Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sLLpiYr-dk_FgJpLBEd7RMW-MC4.roa
File: sLLpiYr-dk_FgJpLBEd7RMW-MC4.roa (raw, json)
Hash identifier: BJ76Y9B5hx+b/bbFJ9So9t/QB/eaIRYlOirx3wEGQvQ=
Subject key identifier: B0:B2:E9:89:8A:FE:76:4F:C5:80:9A:4B:04:47:7B:44:C5:BE:30:2E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A09094878BBB22E2C851E49EF0890B1508
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sLLpiYr-dk_FgJpLBEd7RMW-MC4.roa
Signing time: Fri 11 Sep 2026 13:07:28 +0000
ROA not before: Fri 11 Sep 2026 13:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201061
IP address blocks: 192.71.168.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.234.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:94:87:8b:bb:22:e2:c8:51:e4:9e:f0:89:0b:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 11 13:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b2e9898afe764fc5809a4b04477b44c5be302e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:d6:84:bd:d3:c2:7f:77:cf:2f:75:05:57:
37:7a:7e:6f:8a:66:1f:e5:ec:50:70:8a:91:98:b0:
42:10:de:a1:86:71:eb:a0:10:7d:5d:10:81:cf:cd:
89:7c:8f:da:38:4d:cd:a2:52:28:1e:c1:93:9c:68:
2c:b8:1e:df:ce:de:f0:d9:f4:a7:40:87:f3:14:f3:
f1:23:03:26:cf:c1:55:27:49:fe:a2:7d:58:7f:8e:
e7:16:c8:4a:c5:08:11:1e:e8:6c:05:fd:6f:66:e6:
d7:43:29:26:11:15:f9:99:14:7f:06:bf:c1:ea:30:
ec:da:63:b3:5c:b8:4d:7f:03:e6:48:58:a4:17:2c:
01:d4:7f:a5:e9:b6:47:f8:3d:1f:69:db:46:e4:66:
3e:7c:15:cd:b3:08:4c:a4:6b:0e:e9:22:88:8b:b7:
fa:fe:cb:d3:c0:86:bd:84:a3:9c:d1:0a:62:fe:25:
70:0e:44:d1:86:f0:5d:fd:17:1a:d5:ec:dc:42:00:
0f:99:af:a4:0b:85:12:8c:59:c6:96:26:1a:e5:1e:
01:28:00:7e:ab:8f:35:dd:95:b2:6b:ff:b8:a2:aa:
de:98:a9:3a:36:8c:57:4f:d8:be:41:5c:e8:a8:be:
b8:11:24:d7:b5:c9:dc:76:a8:01:af:74:95:1d:40:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:E9:89:8A:FE:76:4F:C5:80:9A:4B:04:47:7B:44:C5:BE:30:2E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sLLpiYr-dk_FgJpLBEd7RMW-MC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.168.0/24
192.176.161.0/24
193.234.88.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ae:10:a2:0f:b7:0f:7d:b1:73:ab:f4:3a:c1:99:9e:0a:cf:
e8:f4:fd:80:28:31:c0:57:2c:9b:b1:a8:c1:26:3c:dd:60:c1:
dc:7b:2a:dc:9c:14:de:5b:37:da:fb:40:bd:d9:5f:e7:42:0b:
1e:48:34:20:f9:f6:4e:3c:b5:ab:9f:42:ed:58:69:47:5b:b3:
9c:86:be:51:f8:4a:7e:bd:d4:ff:d7:3e:29:27:cc:df:8c:7a:
24:ae:33:c1:54:36:cb:51:41:7a:1a:bd:b2:e5:13:32:03:73:
44:1e:ef:0b:02:a2:cb:6a:10:99:af:bc:f3:9d:19:1e:1e:9f:
5c:b0:ab:37:2b:0a:e3:90:63:73:8a:9e:ca:42:2d:e2:18:95:
bf:85:be:d8:83:27:2a:66:6a:20:b6:75:f3:62:c3:a5:d7:e5:
5f:0e:85:87:c3:3c:e5:ba:b2:b5:f8:ff:6b:7e:a6:4c:08:6d:
37:b7:e8:7b:b5:12:28:0e:40:bd:28:45:9a:40:af:f1:59:10:
83:31:3f:fc:53:b6:35:ca:c9:fb:8f:2d:8d:af:b3:e1:b4:9d:
b7:d7:34:4e:35:31:b2:db:49:18:34:da:df:c7:20:90:b1:d1:
95:b5:62:21:be:8c:c9:c5:02:67:b3:28:20:d5:66:c2:76:68:
df:cf:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:44 2026 by rpki-client