Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HOsPT8kf6wGutFz622EC-Xct3Mk.roa
File: HOsPT8kf6wGutFz622EC-Xct3Mk.roa (raw, json)
Hash identifier: Q++tNaUTOZAzBCCBF/1MPLgn+qqYQVz8rmxdbaigR34=
Subject key identifier: 1C:EB:0F:4F:C9:1F:EB:01:AE:B4:5C:FA:DB:61:02:F9:77:2D:DC:C9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C8F1A8BD2A0E82C030DD151190342CD96
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HOsPT8kf6wGutFz622EC-Xct3Mk.roa
Signing time: Tue 24 Feb 2026 10:03:27 +0000
ROA not before: Tue 24 Feb 2026 10:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.12.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.165.182.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
193.183.47.0/24 maxlen: 24
193.183.48.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.105.0/24 maxlen: 24
193.183.251.0/24 maxlen: 24
193.234.54.0/24 maxlen: 24
194.68.223.0/24 maxlen: 24
194.68.224.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.103.93.0/24 maxlen: 24
194.132.27.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:1a:8b:d2:a0:e8:2c:03:0d:d1:51:19:03:42:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 10:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ceb0f4fc91feb01aeb45cfadb6102f9772ddcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:43:b4:9c:20:29:9a:78:63:ff:82:7b:04:
d6:37:4c:21:03:d2:66:7f:55:4b:a9:0b:ab:ea:26:
d3:09:5c:9e:fc:40:c7:39:c8:16:1e:dd:fe:d0:96:
f6:f9:f7:cb:81:b5:88:6a:51:06:1c:17:85:e3:0c:
7d:d7:20:33:be:5d:dd:60:3d:c2:f3:c0:27:cb:1c:
51:e4:dd:cd:a8:a6:ba:96:ba:e5:1e:8f:f3:e8:ce:
9f:a1:30:4a:e0:e4:65:6d:06:72:18:d0:8c:ca:5c:
1b:6f:05:3b:6b:92:75:99:fb:8e:3c:db:0a:a3:a2:
d4:20:c7:1d:ce:cb:2b:88:51:47:8e:9a:c3:31:ca:
d5:98:a7:12:77:2c:9d:af:b7:35:6d:a1:b4:3c:20:
e2:bd:30:2f:42:18:48:80:db:9a:7e:6f:bb:c9:1e:
f1:bc:71:5c:4d:e2:09:ae:d5:eb:67:eb:74:b5:a3:
b5:ce:cb:0a:5c:2e:0c:a2:bc:dd:d2:95:23:75:bf:
df:6b:42:38:a5:7d:76:e9:5e:da:3a:7a:ad:e3:05:
91:0f:4b:be:a4:63:ce:23:11:63:a3:73:58:1d:f6:
08:ed:ef:09:69:59:e3:d1:3c:27:66:0e:3a:0a:95:
9f:53:2d:95:21:03:cd:e0:c5:ca:e0:85:98:64:01:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:0F:4F:C9:1F:EB:01:AE:B4:5C:FA:DB:61:02:F9:77:2D:DC:C9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HOsPT8kf6wGutFz622EC-Xct3Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.12.0/24
192.121.101.0/24
192.165.182.0/24
193.181.65.0/24
193.183.47.0-193.183.48.255
193.183.92.0/24
193.183.104.0/23
193.183.251.0/24
193.234.54.0/24
194.68.223.0-194.68.224.255
194.71.215.0/24
194.103.93.0/24
194.132.27.0/24
194.132.162.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4c:60:08:e7:e4:9d:95:42:01:08:83:f8:45:53:5b:eb:b1:
9b:32:4b:89:e1:87:c5:9b:42:0f:9a:dd:d4:ae:91:47:e2:42:
62:ae:1d:6e:9c:20:6f:58:9a:0a:88:0b:55:56:d8:25:2e:97:
98:27:01:c7:e1:b2:cc:ff:da:da:1e:52:97:2c:73:2c:af:6c:
09:01:b7:62:cd:1d:06:b5:7f:04:1a:fd:6d:cd:a9:8a:b5:18:
c4:26:70:6f:13:80:2b:a1:c4:8f:00:6b:8a:b5:2d:5d:8f:fe:
96:40:54:5a:da:ef:11:9d:53:e2:ff:16:3d:3a:dd:f7:56:a9:
27:dd:65:61:05:38:af:09:83:be:75:6c:c6:56:34:9a:f2:29:
ed:af:63:94:16:ab:22:20:4f:56:1b:a7:55:9a:f0:0c:8f:35:
ff:ba:48:d1:15:33:08:cb:c2:73:16:27:2e:e6:cf:47:f4:d5:
13:fa:33:d1:09:7d:f0:d8:e4:2e:1a:5a:d0:fe:0f:0c:64:5c:
05:42:52:6d:9f:07:76:8f:7b:6a:2b:96:ff:64:73:94:e8:d7:
52:16:a3:56:dd:c1:98:df:3c:6c:5b:29:ac:cb:07:d3:9b:a8:
f6:e3:9a:f6:df:fd:6f:44:1e:fa:2d:28:67:11:13:5b:82:9a:
8e:f2:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:28:45 2026 by rpki-client