Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t0XLXPGsAO29rTAJrj6ek0Yksac.roa
File: t0XLXPGsAO29rTAJrj6ek0Yksac.roa (raw, json)
Hash identifier: WAZFDGvBTatX/Cd/5P8edp+B8TI8VlnOf+c/vgbZTuA=
Subject key identifier: B7:45:CB:5C:F1:AC:00:ED:BD:AD:30:09:AE:3E:9E:93:46:24:B1:A7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019995AD3E6AC5F31A1AFAC62DF95E664857
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t0XLXPGsAO29rTAJrj6ek0Yksac.roa
Signing time: Mon 29 Sep 2025 13:33:02 +0000
ROA not before: Mon 29 Sep 2025 13:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5411
IP address blocks: 192.36.44.0/23 maxlen: 24
192.71.132.0/23 maxlen: 24
192.71.134.0/23 maxlen: 24
192.71.178.0/23 maxlen: 24
192.121.79.0/24 maxlen: 24
192.165.101.0/24 maxlen: 24
192.165.117.0/24 maxlen: 24
192.165.118.0/24 maxlen: 24
192.176.2.0/24 maxlen: 24
192.176.131.0/24 maxlen: 24
192.176.132.0/23 maxlen: 24
192.176.148.0/23 maxlen: 24
192.176.162.0/23 maxlen: 24
194.14.63.0/24 maxlen: 24
194.14.66.0/23 maxlen: 24
194.14.70.0/23 maxlen: 24
194.68.50.0/24 maxlen: 24
194.132.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:ad:3e:6a:c5:f3:1a:1a:fa:c6:2d:f9:5e:66:48:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 29 13:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b745cb5cf1ac00edbdad3009ae3e9e934624b1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:91:a2:ce:cd:9b:d8:91:c2:3f:f7:c3:74:
8d:a2:af:af:b3:ae:5c:3c:ff:d9:f5:25:f8:90:6f:
a0:7d:1a:2d:05:24:b4:39:bf:f9:5d:7e:2f:84:b2:
52:40:19:20:2c:9d:fa:02:7e:74:bc:31:8e:d5:c4:
73:c2:87:c9:db:35:7b:f8:cc:e0:ad:e0:e6:32:04:
da:b9:da:70:b5:35:3b:d4:54:24:41:bf:25:3e:d6:
7f:15:b1:a1:0c:aa:4b:cd:8d:3a:14:b7:62:04:5b:
39:30:7d:a2:43:0c:8e:43:97:d5:7e:b3:cd:11:f2:
67:9c:6c:80:12:9d:bf:be:6e:b1:2f:a6:48:be:5d:
5a:d0:37:e2:02:fb:71:92:0b:1c:23:fa:71:9f:c9:
b9:34:d9:14:e9:73:ea:1b:1a:5e:8c:f9:22:a4:33:
ec:50:c7:bf:85:da:3f:04:09:96:6f:5c:81:99:9a:
1c:f2:58:f7:31:d1:81:e9:4f:a7:b6:c2:01:4c:eb:
7f:06:aa:46:61:56:f2:8a:3c:06:87:d2:ae:ac:be:
d8:fa:b8:ce:96:03:73:fc:1c:0e:46:f4:a3:f8:10:
4d:86:b5:41:ec:02:7b:87:4f:ed:e5:3a:c7:a6:2d:
4e:fe:92:d8:3d:d0:c7:70:99:0c:f3:da:96:91:19:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:CB:5C:F1:AC:00:ED:BD:AD:30:09:AE:3E:9E:93:46:24:B1:A7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t0XLXPGsAO29rTAJrj6ek0Yksac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.44.0/23
192.71.132.0/22
192.71.178.0/23
192.121.79.0/24
192.165.101.0/24
192.165.117.0-192.165.118.255
192.176.2.0/24
192.176.131.0-192.176.133.255
192.176.148.0/23
192.176.162.0/23
194.14.63.0/24
194.14.66.0/23
194.14.70.0/23
194.68.50.0/24
194.132.39.0/24
Signature Algorithm: sha256WithRSAEncryption
58:34:f8:26:60:44:e7:fb:82:12:7f:57:d4:c6:eb:dc:0e:78:
8b:eb:ec:e4:7e:11:3c:3c:11:8f:80:1b:b7:41:bc:a8:32:63:
29:ea:ba:c9:73:ad:80:0b:7c:c3:b0:db:4c:b7:bb:94:32:1d:
9c:e6:19:76:f8:3a:ec:0a:c7:af:f1:06:9f:ea:ed:81:04:09:
31:38:eb:24:f2:9e:af:9f:65:b8:c1:fd:98:4e:f9:cb:76:cf:
05:48:b1:54:7f:dc:ca:bd:72:ee:5c:d4:c7:a2:66:68:01:70:
13:ad:2e:8f:f6:17:46:5c:6e:5f:dd:b6:1b:11:f6:e9:d8:84:
dc:5f:e8:24:bb:a5:0f:fb:2b:77:08:39:11:c1:d1:d7:7c:b0:
67:ea:aa:27:af:8e:3f:80:54:3a:ea:c4:6b:c3:20:a3:2e:a1:
d4:e3:24:8a:93:dd:db:f4:81:2d:71:bd:6f:b8:3a:1e:d3:fa:
39:7a:70:dd:ad:90:90:96:43:da:a4:fd:d4:7b:6a:90:c9:5c:
3e:e0:db:57:19:2b:b6:d3:84:aa:f3:eb:0c:7e:a1:68:c0:24:
52:c2:53:16:99:8e:2a:a2:ee:be:fa:34:35:1f:7c:18:1c:be:
00:e4:2a:1b:06:cc:fc:c8:f1:02:9b:33:c0:88:d3:76:d5:c9:
f6:e8:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:56 2025 by rpki-client