Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sIxj5_kk7dKA6JLsUnXGSyVPDI8.roa
File: sIxj5_kk7dKA6JLsUnXGSyVPDI8.roa (raw, json)
Hash identifier: CssNOIEW2uEi4SLodCFcYh4VvMCTcXOj/w0m6g4IJdI=
Subject key identifier: B0:8C:63:E7:F9:24:ED:D2:80:E8:92:EC:52:75:C6:4B:25:4F:0C:8F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0A4DDF3D0F475D8B906F08F4B6576ACEA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sIxj5_kk7dKA6JLsUnXGSyVPDI8.roa
Signing time: Tue 15 Sep 2026 11:40:04 +0000
ROA not before: Tue 15 Sep 2026 11:40:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57829
IP address blocks: 192.36.8.0/24 maxlen: 24
192.36.9.0/24 maxlen: 24
192.165.109.0/24 maxlen: 24
193.180.21.0/24 maxlen: 24
193.180.94.0/23 maxlen: 23
193.181.176.0/24 maxlen: 24
193.234.1.0/24 maxlen: 24
193.234.44.0/24 maxlen: 24
193.234.45.0/24 maxlen: 24
193.234.90.0/24 maxlen: 24
193.234.91.0/24 maxlen: 24
193.235.192.0/24 maxlen: 24
194.14.195.0/24 maxlen: 24
194.68.212.0/24 maxlen: 24
194.68.236.0/24 maxlen: 24
194.71.204.0/24 maxlen: 24
194.103.47.0/24 maxlen: 24
2a01:280:368::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:dd:f3:d0:f4:75:d8:b9:06:f0:8f:4b:65:76:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 15 11:40:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08c63e7f924edd280e892ec5275c64b254f0c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:cf:49:4d:e1:8f:24:6d:c8:38:30:7b:00:
99:86:18:3f:86:e3:0b:db:be:e2:86:86:5a:b7:fc:
b0:ba:3c:ae:70:0a:97:9e:1f:b3:33:48:60:09:39:
c8:6c:89:a1:c4:0f:c8:d7:05:d9:77:f4:44:a6:c1:
d3:d6:26:62:3c:fe:52:a2:41:b7:29:68:85:1e:a8:
ef:0d:06:ba:55:0e:ca:84:e3:c0:63:04:9a:96:86:
6f:81:10:1b:3c:ef:e4:34:85:6d:75:69:cf:5b:42:
fd:2e:5d:c3:40:8d:2c:82:19:ae:1d:6e:46:2b:50:
01:5a:11:1b:ae:68:43:10:a7:6e:d1:64:95:23:ec:
95:11:f2:4a:5f:02:1d:2a:b3:54:f7:5b:b7:66:ac:
c5:d1:c9:42:f0:a8:44:36:d3:b9:19:08:89:a0:aa:
bd:8f:1a:5b:ec:34:c0:04:0c:2d:bd:8b:ae:a1:7d:
b3:e4:72:5c:ca:48:72:73:42:85:24:02:21:78:ad:
91:93:4e:80:c4:71:e4:ff:ea:f9:38:95:ba:ca:76:
10:a0:ab:85:37:63:d0:0f:a3:d1:34:34:46:f9:c0:
bd:4e:f9:ba:eb:d8:62:06:bc:e0:92:1b:57:19:c2:
34:a2:c4:ec:ba:38:98:37:4c:78:45:a8:11:41:a6:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:63:E7:F9:24:ED:D2:80:E8:92:EC:52:75:C6:4B:25:4F:0C:8F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sIxj5_kk7dKA6JLsUnXGSyVPDI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.8.0/23
192.165.109.0/24
193.180.21.0/24
193.180.94.0/23
193.181.176.0/24
193.234.1.0/24
193.234.44.0/23
193.234.90.0/23
193.235.192.0/24
194.14.195.0/24
194.68.212.0/24
194.68.236.0/24
194.71.204.0/24
194.103.47.0/24
IPv6:
2a01:280:368::/48
Signature Algorithm: sha256WithRSAEncryption
a9:f7:94:b2:e5:67:08:79:40:14:01:9f:52:c5:75:7e:f0:63:
e0:0f:d6:47:87:9a:77:d2:3a:94:30:4c:01:43:e6:66:ea:d0:
88:5b:5a:03:c3:fb:3f:ee:72:4a:0c:cc:0f:02:c9:73:7b:e3:
c4:ea:fc:a7:19:70:98:90:75:ee:8c:94:8a:c2:f3:1f:e7:d8:
06:28:b5:91:84:bb:9b:40:1f:94:11:88:83:08:1d:ad:f9:64:
9c:89:66:9a:b5:93:75:aa:d6:54:b3:3a:34:a5:e7:e8:99:78:
af:cb:5d:bf:3b:11:fb:12:7b:a2:88:19:2d:b6:7d:a1:e4:8a:
5d:0b:b1:15:8a:30:05:36:5d:e2:30:dc:5f:f6:19:f8:76:01:
17:ac:85:a1:c5:3d:e2:72:d8:60:0c:28:cf:30:8c:d9:b9:29:
7b:1c:f9:d5:48:80:8b:81:f9:9c:1e:7c:c9:38:8e:50:54:33:
df:9f:a8:de:51:78:2b:03:92:f7:2d:93:d8:df:a0:3d:a4:97:
e3:54:21:d3:c9:bf:51:dc:88:7d:52:55:a7:b7:6f:a0:f1:6d:
ee:65:78:85:fb:c1:5a:e3:52:97:23:ea:14:fb:80:a6:ab:96:
02:98:ec:de:32:f3:82:b7:17:b9:79:bd:b3:f4:b6:34:ff:fc:
23:f5:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:16 2026 by rpki-client