Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/N2QjxFgSe3BlPZV1t710q0axGN4.roa
File: N2QjxFgSe3BlPZV1t710q0axGN4.roa (raw, json)
Hash identifier: qujWhXBupCUvQvow54VXYrw0EIR4KW11GSBSeHTnK+Y=
Subject key identifier: 37:64:23:C4:58:12:7B:70:65:3D:95:75:B7:BD:74:AB:46:B1:18:DE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0AA1E4F8DBB110B9EC37CDD012F01D641
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/N2QjxFgSe3BlPZV1t710q0axGN4.roa
Signing time: Wed 16 Sep 2026 12:08:28 +0000
ROA not before: Wed 16 Sep 2026 12:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202780
IP address blocks: 192.121.15.0/24 maxlen: 24
192.165.130.0/24 maxlen: 24
192.165.133.0/24 maxlen: 24
193.181.55.0/24 maxlen: 24
193.183.165.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
194.71.104.0/23 maxlen: 23
194.71.104.0/24 maxlen: 24
194.71.105.0/24 maxlen: 24
194.103.206.0/24 maxlen: 24
194.132.36.0/22 maxlen: 24
2a01:280:360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:1e:4f:8d:bb:11:0b:9e:c3:7c:dd:01:2f:01:d6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 16 12:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=376423c458127b70653d9575b7bd74ab46b118de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ae:60:71:11:c7:0d:32:35:71:b4:cb:47:11:
7e:91:9b:3a:5c:1a:86:be:4c:f6:1e:b5:55:32:b7:
6a:1a:54:d5:11:81:33:72:cb:6c:3b:22:41:1b:9b:
5c:f4:85:96:75:1d:08:64:5b:d5:e1:e5:da:7e:d4:
90:75:5e:c6:52:d5:cc:31:9d:ec:a2:ea:5b:6f:cc:
3b:a5:70:8f:3e:aa:a6:58:35:06:1d:c2:0d:78:b3:
50:67:a4:ca:66:68:18:c2:cb:c7:1e:fd:49:16:19:
32:82:03:83:da:56:38:27:6e:8b:0d:77:f1:26:f5:
a8:78:1e:7c:5d:55:bc:4f:ba:ad:c8:1c:50:38:d9:
3b:95:88:45:61:3a:bc:d1:28:da:08:0f:62:7b:80:
0b:d9:3e:4a:18:a8:d0:4d:1e:6f:f5:e4:bf:f2:14:
77:3f:26:89:d9:df:70:08:21:cb:79:9d:2f:7b:4c:
52:0d:7c:3f:94:ff:86:43:11:2e:9f:f7:44:ad:f2:
bf:83:5a:c8:6e:6b:0b:13:d1:81:eb:c1:73:de:d1:
32:bf:be:90:1b:3d:37:71:09:93:8f:ae:15:85:f1:
4a:7b:56:95:c8:c1:55:2a:98:67:7d:4b:a5:fe:ee:
0e:a4:31:f8:04:d1:60:3c:27:d1:da:9e:08:8c:e6:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:23:C4:58:12:7B:70:65:3D:95:75:B7:BD:74:AB:46:B1:18:DE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/N2QjxFgSe3BlPZV1t710q0axGN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.15.0/24
192.165.130.0/24
192.165.133.0/24
193.181.55.0/24
193.183.165.0/24
193.234.68.0/23
194.71.104.0/23
194.103.206.0/24
194.132.36.0/22
IPv6:
2a01:280:360::/48
Signature Algorithm: sha256WithRSAEncryption
28:fd:c4:ce:23:3b:02:d3:77:8e:83:04:cf:b8:d1:6f:d8:91:
82:91:44:28:cd:a9:d5:5b:d7:f1:dc:a6:54:5c:7d:89:f5:91:
77:15:e9:39:bb:e8:15:92:73:8f:6f:f9:d6:ac:d8:5c:31:23:
a8:ea:33:b8:ab:90:6f:87:da:0c:7a:1d:f0:0f:1a:70:db:24:
36:40:ae:a6:6d:bb:da:12:45:2e:fe:84:34:ed:1f:0b:a0:59:
f0:6e:9c:52:8a:b6:53:81:3a:e3:75:33:b1:7d:9a:d1:d6:85:
5e:b1:45:03:4f:32:22:2f:13:72:54:59:53:ba:83:51:72:0f:
d5:68:86:dc:cb:25:8f:d6:6e:b8:dc:f4:9d:09:e2:59:85:00:
4c:49:02:00:56:c9:89:aa:f9:cd:64:db:b2:f9:81:ba:8e:06:
df:1f:5e:92:66:ad:f6:b3:d8:74:a1:06:c0:50:36:28:28:e3:
ab:a4:cb:f9:3a:88:23:d2:ca:cb:99:d0:0f:c2:65:63:d0:65:
66:b0:91:92:64:c5:fa:ba:23:29:f5:ed:9d:f6:9b:aa:ed:05:
14:67:29:a5:e6:a3:c5:9d:ef:99:ae:7d:22:05:bd:9e:e7:4c:
7d:bf:5f:d8:53:78:c5:23:e4:d1:c6:a2:84:c5:24:55:46:b4:
37:72:e4:f3
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAaCqHk+NuxELnsN83QEvAdZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwOTE2MTIwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY0MjNjNDU4MTI3YjcwNjUzZDk1NzViN2JkNzRhYjQ2YjExOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a5gcRHHDTI1cbTLRxF+kZs6XBqG
vkz2HrVVMrdqGlTVEYEzcstsOyJBG5tc9IWWdR0IZFvV4eXaftSQdV7GUtXMMZ3s
oupbb8w7pXCPPqqmWDUGHcINeLNQZ6TKZmgYwsvHHv1JFhkyggOD2lY4J26LDXfx
JvWoeB58XVW8T7qtyBxQONk7lYhFYTq80SjaCA9ie4AL2T5KGKjQTR5v9eS/8hR3
PyaJ2d9wCCHLeZ0ve0xSDXw/lP+GQxEun/dErfK/g1rIbmsLE9GB68Fz3tEyv76Q
Gz03cQmTj64VhfFKe1aVyMFVKphnfUul/u4OpDH4BNFgPCfR2p4IjObPewIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDdkI8RYEntwZT2Vdbe9dKtGsRjeMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTjJRanhGZ1NlM0JsUFpWMXQ3MTBxMGF4R040LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQAwHkPAwQA
wKWCAwQAwKWFAwQAwbU3AwQAwbelAwQBwepEAwQBwkdoAwQAwmfOAwQCwoQkMA8E
AgACMAkDBwAqAQKAA2AwDQYJKoZIhvcNAQELBQADggEBACj9xM4jOwLTd46DBM+4
0W/YkYKRRCjNqdVb1/HcplRcfYn1kXcV6Tm76BWSc49v+das2FwxI6jqM7irkG+H
2gx6HfAPGnDbJDZArqZtu9oSRS7+hDTtHwugWfBunFKKtlOBOuN1M7F9mtHWhV6x
RQNPMiIvE3JUWVO6g1FyD9VohtzLJY/Wbrjc9J0J4lmFAExJAgBWyYmq+c1k27L5
gbqOBt8fXpJmrfaz2HShBsBQNigo46uky/k6iCPSysuZ0A/CZWPQZWawkZJkxfq6
Iyn17Z32m6rtBRRnKaXmo8Wd75mufSIFvZ7nTH2/X9hTeMUj5NHGooTFJFVGtDdy
5PM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:27 2026 by rpki-client