Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/L5HaMaOsKIQtUqWuhYVJ3cL8MUk.roa
File: L5HaMaOsKIQtUqWuhYVJ3cL8MUk.roa (raw, json)
Hash identifier: iH2O5XYxJbGVxm1S9BWZ6HcZqqNDP30du37WYa6STmk=
Subject key identifier: 2F:91:DA:31:A3:AC:28:84:2D:52:A5:AE:85:85:49:DD:C2:FC:31:49
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FA400E8B7A225E1811850416AC3F52925
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/L5HaMaOsKIQtUqWuhYVJ3cL8MUk.roa
Signing time: Mon 27 Jul 2026 14:35:50 +0000
ROA not before: Mon 27 Jul 2026 14:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 192.36.247.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
192.71.254.0/23 maxlen: 24
192.121.62.0/24 maxlen: 24
192.176.43.0/24 maxlen: 24
193.182.113.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.183.119.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
193.234.53.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
194.103.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:00:e8:b7:a2:25:e1:81:18:50:41:6a:c3:f5:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 27 14:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f91da31a3ac28842d52a5ae858549ddc2fc3149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:6a:ec:18:59:f2:ee:b2:0e:bf:20:e1:c9:
ee:d1:5f:b3:8f:b1:09:ae:6d:7f:4b:47:53:4b:ba:
d1:fc:08:0f:54:33:37:f3:bc:d2:87:f6:80:af:d5:
f8:a2:58:6c:40:bc:d9:db:67:f5:ca:f3:70:40:ce:
d7:f4:dc:08:b8:2d:11:bf:69:64:6e:a8:a4:2d:c6:
aa:fe:bc:22:51:97:d3:87:d1:3a:b0:02:c2:77:37:
0c:86:5b:0c:21:01:c6:dc:ca:b6:1d:6a:d2:b8:81:
2f:60:aa:b3:d8:0b:83:4e:a5:b3:f8:c1:b1:03:aa:
21:69:a3:39:02:f4:a7:54:8a:32:d1:d9:7d:40:ff:
83:ad:6d:93:1f:09:02:0d:5a:2a:de:90:ed:79:89:
29:d6:33:bd:bc:9b:4f:73:ed:92:f4:ee:70:9d:71:
3c:04:81:43:dc:af:fd:e2:0b:65:61:43:f2:e1:6f:
43:50:2b:13:74:1f:9d:85:9d:d2:8c:90:a6:b0:10:
7b:9b:60:13:2b:25:78:2e:84:e7:98:a3:e7:e3:4f:
63:d3:a7:59:e6:d4:6e:02:36:cb:e8:a8:38:17:e3:
7f:bc:45:d3:33:ca:05:8f:f5:34:f5:e5:24:5c:90:
90:75:4a:e4:0f:af:57:14:59:b0:2d:e4:25:6b:ba:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:DA:31:A3:AC:28:84:2D:52:A5:AE:85:85:49:DD:C2:FC:31:49
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/L5HaMaOsKIQtUqWuhYVJ3cL8MUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
192.121.62.0/24
192.176.43.0/24
193.182.113.0/24
193.183.118.0/23
193.234.52.0/23
193.234.120.0/22
194.103.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:eb:d5:52:6b:f5:a0:89:91:1c:28:ee:fb:3c:80:2f:a9:7f:
9a:7b:93:e4:f4:d6:42:cf:13:c2:08:f0:ff:cc:e9:d1:16:89:
1b:9e:da:c9:31:1f:08:85:29:46:bd:f5:8b:76:28:9d:79:b7:
61:87:f6:46:0c:58:59:1f:99:b2:e8:90:7c:66:d4:dd:cc:9a:
0a:69:ba:62:70:dd:53:2f:ea:28:85:d0:bb:13:2a:32:87:a9:
b0:d3:e0:40:1c:fd:14:41:52:96:3c:6f:dc:9a:91:d6:36:20:
06:7b:d9:18:84:53:a7:2f:34:cc:db:dc:e7:b4:97:83:a7:df:
80:04:bd:52:79:f0:b3:55:70:f2:7d:39:ae:1d:97:49:86:a0:
0a:31:94:f7:1a:2c:39:1c:d8:99:5b:05:c2:b9:9e:34:43:53:
23:2b:c2:0e:41:1a:25:ce:b6:96:29:cc:2c:33:da:d1:ec:22:
d0:3e:ef:2e:a1:f8:f5:f5:5c:71:06:70:50:07:d4:3b:81:8a:
56:b3:0c:f7:c9:1b:e9:a3:52:55:63:f3:b0:b6:cd:d8:ba:c2:
26:b3:8d:b6:47:59:09:5d:3b:80:a7:73:99:c7:9b:24:8b:01:
51:45:9f:22:68:ca:57:7e:8b:77:03:95:41:23:a5:35:b6:68:
2b:0b:fe:20
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZ+kAOi3oiXhgRhQQWrD9SklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNzI3MTQzNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjkxZGEzMWEzYWMyODg0MmQ1MmE1YWU4NTg1NDlkZGMyZmMzMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxClq7BhZ8u6yDr8g4cnu0V+zj7EJ
rm1/S0dTS7rR/AgPVDM387zSh/aAr9X4olhsQLzZ22f1yvNwQM7X9NwIuC0Rv2lk
bqikLcaq/rwiUZfTh9E6sALCdzcMhlsMIQHG3Mq2HWrSuIEvYKqz2AuDTqWz+MGx
A6ohaaM5AvSnVIoy0dl9QP+DrW2THwkCDVoq3pDteYkp1jO9vJtPc+2S9O5wnXE8
BIFD3K/94gtlYUPy4W9DUCsTdB+dhZ3SjJCmsBB7m2ATKyV4LoTnmKPn409j06dZ
5tRuAjbL6Kg4F+N/vEXTM8oFj/U09eUkXJCQdUrkD69XFFmwLeQla7oKowIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFC+R2jGjrCiELVKlroWFSd3C/DFJMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTDVIYU1hT3NLSVF0VXFXdWhZVkozY0w4TVVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAwCT3AwQA
wEdUAwQBwEf+AwQAwHk+AwQAwLArAwQAwbZxAwQBwbd2AwQBweo0AwQCwep4AwQA
wmcIMA0GCSqGSIb3DQEBCwUAA4IBAQA669VSa/WgiZEcKO77PIAvqX+ae5Pk9NZC
zxPCCPD/zOnRFokbntrJMR8IhSlGvfWLdiidebdhh/ZGDFhZH5my6JB8ZtTdzJoK
abpicN1TL+oohdC7Eyoyh6mw0+BAHP0UQVKWPG/cmpHWNiAGe9kYhFOnLzTM29zn
tJeDp9+ABL1SefCzVXDyfTmuHZdJhqAKMZT3Giw5HNiZWwXCuZ40Q1MjK8IOQRol
zraWKcwsM9rR7CLQPu8uofj19VxxBnBQB9Q7gYpWswz3yRvpo1JVY/Owts3YusIm
s422R1kJXTuAp3OZx5skiwFRRZ8iaMpXfot3A5VBI6U1tmgrC/4g
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:19:39 2026 by rpki-client