Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hIVfu8lL58P_SpIbBvI_H__eLzI.roa
File: hIVfu8lL58P_SpIbBvI_H__eLzI.roa (raw, json)
Hash identifier: Qmlb69WmusXJT8fbmGhAsVoSjYi5TWW0KG8M/SIT/7Y=
Subject key identifier: 84:85:5F:BB:C9:4B:E7:C3:FF:4A:92:1B:06:F2:3F:1F:FF:DE:2F:32
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C66416446E7C6088D9F9C8A641F409099
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hIVfu8lL58P_SpIbBvI_H__eLzI.roa
Signing time: Mon 16 Feb 2026 11:41:27 +0000
ROA not before: Mon 16 Feb 2026 11:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 192.36.247.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
192.71.254.0/23 maxlen: 24
192.121.62.0/24 maxlen: 24
192.176.43.0/24 maxlen: 24
193.182.113.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
193.234.53.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
194.103.8.0/24 maxlen: 24
2a01:280:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:41:64:46:e7:c6:08:8d:9f:9c:8a:64:1f:40:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 16 11:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84855fbbc94be7c3ff4a921b06f23f1fffde2f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e3:17:2f:5c:60:04:04:7c:d0:d7:53:15:84:
ac:26:b5:c7:e2:2f:3e:59:7f:57:51:5c:f3:d2:24:
e4:c6:18:9e:cc:9e:41:80:c4:c3:b9:41:b1:d9:bb:
79:28:8f:5c:66:7d:4e:9c:3c:e5:98:8f:d7:d2:75:
8d:fa:42:ab:8d:03:c9:82:83:53:e8:eb:c6:89:3c:
cf:5c:60:5a:eb:0f:8d:ea:f2:07:a0:1e:55:71:60:
0a:55:7f:8a:4c:de:54:d7:5d:43:40:16:0f:9c:e6:
be:8a:b5:bf:1b:11:2d:e4:2e:d3:10:d8:60:8c:30:
18:79:83:28:1d:80:d0:49:e3:98:77:35:be:32:89:
72:af:ba:d9:a5:75:61:d1:3d:6a:9f:b6:91:a0:c2:
6d:a0:d4:c6:9d:b0:8a:78:4d:9d:4f:f7:fb:50:f4:
5a:25:e4:63:53:18:0f:5b:48:82:a4:2a:bf:89:af:
7d:04:72:e4:c1:04:62:c4:8d:2d:69:bc:97:28:6c:
89:c2:c1:74:c4:e3:95:a5:d8:58:74:ba:cc:05:2a:
9f:3b:2d:15:3c:e8:e1:65:6f:b3:88:e7:df:db:8f:
c9:92:dc:af:71:1d:03:23:21:4d:fd:22:3b:a5:3d:
73:fa:d9:0e:ea:ce:b1:c0:aa:50:d7:ee:83:a5:af:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:5F:BB:C9:4B:E7:C3:FF:4A:92:1B:06:F2:3F:1F:FF:DE:2F:32
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hIVfu8lL58P_SpIbBvI_H__eLzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
192.121.62.0/24
192.176.43.0/24
193.182.113.0/24
193.183.118.0/24
193.234.52.0/23
193.234.120.0/22
194.103.8.0/24
IPv6:
2a01:280:6::/48
Signature Algorithm: sha256WithRSAEncryption
04:c1:73:d3:0b:3f:be:1c:5b:80:9d:00:fc:4c:1c:d5:88:6b:
80:2f:0e:61:5d:1c:4e:9b:ef:fd:48:51:fb:ba:ea:63:b9:7b:
20:4d:72:4b:19:c0:4f:cd:1d:35:8f:10:05:6b:63:1e:b3:c2:
ea:dc:72:43:ef:92:4f:67:ef:f2:36:2e:4e:67:ec:fc:ab:5c:
04:ce:1d:0c:32:86:25:82:39:9f:eb:33:69:a8:25:5a:c0:90:
96:c7:56:53:0c:37:de:9a:83:9d:8b:f7:76:9c:44:1d:29:f1:
b2:69:30:13:33:f1:cf:09:7e:8a:55:c5:8b:4f:b1:6c:4f:9c:
4d:d4:57:65:94:b7:80:ea:c3:66:5f:08:59:fa:6e:73:75:f7:
cf:45:7b:ad:ac:93:8b:f5:2c:7f:a5:ce:00:fb:1e:f4:3b:9b:
46:ea:24:a3:d8:61:23:55:2a:08:41:34:6e:34:0e:4b:09:04:
a0:e1:6a:85:c1:56:98:d4:d5:38:bf:36:67:cb:bf:d8:0e:1a:
4d:a8:fd:06:82:08:0a:58:b3:65:91:d0:ee:40:56:5d:ec:b2:
3b:ad:5f:0e:57:12:63:39:c5:a6:4e:74:5d:91:4e:bf:90:e1:
5b:6c:57:f6:8e:fc:60:0b:a9:63:59:0f:36:b6:95:fc:af:a6:
d6:73:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:08 2026 by rpki-client