Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g_tiE6glFNMWKMuOzql1lo7YNLg.roa
File: g_tiE6glFNMWKMuOzql1lo7YNLg.roa (raw, json)
Hash identifier: JTYY4LC6LqbEeQplXNx74wxjJziK659SL0E49e7db88=
Subject key identifier: 83:FB:62:13:A8:25:14:D3:16:28:CB:8E:CE:A9:75:96:8E:D8:34:B8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0D7ECCCFBEF8D839EB9ED7FDF73DB6028
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g_tiE6glFNMWKMuOzql1lo7YNLg.roa
Signing time: Fri 25 Sep 2026 09:36:55 +0000
ROA not before: Fri 25 Sep 2026 09:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 192.36.8.0/24 maxlen: 24
192.36.9.0/24 maxlen: 24
192.71.161.0/24 maxlen: 24
192.165.109.0/24 maxlen: 24
192.165.247.0/24 maxlen: 24
193.180.21.0/24 maxlen: 24
193.180.94.0/23 maxlen: 23
193.180.119.0/24 maxlen: 24
193.181.176.0/24 maxlen: 24
193.234.44.0/24 maxlen: 24
193.234.45.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
193.234.90.0/24 maxlen: 24
193.234.91.0/24 maxlen: 24
193.235.104.0/24 maxlen: 24
193.235.106.0/24 maxlen: 24
193.235.108.0/23 maxlen: 24
194.68.212.0/24 maxlen: 24
194.68.236.0/24 maxlen: 24
194.71.204.0/24 maxlen: 24
194.71.221.0/24 maxlen: 24
194.103.47.0/24 maxlen: 24
194.132.122.0/24 maxlen: 24
2a01:280:368::/48 maxlen: 48
2a01:280:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:ec:cc:fb:ef:8d:83:9e:b9:ed:7f:df:73:db:60:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 25 09:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83fb6213a82514d31628cb8ecea975968ed834b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:e3:4e:d0:a3:07:b3:43:a1:a8:14:81:42:
03:9d:d8:d0:10:ed:73:f4:71:b4:69:1c:2b:cd:4b:
a1:53:78:1c:35:0e:81:66:bf:f5:1d:d8:5c:08:5e:
75:90:07:43:72:90:90:56:6d:76:a3:15:2b:17:58:
71:bd:9e:1e:75:fa:b1:09:d3:c8:07:4f:a8:d5:3a:
c3:3d:59:dc:ad:f9:82:20:2b:59:7e:57:59:c1:cf:
d6:01:c2:d9:46:cf:48:4c:1a:1c:74:16:85:28:6f:
95:f6:c3:3a:e0:5e:04:f8:89:71:dc:f4:d5:b4:8e:
d1:5d:0c:28:7f:ac:8f:25:fa:fc:df:43:23:89:4a:
ab:45:4a:8f:e1:00:6d:3b:d2:e7:d9:93:00:8e:6c:
70:00:48:5a:53:b1:a2:1a:a7:a7:f6:56:07:dc:98:
b4:d5:10:cb:d5:87:a3:76:e2:99:26:6d:85:51:f4:
af:be:40:d7:4a:ef:87:9a:b6:18:a8:89:d6:1d:d6:
d4:20:e4:87:37:13:18:e1:9a:41:8d:ea:70:88:57:
32:58:f5:98:b5:9c:ee:b7:f7:39:f3:09:cd:80:c3:
dd:62:e6:4a:fe:c6:1b:df:27:c4:02:b4:69:4f:83:
c6:9b:f6:b4:4f:99:22:07:b0:6b:88:9b:32:7e:8c:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:62:13:A8:25:14:D3:16:28:CB:8E:CE:A9:75:96:8E:D8:34:B8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g_tiE6glFNMWKMuOzql1lo7YNLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.8.0/23
192.71.161.0/24
192.165.109.0/24
192.165.247.0/24
193.180.21.0/24
193.180.94.0/23
193.180.119.0/24
193.181.176.0/24
193.234.44.0/23
193.234.82.0/24
193.234.90.0/23
193.235.104.0/24
193.235.106.0/24
193.235.108.0/23
194.68.212.0/24
194.68.236.0/24
194.71.204.0/24
194.71.221.0/24
194.103.47.0/24
194.132.122.0/24
IPv6:
2a01:280:368::/48
2a01:280:3e8::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7d:7e:64:62:99:f8:b0:3d:95:5c:93:e2:5b:54:9c:97:b0:
a5:f9:55:72:26:5e:2b:5e:38:31:4d:fb:ec:29:97:ba:2e:ea:
8f:e6:d1:5c:80:96:b7:7b:89:26:4f:8f:c7:76:a6:9a:04:8a:
94:f5:e7:58:ef:79:aa:08:59:84:3a:5a:22:0b:2b:0c:42:b9:
5f:85:d5:78:cf:77:ce:42:da:70:5a:2c:3b:20:89:f8:c6:4f:
b8:70:66:13:06:70:d6:de:da:d8:15:fb:eb:d5:b9:28:5f:d0:
07:ef:49:1a:69:3c:f4:b9:08:1e:03:d8:50:56:37:35:96:45:
3a:2c:35:b8:d5:5c:d0:6d:29:66:cc:7a:99:6e:95:96:98:41:
68:da:5e:ee:69:36:a9:fe:85:54:81:72:81:ec:c5:1b:65:f0:
01:0c:f2:99:4c:9a:b7:81:57:48:8e:56:1c:00:33:bd:8e:2a:
3e:d6:c7:05:33:70:5c:e5:1a:f4:3d:23:75:37:bd:30:e8:5a:
96:16:03:ce:62:28:4e:cd:f1:5c:f8:93:1c:90:8c:48:e4:69:
0d:e0:1d:6c:c5:96:21:a3:f2:1d:09:29:20:b9:db:2d:f0:c8:
2c:0a:ef:8d:24:60:0f:ab:e6:95:42:55:80:bf:15:78:6f:71:
e6:66:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:13:43 2026 by rpki-client