Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xqS6qmVRbzwri_qoe3K30KzDDFQ.roa
File: xqS6qmVRbzwri_qoe3K30KzDDFQ.roa (raw, json)
Hash identifier: XzvwD9jQJUXPXaPANQi+wqg2YozpdIhfbFz3DRYIRDU=
Subject key identifier: C6:A4:BA:AA:65:51:6F:3C:2B:8B:FA:A8:7B:72:B7:D0:AC:C3:0C:54
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C4732BF4B897BCFCAB7AFA5A2B8013D65
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xqS6qmVRbzwri_qoe3K30KzDDFQ.roa
Signing time: Tue 10 Feb 2026 10:57:13 +0000
ROA not before: Tue 10 Feb 2026 10:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48942
IP address blocks: 192.165.195.0/24 maxlen: 24
193.234.126.0/24 maxlen: 24
193.235.65.0/24 maxlen: 24
194.71.205.0/24 maxlen: 24
194.103.239.0/24 maxlen: 24
194.132.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:32:bf:4b:89:7b:cf:ca:b7:af:a5:a2:b8:01:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 10 10:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6a4baaa65516f3c2b8bfaa87b72b7d0acc30c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:7e:c6:3f:74:10:55:4c:25:09:6e:9e:04:
b5:3b:27:8f:5c:88:66:2d:ac:bc:28:86:9c:06:a2:
39:fc:57:b5:0e:19:f6:bf:dc:c7:d2:19:77:dd:de:
1c:ba:1f:f3:e0:67:ce:a7:dc:3d:ba:07:e6:73:1a:
27:6c:fd:1d:54:0a:6f:74:f3:d6:d9:e3:10:dd:72:
68:59:f8:b4:e4:1a:f5:8c:08:48:f9:26:86:e1:9f:
0f:15:db:82:1d:28:fa:19:7f:18:06:f2:82:ff:a7:
00:35:60:51:60:a4:37:28:92:bc:b5:cd:ad:7b:b3:
ab:90:02:30:2c:cc:56:db:6c:02:19:71:01:a5:ec:
dc:e6:43:ee:65:66:13:2a:8b:bc:f9:c5:2d:8f:45:
bf:88:5e:b9:23:d1:60:c3:de:6d:0f:1f:df:28:25:
d0:ac:45:26:ee:a9:c8:cf:8f:4e:64:89:82:6d:08:
e1:8d:58:3f:45:a3:de:a1:73:01:d3:cb:7a:31:89:
09:b6:b8:e7:b5:ba:59:64:a0:aa:a2:7e:75:7d:4f:
e1:ed:fc:dd:12:ae:61:d5:de:71:ff:27:73:37:09:
8f:ec:e1:f5:62:3a:77:e8:42:3f:ac:52:ee:a9:64:
1c:72:a2:c3:f7:9d:fe:ce:ea:f0:46:72:86:cc:36:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:BA:AA:65:51:6F:3C:2B:8B:FA:A8:7B:72:B7:D0:AC:C3:0C:54
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xqS6qmVRbzwri_qoe3K30KzDDFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.195.0/24
193.234.126.0/24
193.235.65.0/24
194.71.205.0/24
194.103.239.0/24
194.132.167.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1d:44:87:04:df:99:d8:6c:ff:58:a8:e5:b9:e8:4e:dd:fe:
90:6d:c0:4e:8d:02:ab:f5:7e:1d:a5:fb:bf:04:a0:09:87:4e:
78:b5:53:5e:2c:40:4a:0c:ca:35:84:e0:41:01:b0:87:03:c9:
f9:8e:b3:46:3a:2c:c9:74:22:c5:6c:8e:86:1b:83:93:88:06:
38:8e:d7:be:7d:6f:55:c9:d2:a9:4f:9d:cb:e7:25:53:fe:57:
23:2e:ae:f1:91:e1:1f:25:5f:95:1a:ec:37:23:30:9b:79:55:
76:81:8c:d8:2a:9f:26:58:01:ae:16:99:6c:c1:4d:36:3d:b0:
50:59:ac:4e:7d:d7:4d:7d:3a:3a:26:b9:c5:ae:9f:d9:b3:99:
c8:ad:81:6f:8d:da:ae:35:4b:ae:35:f4:51:82:ae:a8:da:98:
6e:a8:5f:ac:31:58:4c:cd:03:c0:f9:b8:ab:3f:99:9d:1c:3f:
95:7a:d8:72:01:6a:f4:5d:79:f1:bb:fa:23:ee:9f:a4:bb:28:
2d:85:40:10:cd:e3:69:ce:38:be:db:be:50:94:e8:74:0e:d5:
72:c4:71:c4:fc:82:a4:38:a1:a1:3e:97:77:90:19:63:b8:c6:
2a:fb:21:3b:fe:3f:81:2e:58:37:e8:18:06:3a:62:1d:12:9d:
9b:6f:67:08
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZxHMr9LiXvPyrevpaK4AT1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwMjEwMTA1NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmE0YmFhYTY1NTE2ZjNjMmI4YmZhYTg3YjcyYjdkMGFjYzMwYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPJ+xj90EFVMJQlungS1OyePXIhm
Lay8KIacBqI5/Fe1Dhn2v9zH0hl33d4cuh/z4GfOp9w9ugfmcxonbP0dVApvdPPW
2eMQ3XJoWfi05Br1jAhI+SaG4Z8PFduCHSj6GX8YBvKC/6cANWBRYKQ3KJK8tc2t
e7OrkAIwLMxW22wCGXEBpezc5kPuZWYTKou8+cUtj0W/iF65I9Fgw95tDx/fKCXQ
rEUm7qnIz49OZImCbQjhjVg/RaPeoXMB08t6MYkJtrjntbpZZKCqon51fU/h7fzd
Eq5h1d5x/ydzNwmP7OH1Yjp36EI/rFLuqWQccqLD953+zurwRnKGzDZiUQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMakuqplUW88K4v6qHtyt9CswwxUMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEveHFTNnFtVlJiendyaV9xb2UzSzMwS3pEREZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwKXDAwQA
wep+AwQAwetBAwQAwkfNAwQAwmfvAwQAwoSnMA0GCSqGSIb3DQEBCwUAA4IBAQCR
HUSHBN+Z2Gz/WKjluehO3f6QbcBOjQKr9X4dpfu/BKAJh054tVNeLEBKDMo1hOBB
AbCHA8n5jrNGOizJdCLFbI6GG4OTiAY4jte+fW9VydKpT53L5yVT/lcjLq7xkeEf
JV+VGuw3IzCbeVV2gYzYKp8mWAGuFplswU02PbBQWaxOfddNfTo6JrnFrp/Zs5nI
rYFvjdquNUuuNfRRgq6o2phuqF+sMVhMzQPA+birP5mdHD+VethyAWr0XXnxu/oj
7p+kuygthUAQzeNpzji+275QlOh0DtVyxHHE/IKkOKGhPpd3kBljuMYq+yE7/j+B
Llg36BgGOmIdEp2bb2cI
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:36:14 2026 by rpki-client