Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6lXLU2GrtpIoMejnLKLSQ5KnZc0.roa
File: 6lXLU2GrtpIoMejnLKLSQ5KnZc0.roa (raw, json)
Hash identifier: AJwAUhHOGGmsrnPblljctbw9912uYDiYanVTj1QZ36o=
Subject key identifier: EA:55:CB:53:61:AB:B6:92:28:31:E8:E7:2C:A2:D2:43:92:A7:65:CD
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C9051D3E86BD64FA928C916E93A1EFDBC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6lXLU2GrtpIoMejnLKLSQ5KnZc0.roa
Signing time: Tue 24 Feb 2026 15:43:27 +0000
ROA not before: Tue 24 Feb 2026 15:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
193.235.152.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.94.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/21 maxlen: 21
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:51:d3:e8:6b:d6:4f:a9:28:c9:16:e9:3a:1e:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 15:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea55cb5361abb6922831e8e72ca2d24392a765cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:36:c1:98:3f:85:6a:53:0d:1d:f1:2e:e4:
ed:23:62:3d:e6:f7:26:13:67:73:c2:0c:0c:ba:97:
af:f4:2f:4e:3b:7a:7e:ea:fb:22:c3:42:d3:58:e2:
20:60:71:89:83:3a:ea:95:b0:3c:71:79:35:32:fa:
fe:c1:af:e3:31:1b:b0:5a:0f:c0:fa:e1:f4:36:64:
de:af:4f:52:a6:f1:5d:1b:2b:9d:c1:ab:5a:84:ac:
c1:83:54:bd:7a:3f:85:64:99:30:83:9a:ce:17:9a:
13:01:dc:b1:4e:ed:ae:fc:59:56:c9:19:44:06:ad:
52:68:b1:5f:3b:a0:f1:62:3a:7c:3b:1b:c5:53:55:
6d:af:7e:8b:12:fa:11:6a:d5:d8:81:db:69:86:0c:
6d:12:72:13:30:ba:ce:10:3b:5f:dd:9c:e2:a2:5e:
81:71:86:9f:50:b7:62:35:ff:f2:3f:57:0d:95:db:
91:ca:7f:bf:0c:4f:a5:4b:6b:03:13:96:4d:d6:02:
bb:aa:f1:6c:f0:a0:e5:7e:b8:2a:6d:81:8c:3d:9b:
f6:db:ac:a8:6a:10:9f:13:a2:26:15:1a:b6:5b:52:
46:cd:8b:5c:f0:eb:32:2a:c0:90:d3:04:e3:0b:07:
f1:65:49:fb:8e:ba:38:21:7f:0f:c8:41:cb:72:bd:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:CB:53:61:AB:B6:92:28:31:E8:E7:2C:A2:D2:43:92:A7:65:CD
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6lXLU2GrtpIoMejnLKLSQ5KnZc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.48.0/24
193.235.152.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.94.0/24
194.68.127.0/24
194.103.240.0/21
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:b7:c7:1c:d4:16:25:67:ff:f6:8f:30:c2:58:23:37:83:ee:
65:c4:db:45:6a:d2:22:38:63:6c:32:34:84:e4:86:d4:5d:8d:
f6:86:61:5f:a6:0e:0d:14:0e:8c:59:da:97:e9:18:f7:51:fc:
f5:5e:c0:71:2e:20:a8:e7:66:18:a9:af:90:ee:ed:04:f4:c7:
55:05:ad:be:d9:7d:30:ed:05:df:8c:c2:16:29:68:41:3a:4d:
c9:3e:64:00:94:01:45:7a:d4:83:4c:96:cb:77:58:ec:6b:52:
14:ff:1d:9a:41:d7:db:19:d6:92:5d:ba:81:88:4f:3b:5e:a6:
88:7e:f2:b2:9e:57:e2:76:b9:2b:f1:04:d6:2f:b9:be:d6:a5:
83:15:c0:fe:99:ce:33:cc:53:1c:db:1e:1c:99:89:d2:d2:2d:
16:c1:5a:18:cc:08:d2:bc:62:5a:d9:35:3b:c1:50:d0:00:a2:
73:e3:2a:04:10:54:a9:ee:8c:4e:db:11:d6:51:6e:d8:1d:d9:
ca:84:f4:e1:53:71:1c:27:65:9d:c4:ea:a0:51:79:e6:14:86:
2a:79:95:c8:e8:a3:3c:11:43:1b:f3:31:90:0f:f6:15:ca:27:
2a:98:ff:11:29:57:e0:df:14:6d:ed:e2:8b:33:a6:ce:8e:49:
a7:ec:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:08 2026 by rpki-client