Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jFDsiWmDdGlvHAyB9nKv8vBOAhc.roa
File: jFDsiWmDdGlvHAyB9nKv8vBOAhc.roa (raw, json)
Hash identifier: ERlDsp1kzJSQNSdZxYlQCQQ6idGjTya18kKf5xFJF80=
Subject key identifier: 8C:50:EC:89:69:83:74:69:6F:1C:0C:81:F6:72:AF:F2:F0:4E:02:17
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0A4D43DEDE155B4ADCF8437C7A53F70F8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jFDsiWmDdGlvHAyB9nKv8vBOAhc.roa
Signing time: Tue 15 Sep 2026 11:29:27 +0000
ROA not before: Tue 15 Sep 2026 11:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 192.36.8.0/24 maxlen: 24
192.36.9.0/24 maxlen: 24
192.36.35.0/24 maxlen: 24
192.36.87.0/24 maxlen: 24
192.36.92.0/24 maxlen: 24
192.36.140.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
192.121.63.0/24 maxlen: 24
192.165.109.0/24 maxlen: 24
193.180.21.0/24 maxlen: 24
193.180.94.0/23 maxlen: 23
193.181.71.0/24 maxlen: 24
193.181.176.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
193.182.105.0/24 maxlen: 24
193.182.156.0/24 maxlen: 24
193.182.159.0/24 maxlen: 24
193.234.44.0/24 maxlen: 24
193.234.45.0/24 maxlen: 24
193.234.90.0/24 maxlen: 24
193.234.91.0/24 maxlen: 24
194.14.240.0/24 maxlen: 24
194.14.242.0/24 maxlen: 24
194.68.3.0/24 maxlen: 24
194.68.212.0/24 maxlen: 24
194.68.236.0/24 maxlen: 24
194.71.204.0/24 maxlen: 24
194.103.248.0/24 maxlen: 24
2a01:280:368::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:d4:3d:ed:e1:55:b4:ad:cf:84:37:c7:a5:3f:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 15 11:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c50ec89698374696f1c0c81f672aff2f04e0217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:a0:6a:22:8d:69:22:85:36:1c:27:28:d3:
5c:4d:d0:0a:97:d0:58:45:c4:4c:53:04:2d:54:74:
03:7e:83:1d:9b:04:8b:82:8a:1f:7c:bb:77:3b:e2:
69:d3:75:74:a4:1a:b5:cf:91:4e:3f:aa:25:14:e4:
b5:e0:9c:bf:75:05:2e:24:59:f5:a3:ab:fc:c5:79:
25:ff:5a:d6:ec:38:9e:66:a0:18:88:db:01:e4:2c:
1c:3b:98:70:47:48:9e:e6:e6:9f:c9:f9:7b:08:06:
82:83:ff:6c:e0:d7:7f:8a:da:c6:79:11:f2:96:04:
5f:1a:75:b1:0c:e6:a6:93:45:8b:c3:53:3d:00:c1:
f4:5b:e4:f5:96:76:28:5c:91:8d:f9:02:11:2a:21:
0b:37:7e:66:1f:3f:c5:a6:01:9f:35:b7:2f:4d:88:
73:13:bf:de:45:64:be:9c:c2:8b:d8:12:59:69:3d:
61:21:a9:73:f7:32:44:7c:1d:71:6e:e3:02:80:5d:
90:df:13:d7:11:a7:e4:2d:f5:2a:b1:4a:dc:f2:80:
8b:b3:70:8d:47:1d:f5:86:f8:0f:45:eb:dd:aa:f7:
37:99:4d:df:77:3b:f8:fc:91:43:22:fb:d2:05:bd:
d7:f5:43:c5:d9:21:6e:ad:8a:fa:76:05:fb:16:18:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:EC:89:69:83:74:69:6F:1C:0C:81:F6:72:AF:F2:F0:4E:02:17
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jFDsiWmDdGlvHAyB9nKv8vBOAhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.8.0/23
192.36.35.0/24
192.36.87.0/24
192.36.92.0/24
192.36.140.0/24
192.71.200.0/24
192.121.63.0/24
192.165.109.0/24
193.180.21.0/24
193.180.94.0/23
193.181.71.0/24
193.181.176.0/24
193.182.6.0/24
193.182.105.0/24
193.182.156.0/24
193.182.159.0/24
193.234.44.0/23
193.234.90.0/23
194.14.240.0/24
194.14.242.0/24
194.68.3.0/24
194.68.212.0/24
194.68.236.0/24
194.71.204.0/24
194.103.248.0/24
IPv6:
2a01:280:368::/48
Signature Algorithm: sha256WithRSAEncryption
6b:20:9f:02:53:6c:8c:bb:20:98:4b:a1:8f:dc:f1:bc:e7:08:
f3:3a:a0:f3:cc:19:dd:c3:24:62:6b:80:f8:5b:a8:85:93:25:
54:6a:7a:07:06:7f:f5:f4:d7:76:1c:b6:b6:88:36:99:f3:6b:
4c:66:69:3b:77:90:fa:c7:65:c6:55:dc:4b:a3:d1:9e:f2:b3:
84:43:30:1d:37:27:22:5b:40:36:27:bf:ef:98:3c:cb:82:c7:
23:07:fe:fc:cf:82:50:12:44:0a:55:75:e3:92:91:87:87:bc:
18:e7:00:5d:43:e0:f9:cb:8b:16:ea:b6:9f:60:cc:a3:35:60:
4d:35:db:cc:ab:76:a1:19:1b:2c:fe:84:d6:bb:eb:dc:ba:5c:
19:d6:6a:3b:28:80:cc:7c:71:93:32:b8:98:98:d4:72:ba:ca:
50:84:c3:67:43:f8:23:9f:26:27:b4:79:28:05:07:1b:e5:ba:
7e:db:5a:b8:91:1a:5f:54:e8:87:c4:93:95:1d:8b:5e:76:b0:
88:f7:1d:95:fc:cd:1c:f5:4c:d3:b0:4e:b8:b3:03:a4:4c:bb:
59:62:63:fd:ee:7e:45:2b:74:da:7a:b0:4a:b0:40:f9:47:55:
0f:98:b4:e0:2d:63:b1:68:45:43:cf:62:8b:7b:89:92:48:38:
8e:c1:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:05 2026 by rpki-client