Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-IyEYAcwEGxUCRYe3LgN7INVbyk.roa
File: 1-IyEYAcwEGxUCRYe3LgN7INVbyk.roa (raw, json)
Hash identifier: DWnQWP0m7UDB6Y+FO9DquuuJR++BrHpMq/lk0GH0aDU=
Subject key identifier: F8:8C:84:60:07:30:10:6C:54:09:16:1E:DC:B8:0D:EC:83:55:6F:29
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019D1FE783CB0692738AF98F8DEDE7101AE0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-IyEYAcwEGxUCRYe3LgN7INVbyk.roa
Signing time: Tue 24 Mar 2026 12:52:39 +0000
ROA not before: Tue 24 Mar 2026 12:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.109.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.181.184.0/23 maxlen: 23
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.188.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.152.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.94.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.71.132.0/22 maxlen: 22
194.103.240.0/21 maxlen: 21
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:e7:83:cb:06:92:73:8a:f9:8f:8d:ed:e7:10:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 24 12:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f88c84600730106c5409161edcb80dec83556f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:bb:ca:e1:ae:45:31:7e:b8:d3:dd:cf:1b:
c4:0b:fc:7b:24:9c:0e:59:2c:ee:f7:1e:f7:ee:f0:
4c:e5:f1:5e:d1:b3:81:a3:f2:6d:6d:ca:4e:19:ae:
e3:9c:a4:a1:8c:9f:11:6f:e9:40:a2:9c:2b:2b:b9:
e9:26:35:1b:88:f0:7b:91:bc:00:3d:5f:a4:e5:c5:
82:64:92:4b:fc:b2:ae:36:cd:2e:4f:e8:8f:5b:de:
d0:e5:af:2e:9a:35:9d:93:07:9d:e4:26:73:4b:b8:
8a:2e:56:a6:95:77:81:9f:31:65:6e:52:8e:2d:51:
9c:69:38:ae:c7:80:f3:89:95:ae:08:2c:8b:d0:c2:
8d:81:32:bd:ef:05:d3:6c:10:b2:c7:bd:21:41:40:
90:56:7c:6b:2d:84:bf:22:69:12:4e:13:b2:4a:05:
a2:65:e4:1d:06:e3:9e:d8:80:42:c6:7a:b2:74:87:
14:5d:65:76:0e:61:e0:db:d2:7c:c2:b4:a4:ee:c5:
46:3c:3d:84:1d:c6:fe:7c:8a:af:23:9e:67:8f:f2:
09:a7:e8:21:c1:fa:53:f6:ed:7f:15:78:37:6b:cf:
22:53:d2:75:7f:ca:c6:bc:a0:93:df:26:ef:dd:67:
27:9e:c2:71:5d:42:d9:a9:c0:24:2d:f1:4a:8f:58:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:84:60:07:30:10:6C:54:09:16:1E:DC:B8:0D:EC:83:55:6F:29
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-IyEYAcwEGxUCRYe3LgN7INVbyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.109.0/24
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.181.184.0/23
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.188.0/24
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.152.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.94.0/24
194.68.127.0/24
194.71.132.0/22
194.103.240.0/21
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0f:dc:6a:d1:be:f4:c3:3d:b7:c0:d5:e7:24:b5:c6:cc:17:
54:cd:92:bc:5d:b5:ad:d4:f5:a9:3e:26:d3:88:d4:1b:4a:70:
df:8d:da:b2:cb:0b:66:9a:2f:cc:0a:8b:7b:25:f1:e9:f6:44:
e3:a3:b4:69:1c:f4:75:33:fc:e6:8c:97:b1:6f:d8:06:c3:05:
55:4b:75:97:46:c7:c0:7e:83:57:b7:87:cf:50:d6:93:3c:af:
b3:4c:53:98:ef:3d:e2:27:46:81:11:9b:c2:a5:f7:1f:17:44:
02:6a:fe:5d:38:76:4a:c9:02:7e:18:b7:41:3e:d3:09:81:de:
8a:77:24:11:9d:6f:b5:b6:12:17:b5:ff:be:8a:38:07:a2:64:
0b:85:56:ca:23:6c:5c:e1:e3:c7:f9:4a:c5:9d:93:98:85:52:
83:49:01:6a:99:9f:44:87:2d:9e:82:03:a6:10:e1:8c:45:69:
b7:33:25:1a:13:7f:91:97:c5:1f:9a:85:1d:a4:4c:90:d7:0e:
bb:d9:3b:6c:94:39:80:ee:a6:6c:ec:c8:b2:35:56:d9:e0:66:
c4:1c:03:24:f9:af:01:c9:bd:a3:28:9f:2d:07:81:dd:44:51:
4b:27:ee:b5:31:f0:13:ac:ab:ad:15:7d:3f:d7:aa:54:b9:3c:
8b:d3:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:28 2026 by rpki-client