Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h67YZDjGZX0sNXXRA8EDKgLCF1E.roa
File: h67YZDjGZX0sNXXRA8EDKgLCF1E.roa (raw, json)
Hash identifier: VxyvsnO3Dlnii603fK1MCkaUqF112Jz/ukEOJ3FREwk=
Subject key identifier: 87:AE:D8:64:38:C6:65:7D:2C:35:75:D1:03:C1:03:2A:02:C2:17:51
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FA9556BBDC65950B82BDA134BB6A701D2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h67YZDjGZX0sNXXRA8EDKgLCF1E.roa
Signing time: Tue 28 Jul 2026 15:26:15 +0000
ROA not before: Tue 28 Jul 2026 15:26:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212079
IP address blocks: 193.234.104.0/24 maxlen: 24
2a01:280:380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:55:6b:bd:c6:59:50:b8:2b:da:13:4b:b6:a7:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 28 15:26:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87aed86438c6657d2c3575d103c1032a02c21751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:5a:91:4e:25:4d:6f:d4:94:d2:23:4b:22:
c1:b6:5c:43:b1:0a:26:2b:d1:e9:d6:d2:1f:21:c7:
88:af:9e:01:67:6a:39:a5:2d:66:49:1c:52:49:b9:
71:34:1d:a0:aa:d6:65:9d:95:a3:c5:c0:7f:88:89:
04:71:9c:ac:31:96:ac:c4:32:ea:27:e3:27:1b:8a:
c7:22:dc:36:28:82:6c:6b:6a:f6:9a:98:2a:1b:20:
ee:08:4a:c7:97:4a:7b:99:3a:64:96:16:56:56:b2:
33:e9:3c:01:e2:65:c8:74:9b:52:c6:1f:e4:41:30:
0d:61:d6:55:c7:ca:4c:a0:34:03:dd:01:e1:ad:39:
d1:0a:cc:fc:15:59:85:f9:67:1d:1d:4b:f7:40:17:
08:e8:56:53:80:d9:1f:ff:99:11:e0:c7:96:f6:e8:
04:f0:16:99:a5:2b:2a:cb:57:e2:7f:55:8e:c4:fc:
4e:3d:4c:e3:a7:da:b7:04:82:93:3f:02:57:67:01:
6e:cc:63:ce:37:4d:b6:26:b1:5b:bb:a2:3e:f9:06:
b0:75:7d:1b:5d:14:6b:91:b2:be:e7:ff:bd:77:8a:
1b:0c:21:f4:66:83:ee:ea:09:9d:ab:09:0c:9d:51:
06:87:2a:e7:f1:ec:ea:6e:65:05:20:cf:bb:04:fd:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:D8:64:38:C6:65:7D:2C:35:75:D1:03:C1:03:2A:02:C2:17:51
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h67YZDjGZX0sNXXRA8EDKgLCF1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.104.0/24
IPv6:
2a01:280:380::/48
Signature Algorithm: sha256WithRSAEncryption
46:4e:04:87:1f:63:6b:64:89:4c:ce:0f:85:45:06:8e:d5:1a:
d4:16:fa:37:09:d2:e3:3e:3f:78:bf:a6:8e:61:eb:d5:0b:24:
e6:08:b0:2b:30:81:97:56:e8:03:e1:3f:2b:8c:cf:83:ae:43:
9c:01:30:78:3a:7e:1b:ed:de:b1:2e:27:6e:b7:3d:a3:12:bf:
ef:0c:27:65:a2:8b:24:18:ed:94:c3:60:9d:95:5f:2d:74:63:
fc:d4:cd:45:2e:0d:2d:a7:eb:2d:55:00:66:0e:ba:90:5c:5f:
87:ce:8c:e1:10:4f:7e:f9:82:f7:8b:2d:f3:c1:9b:51:e4:cf:
ea:53:ed:ea:d1:0f:52:56:c4:b7:25:93:e9:7a:67:bc:67:83:
f3:d8:6c:2f:29:1c:74:f2:f1:e0:19:38:37:3c:75:5f:61:c5:
e2:61:89:e2:1d:c0:7d:a3:d3:8b:29:78:57:a0:eb:a1:4e:3c:
a7:50:da:1d:67:1b:1c:7d:5f:70:2e:b7:67:1e:c8:fa:08:e3:
c0:2d:c1:7e:a2:43:5c:e8:de:af:2c:fb:88:5e:e9:0e:15:b4:
eb:29:26:f3:61:aa:12:50:7c:fd:dc:d3:99:b9:15:8e:9d:36:
01:f8:54:c8:1c:58:76:ce:82:67:6d:3b:d3:e1:1a:8a:71:b9:
b0:ee:55:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ+pVWu9xllQuCvaE0u2pwHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNzI4MTUyNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2FlZDg2NDM4YzY2NTdkMmMzNTc1ZDEwM2MxMDMyYTAyYzIxNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIlakU4lTW/UlNIjSyLBtlxDsQom
K9Hp1tIfIceIr54BZ2o5pS1mSRxSSblxNB2gqtZlnZWjxcB/iIkEcZysMZasxDLq
J+MnG4rHItw2KIJsa2r2mpgqGyDuCErHl0p7mTpklhZWVrIz6TwB4mXIdJtSxh/k
QTANYdZVx8pMoDQD3QHhrTnRCsz8FVmF+WcdHUv3QBcI6FZTgNkf/5kR4MeW9ugE
8BaZpSsqy1fif1WOxPxOPUzjp9q3BIKTPwJXZwFuzGPON022JrFbu6I++QawdX0b
XRRrkbK+5/+9d4obDCH0ZoPu6gmdqwkMnVEGhyrn8ezqbmUFIM+7BP3vtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIeu2GQ4xmV9LDV10QPBAyoCwhdRMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvaDY3WVpEakdaWDBzTlhYUkE4RURLZ0xDRjFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwepoMA8E
AgACMAkDBwAqAQKAA4AwDQYJKoZIhvcNAQELBQADggEBAEZOBIcfY2tkiUzOD4VF
Bo7VGtQW+jcJ0uM+P3i/po5h69ULJOYIsCswgZdW6APhPyuMz4OuQ5wBMHg6fhvt
3rEuJ263PaMSv+8MJ2WiiyQY7ZTDYJ2VXy10Y/zUzUUuDS2n6y1VAGYOupBcX4fO
jOEQT375gveLLfPBm1Hkz+pT7erRD1JWxLclk+l6Z7xng/PYbC8pHHTy8eAZODc8
dV9hxeJhieIdwH2j04speFeg66FOPKdQ2h1nGxx9X3Aut2ceyPoI48AtwX6iQ1zo
3q8s+4he6Q4VtOspJvNhqhJQfP3c05m5FY6dNgH4VMgcWHbOgmdtO9PhGopxubDu
VaA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:29 2026 by rpki-client