36:c0:f8:
17:20:c9:92:bd:ad:f0:45:dc:8b:5c:41:1d:0b:77:
f1:54:e1:7e:f3:3f:e0:d2:2f:36:9d:c7:aa:fe:d4:
f2:48:35:a8:84:f3:fb:3b:93:cf:ca:fe:c6:1b:09:
5e:ac:63:62:1f:34:1c:b9:55:af:20:01:7d:0d:c6:
40:67:01:a3:37:d2:47:68:93:1e:54:72:0b:17:38:
03:c0:c3:38:02:22:f5:8b:ab:ef:c3:2b:d7:28:c6:
32:a6:2d:18:36:7e:c8:a8:d6:9b:30:50:e4:59:b4:
f5:93:21:02:d1:78:eb:4b:41:fb:e6:94:af:27:21:
1a:3d:63:56:8c:81:1e:bf:00:b3:2d:63:0b:ad:4a:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:B9:1E:E6:EB:4B:62:4C:E1:44:69:0A:B2:B5:73:B1:9A:5C:C4
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Hoi5HubrS2JM4URpCrK1c7GaXMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.22.0/23
79.72.36.0/23
79.72.39.0/24
79.72.96.0-79.72.101.255
79.72.104.0-79.72.119.255
79.72.128.0-79.72.133.255
79.72.136.0-79.72.151.255
79.76.21.0-79.76.23.255
79.76.64.0-79.76.69.255
79.76.72.0-79.76.87.255
80.225.0.0-80.225.5.255
80.225.8.0-80.225.23.255
80.225.32.0-80.225.37.255
80.225.40.0-80.225.55.255
80.225.96.0-80.225.101.255
80.225.104.0-80.225.119.255
84.8.0.0-84.8.5.255
84.8.8.0-84.8.23.255
84.8.32.0-84.8.37.255
84.8.40.0-84.8.55.255
84.8.160.0-84.8.165.255
84.8.168.0-84.8.183.255
84.235.128.0-84.235.133.255
84.235.136.0-84.235.151.255
84.235.194.0/23
92.4.0.0-92.4.5.255
92.4.8.0-92.4.23.255
92.4.96.0-92.4.101.255
92.4.104.0-92.4.119.255
141.253.128.0-141.253.133.255
141.253.136.0-141.253.151.255
141.253.224.0-141.253.229.255
141.253.232.0-141.253.247.255
145.241.136.0/22
213.35.64.0-213.35.69.255
213.35.72.0-213.35.87.255
217.142.192.0-217.142.197.255
217.142.200.0-217.142.215.255
Signature Algorithm: sha256WithRSAEncryption
69:24:04:ac:fa:f7:63:2a:d6:48:05:72:4b:ec:77:d1:6a:56:
ed:9c:9b:f3:b9:a1:aa:c8:8d:9b:ff:b5:92:cb:61:c9:aa:88:
e5:0c:b5:fb:db:08:5a:ce:ef:ff:02:9d:93:76:22:f8:a0:61:
df:3b:22:c9:d8:98:f7:bd:cf:f1:18:6a:62:21:55:29:70:f3:
36:c2:71:ee:68:b9:79:ef:0a:37:c8:03:9f:6f:14:92:a6:e8:
72:d1:9c:fd:4b:60:1a:b3:b4:94:cd:5f:50:9e:d9:1f:ee:74:
f0:da:e0:9f:74:f5:cb:db:2f:88:fe:22:57:51:f9:0a:70:f7:
c6:8b:19:76:7b:f9:49:27:8d:7d:50:81:bb:b7:06:52:14:4a:
b0:df:14:33:51:62:08:6a:7c:a1:c6:4e:97:a3:4a:c3:a1:81:
24:4d:f6:0b:1e:03:f1:e1:8e:b0:66:90:1e:22:75:61:0b:55:
ea:71:3f:d1:7b:93:70:ec:e2:f0:21:c4:5d:54:6e:d2:77:61:
09:a2:ed:a2:e9:10:58:68:9f:c4:23:a8:30:85:2d:51:f8:33:
e4:87:6c:c5:2a:8b:b5:77:92:45:23:53:fc:86:0a:a3:b8:44:
43:fd:9f:33:a7:e2:b9:c1:7c:df:7d:e6:5b:aa:b4:35:08:11:
65:d3:2b:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:22 2026 by rpki-client