Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CWbXvN9-uSoH5kIyD6XCoAypphI.roa
File: CWbXvN9-uSoH5kIyD6XCoAypphI.roa (raw, json)
Hash identifier: braTLnyC9zOdsoH+E0ovIyU09znvEZeIfrY+iwWVkZQ=
Subject key identifier: 09:66:D7:BC:DF:7E:B9:2A:07:E6:42:32:0F:A5:C2:A0:0C:A9:A6:12
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019EFE9FF1D3540D99B933289A60F9677774
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CWbXvN9-uSoH5kIyD6XCoAypphI.roa
Signing time: Thu 25 Jun 2026 11:52:35 +0000
ROA not before: Thu 25 Jun 2026 11:52:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.12.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.165.182.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
193.183.47.0/24 maxlen: 24
193.183.48.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.105.0/24 maxlen: 24
193.183.251.0/24 maxlen: 24
193.234.54.0/24 maxlen: 24
194.14.165.0/24 maxlen: 24
194.68.223.0/24 maxlen: 24
194.68.224.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.103.93.0/24 maxlen: 24
194.132.27.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:9f:f1:d3:54:0d:99:b9:33:28:9a:60:f9:67:77:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 25 11:52:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0966d7bcdf7eb92a07e642320fa5c2a00ca9a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:51:3c:68:0c:95:1f:e1:c1:85:90:08:46:
d5:d4:63:2f:1d:be:f8:2a:63:e0:fd:5f:05:14:7d:
c8:fa:40:b5:d2:77:f2:00:3e:f4:b4:d9:e3:c1:87:
9c:df:44:f3:1b:d1:35:6f:eb:40:fe:a0:76:58:31:
9b:4a:84:d4:07:3c:a5:4e:7b:f7:00:30:bb:83:fb:
bb:11:60:4f:65:db:df:00:4e:73:fb:17:fd:e7:ae:
6c:b6:76:0f:da:80:55:23:fd:28:94:ba:42:86:7f:
81:50:88:e1:71:5d:91:f0:9f:25:fc:be:8c:0f:00:
21:91:f2:d1:35:63:db:12:e1:9e:6a:fd:d7:9b:f1:
e6:27:45:b7:7b:e4:1f:19:cd:77:b4:3c:6d:7e:91:
ce:41:04:92:65:a0:83:a3:9e:da:5a:e0:dc:5e:73:
71:9a:ae:5a:f8:c4:1f:d6:e5:b0:a6:1f:c7:87:f0:
eb:19:4e:e7:cc:5f:cc:01:69:a8:99:b7:cc:14:fe:
40:c5:6f:f3:93:02:20:17:fb:2e:ef:2f:5b:94:50:
3f:c3:5c:e9:24:b8:3b:6b:0b:70:75:9c:23:34:86:
ea:07:d7:46:02:3f:ac:9c:4d:fa:43:db:96:d2:b7:
0b:b5:f4:83:dc:c0:c3:a9:65:4a:79:0d:37:af:e0:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:D7:BC:DF:7E:B9:2A:07:E6:42:32:0F:A5:C2:A0:0C:A9:A6:12
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CWbXvN9-uSoH5kIyD6XCoAypphI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.12.0/24
192.121.101.0/24
192.165.182.0/24
193.181.65.0/24
193.183.47.0-193.183.48.255
193.183.92.0/24
193.183.104.0/23
193.183.251.0/24
193.234.54.0/24
194.14.165.0/24
194.68.223.0-194.68.224.255
194.71.215.0/24
194.103.93.0/24
194.132.27.0/24
194.132.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a7:0d:47:18:9a:c5:00:5b:66:eb:be:63:71:61:a5:4c:fa:
91:cf:40:b5:09:f3:08:d5:e9:ad:05:1c:80:b7:fa:37:32:87:
f9:87:7d:f6:2a:86:e8:95:d6:51:d2:b0:46:56:14:f2:8e:22:
84:81:76:2c:81:91:01:a8:fb:c0:a1:99:64:11:48:73:8c:a7:
51:f3:92:dd:60:e8:42:b9:31:98:fe:3e:8a:cb:8a:af:dd:e3:
e2:3a:87:ab:86:bd:8b:34:a7:e7:ef:dc:b1:bd:8e:39:91:a4:
c4:cf:10:72:33:50:c7:d9:68:cb:95:82:44:68:c9:d0:68:86:
27:52:9c:59:ff:fe:ef:ac:db:06:94:de:3b:9d:72:5a:77:14:
15:ee:da:02:a3:f4:74:4b:ce:36:28:ef:05:58:bc:28:06:f9:
8f:96:41:4a:38:9d:75:59:13:aa:cb:fd:90:bb:1b:b8:2e:83:
5f:1f:87:2f:80:3f:95:cd:82:01:60:39:1c:48:8a:09:61:1b:
83:ec:9e:2f:03:20:58:d4:5a:35:a1:6c:25:1b:4f:2e:a6:c5:
2a:8d:82:26:b2:e3:bc:aa:59:87:e1:a1:d2:49:b4:fc:e8:7c:
39:5c:06:c9:34:40:e9:2b:fa:09:8f:68:fe:06:74:50:e2:66:
1c:07:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:02 2026 by rpki-client