Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LtJk9UXwL8Dou27KNWHyTd7aSBQ.roa
File: LtJk9UXwL8Dou27KNWHyTd7aSBQ.roa (raw, json)
Hash identifier: lurGV62foj6lpaj23hexICVZq0eOq0+u5rpzfVBcwGU=
Subject key identifier: 2E:D2:64:F5:45:F0:2F:C0:E8:BB:6E:CA:35:61:F2:4D:DE:DA:48:14
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FA79FCCBDBE879A6A3E6B2B55F2E80335
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LtJk9UXwL8Dou27KNWHyTd7aSBQ.roa
Signing time: Tue 28 Jul 2026 07:28:15 +0000
ROA not before: Tue 28 Jul 2026 07:28:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8434
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.21.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
193.235.85.0/24 maxlen: 24
193.235.142.0/23 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.168.0/24 maxlen: 24
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9f:cc:bd:be:87:9a:6a:3e:6b:2b:55:f2:e8:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 28 07:28:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ed264f545f02fc0e8bb6eca3561f24ddeda4814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:ec:25:8b:d0:d9:a3:3c:1e:bb:b1:a1:a2:
a3:f8:4e:30:b7:e8:71:35:cb:77:38:8e:11:58:0e:
9e:52:89:f6:7f:87:a5:2e:ea:ce:1b:16:77:c5:c0:
a0:c5:d4:4d:85:87:25:6a:61:6a:57:b9:30:64:2f:
16:c2:ad:28:f0:0c:c0:1a:23:37:71:23:36:66:6a:
7d:49:a8:13:b4:a8:33:60:84:a7:7c:73:a4:4d:17:
a8:31:ca:50:50:13:17:74:cf:d9:1c:a2:44:dd:97:
56:ba:38:02:8f:cb:eb:a1:4b:7b:3d:d3:13:89:0b:
78:a1:ea:ea:ac:99:93:5f:4b:e1:7a:c4:6d:19:80:
0a:ec:97:89:ec:7b:69:80:1a:75:7a:41:89:03:13:
fd:ac:b8:2a:37:5d:43:bd:65:8d:78:8c:ab:57:e0:
c6:aa:fd:62:ba:24:61:9f:5d:29:51:ac:d0:0d:20:
1f:3e:e9:6f:bb:f5:6a:a1:b9:04:6c:10:4c:1a:d1:
db:24:28:e4:f8:68:4b:23:f9:c0:79:40:a7:37:07:
f2:89:ee:76:49:0f:1b:b8:24:47:c9:a5:e8:d1:46:
ae:da:d9:f0:e4:91:3f:1f:61:80:0e:79:35:40:2a:
67:8b:27:ff:3f:56:1c:27:3a:9e:9f:38:58:b5:a0:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:64:F5:45:F0:2F:C0:E8:BB:6E:CA:35:61:F2:4D:DE:DA:48:14
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LtJk9UXwL8Dou27KNWHyTd7aSBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.97.0/24
192.71.158.0/24
192.121.21.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.234.220.0/23
193.234.237.0/24
193.235.85.0/24
193.235.142.0/23
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.168.0/24
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:41:2d:4f:3d:e9:e1:0e:fe:43:21:61:67:19:39:79:cd:81:
77:5c:8f:87:94:c2:bb:6c:ec:73:3b:c1:45:ae:3a:79:3a:23:
ab:ad:3e:78:81:72:8c:70:bd:78:a6:58:6e:5a:56:67:2b:19:
ec:7d:84:62:a9:04:1d:bf:1a:da:6d:b5:22:e3:5d:47:d1:0b:
4f:2d:5a:0d:77:a0:50:1e:50:1b:76:2f:eb:53:bd:d4:9d:2d:
40:49:c0:63:e3:21:b2:b2:03:5d:6e:fc:49:a9:ee:63:b8:c5:
7a:bb:59:62:03:d4:e5:14:53:cd:10:75:09:dc:3c:4d:8f:28:
aa:6d:50:2d:8c:de:0f:7d:b8:d5:5d:76:51:a8:80:a2:e3:28:
b0:07:87:05:6a:11:78:90:3e:f8:be:cb:09:b3:84:e9:b5:2b:
74:bc:6d:73:4d:d0:a8:91:42:4a:a3:53:cc:71:8e:3c:5d:f0:
12:15:ad:8f:15:62:ce:27:fa:1a:8d:b6:3c:12:0b:a2:a7:89:
16:0f:a3:ec:71:4a:a1:42:52:20:9f:03:74:5c:1f:34:f6:99:
59:b0:92:61:0b:72:99:9f:0c:7e:16:bd:de:60:39:ee:82:11:
dc:0d:fb:4e:b1:23:e9:19:a1:7a:7e:c6:05:41:1f:35:5c:70:
d4:ac:43:d3
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZ+nn8y9voeaaj5rK1Xy6AM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNzI4MDcyODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWQyNjRmNTQ1ZjAyZmMwZThiYjZlY2EzNTYxZjI0ZGRlZGE0ODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkXsJYvQ2aM8HruxoaKj+E4wt+hx
Nct3OI4RWA6eUon2f4elLurOGxZ3xcCgxdRNhYclamFqV7kwZC8Wwq0o8AzAGiM3
cSM2Zmp9SagTtKgzYISnfHOkTReoMcpQUBMXdM/ZHKJE3ZdWujgCj8vroUt7PdMT
iQt4oerqrJmTX0vhesRtGYAK7JeJ7HtpgBp1ekGJAxP9rLgqN11DvWWNeIyrV+DG
qv1iuiRhn10pUazQDSAfPulvu/VqobkEbBBMGtHbJCjk+GhLI/nAeUCnNwfyie52
SQ8buCRHyaXo0Uau2tnw5JE/H2GADnk1QCpniyf/P1YcJzqenzhYtaDTmQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFC7SZPVF8C/A6LtuyjVh8k3e2kgUMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTHRKazlVWHdMOERvdTI3S05XSHlUZDdhU0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBADA
JCUDBADAR2EDBADAR54DBADAeRUDBADAeawDBADAecADBADApUEDBADApVYDBADB
tD0DBADBtQADBADBtbsDBADBtwMDBAHB6twDBADB6u0DBADB61UDBAHB644DBADC
DoEDBADCDtQDBAHCRDgDBADCRGMDBADCRH4DBAHCRMIDBADCRxsDBADCR1MDBAHC
R4wDBADCR6gDBADCZzIDBAHChGwDBAHChK4wDQYJKoZIhvcNAQELBQADggEBAA5B
LU896eEO/kMhYWcZOXnNgXdcj4eUwrts7HM7wUWuOnk6I6utPniBcoxwvXimWG5a
VmcrGex9hGKpBB2/GtpttSLjXUfRC08tWg13oFAeUBt2L+tTvdSdLUBJwGPjIbKy
A11u/Emp7mO4xXq7WWID1OUUU80QdQncPE2PKKptUC2M3g99uNVddlGogKLjKLAH
hwVqEXiQPvi+ywmzhOm1K3S8bXNN0KiRQkqjU8xxjjxd8BIVrY8VYs4n+hqNtjwS
C6KniRYPo+xxSqFCUiCfA3RcHzT2mVmwkmELcpmfDH4Wvd5gOe6CEdwN+06xI+kZ
oXp+xgVBHzVccNSsQ9M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:15 2026 by rpki-client