Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h7HL1NtNDBECCpb91IpoW6qsM_k.roa
File: h7HL1NtNDBECCpb91IpoW6qsM_k.roa (raw, json)
Hash identifier: abu8jivGTCf71ZOKAdchj9+fYoFqfgetLL7+fuT+rmo=
Subject key identifier: 87:B1:CB:D4:DB:4D:0C:11:02:0A:96:FD:D4:8A:68:5B:AA:AC:33:F9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0CDB294B353519D274C453BAE2AB99E0F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h7HL1NtNDBECCpb91IpoW6qsM_k.roa
Signing time: Wed 23 Sep 2026 09:57:07 +0000
ROA not before: Wed 23 Sep 2026 09:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154270
IP address blocks: 193.235.110.0/23 maxlen: 23
193.235.110.0/24 maxlen: 24
193.235.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b2:94:b3:53:51:9d:27:4c:45:3b:ae:2a:b9:9e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 23 09:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87b1cbd4db4d0c11020a96fdd48a685baaac33f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:95:69:fe:70:2d:f2:78:6a:10:87:1b:5a:
ac:fe:01:77:1f:f0:8b:3d:17:68:31:6f:69:4b:90:
58:91:cc:0a:ec:4c:82:73:e9:d6:f8:6d:d5:6d:34:
1d:5d:63:42:e4:3f:b9:78:57:a1:08:de:e8:7f:71:
ce:02:13:17:33:ce:74:bd:d5:dd:c5:a7:33:54:32:
f3:0c:bc:bc:82:c9:a6:d6:e6:8e:07:6c:dd:93:61:
15:0c:6b:4a:dc:7c:ae:20:a1:72:74:18:21:9b:55:
ab:43:2b:fa:9f:0b:1f:8e:51:cd:a8:46:8b:15:dd:
d3:dd:ae:6d:d1:d8:37:a6:18:4e:9d:bc:ca:39:90:
8c:2d:2b:66:97:40:b3:e2:70:6b:02:64:81:9f:29:
6f:62:88:55:a3:02:f4:b6:ef:88:82:f5:8c:97:40:
74:ef:81:42:de:ed:44:6c:fd:ba:9a:42:22:d2:df:
d7:54:6f:91:14:70:e1:3e:eb:e8:8e:8b:6a:b3:a5:
39:70:44:be:8c:9b:3f:06:be:5e:bd:94:3e:6b:b5:
02:84:0c:42:17:b0:d6:e2:7e:01:ac:34:bf:fa:56:
ac:75:80:6d:49:5d:d8:7c:08:9d:dd:d7:2b:91:25:
a7:49:3e:a4:e1:c3:11:3a:cf:d2:44:de:29:2c:1f:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:CB:D4:DB:4D:0C:11:02:0A:96:FD:D4:8A:68:5B:AA:AC:33:F9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h7HL1NtNDBECCpb91IpoW6qsM_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.110.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:6b:de:ff:36:ad:7f:f2:f4:b0:74:49:8a:c7:45:d3:1a:51:
ea:7c:49:9c:0a:f7:8b:7a:d6:0c:f3:a1:4d:23:98:c0:57:30:
74:3c:50:b4:94:87:39:0c:c0:69:19:30:18:c9:5f:05:a4:74:
f4:de:52:7f:79:4b:56:3f:92:6b:eb:26:1a:07:ea:e2:91:eb:
af:96:4d:ae:05:fe:58:4d:85:ca:fe:4b:f5:e4:b9:ca:f9:69:
16:46:58:6f:6b:a3:3a:35:40:04:9f:fc:a1:9a:32:d4:e7:7c:
43:f9:8b:2e:1e:31:49:47:f9:20:6c:27:d3:d7:e9:69:3c:08:
24:ba:51:a7:5c:d3:a4:78:b4:11:57:86:f9:da:da:eb:bc:b8:
85:3f:8d:b5:52:c5:6d:6d:83:c0:1f:44:5c:16:24:d7:93:ae:
e8:aa:0e:6a:25:b0:ff:70:5d:b6:22:7f:60:b0:27:1d:79:88:
c6:b8:dd:fb:4b:4e:34:35:95:60:18:6d:65:6a:7a:cf:7d:a5:
46:1d:9d:f1:a8:43:ea:48:73:08:a0:c9:eb:1c:32:03:df:ef:
d5:04:5d:ac:9e:58:14:5c:f8:cf:3c:2e:87:84:f5:8f:3c:01:
75:04:db:7b:6e:0a:57:01:f5:ca:bc:b5:b1:08:0f:6b:d6:22:
7b:83:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:05 2026 by rpki-client