Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uSqPoqd-E14JlGiJnnEoksIjf-o.roa
File: uSqPoqd-E14JlGiJnnEoksIjf-o.roa (raw, json)
Hash identifier: oOGJXcpqAU3XEP7sWfgvYlzBtrEaOY8Z9d6z+2l9xcA=
Subject key identifier: B9:2A:8F:A2:A7:7E:13:5E:09:94:68:89:9E:71:28:92:C2:23:7F:EA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0AFF07A193E5A5DCBBD3186AD1D12754F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uSqPoqd-E14JlGiJnnEoksIjf-o.roa
Signing time: Thu 17 Sep 2026 15:16:07 +0000
ROA not before: Thu 17 Sep 2026 15:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201216
IP address blocks: 192.36.107.0/24 maxlen: 24
192.36.108.0/24 maxlen: 24
192.36.195.0/24 maxlen: 24
192.36.235.0/24 maxlen: 24
192.36.252.0/24 maxlen: 24
192.71.39.0/24 maxlen: 24
192.71.91.0/24 maxlen: 24
192.71.101.0/24 maxlen: 24
192.71.102.0/24 maxlen: 24
192.71.163.0/24 maxlen: 24
192.71.183.0/24 maxlen: 24
192.71.192.0/24 maxlen: 24
192.71.226.0/24 maxlen: 24
192.121.57.0/24 maxlen: 24
192.121.59.0/24 maxlen: 24
192.121.90.0/24 maxlen: 24
192.121.105.0/24 maxlen: 24
192.121.219.0/24 maxlen: 24
192.121.230.0/23 maxlen: 24
192.121.248.0/24 maxlen: 24
192.176.45.0/24 maxlen: 24
192.176.228.0/24 maxlen: 24
193.180.76.0/22 maxlen: 24
193.181.192.0/24 maxlen: 24
193.181.193.0/24 maxlen: 24
193.182.245.0/24 maxlen: 24
193.183.143.0/24 maxlen: 24
193.183.145.0/24 maxlen: 24
193.183.146.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
193.234.98.0/24 maxlen: 24
193.234.124.0/23 maxlen: 24
193.234.127.0/24 maxlen: 24
193.234.143.0/24 maxlen: 24
193.235.1.0/24 maxlen: 24
193.235.3.0/24 maxlen: 24
193.235.32.0/24 maxlen: 24
193.235.40.0/23 maxlen: 24
193.235.42.0/24 maxlen: 24
193.235.47.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
193.235.97.0/24 maxlen: 24
193.235.98.0/24 maxlen: 24
194.14.35.0/24 maxlen: 24
194.14.39.0/24 maxlen: 24
194.14.49.0/24 maxlen: 24
194.14.134.0/24 maxlen: 24
194.14.177.0/24 maxlen: 24
194.14.249.0/24 maxlen: 24
194.68.37.0/24 maxlen: 24
194.68.38.0/24 maxlen: 24
194.68.111.0/24 maxlen: 24
194.68.118.0/24 maxlen: 24
194.68.161.0/24 maxlen: 24
194.68.219.0/24 maxlen: 24
194.71.3.0/24 maxlen: 24
194.71.4.0/24 maxlen: 24
194.71.92.0/24 maxlen: 24
194.71.111.0/24 maxlen: 24
194.71.182.0/24 maxlen: 24
194.71.223.0/24 maxlen: 24
194.71.242.0/24 maxlen: 24
194.103.52.0/24 maxlen: 24
194.103.238.0/24 maxlen: 24
194.132.10.0/24 maxlen: 24
194.132.29.0/24 maxlen: 24
194.132.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:f0:7a:19:3e:5a:5d:cb:bd:31:86:ad:1d:12:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 17 15:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b92a8fa2a77e135e099468899e712892c2237fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:45:06:dc:92:47:21:c8:df:7d:c7:35:02:
ea:b4:1b:47:fd:0c:1b:1e:e2:5f:f9:3a:6e:98:f4:
6e:2a:e4:a9:b0:c7:b0:45:28:c2:19:22:5e:d2:11:
08:c9:6b:cb:af:8e:36:6b:bf:54:58:9d:e2:29:11:
cd:c8:85:a3:b1:e1:88:b9:9f:ec:fb:3d:fe:9a:aa:
74:4d:7c:66:ab:21:6f:2a:a4:1e:f4:f5:f0:6d:0e:
4c:db:32:54:80:77:7a:a0:ff:01:01:23:c6:4e:b5:
9a:0b:e0:e0:81:cb:dd:b9:84:b6:f2:df:5c:23:14:
90:6c:8a:a0:6b:af:de:5e:ce:79:19:84:16:9c:aa:
aa:f2:68:46:86:32:3e:66:f0:27:ad:a9:4f:8a:ee:
d5:66:be:33:74:11:c6:87:e9:6e:a2:a2:29:3c:e9:
c5:ff:ba:cd:b2:3a:29:92:79:31:4d:36:96:bd:bf:
83:1c:37:86:5f:a4:4c:e3:cb:08:75:a1:67:d8:e9:
dc:7a:73:4a:ac:da:41:5d:9a:4b:a5:83:f3:29:e4:
77:d3:8a:8d:df:b7:35:90:2a:7e:14:85:65:77:48:
f3:83:b5:6d:24:88:a6:1a:3e:8b:ce:96:33:8b:0a:
4f:e4:45:14:1e:e5:b8:44:82:30:38:93:ce:69:82:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:8F:A2:A7:7E:13:5E:09:94:68:89:9E:71:28:92:C2:23:7F:EA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uSqPoqd-E14JlGiJnnEoksIjf-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.107.0-192.36.108.255
192.36.195.0/24
192.36.235.0/24
192.36.252.0/24
192.71.39.0/24
192.71.91.0/24
192.71.101.0-192.71.102.255
192.71.163.0/24
192.71.183.0/24
192.71.192.0/24
192.71.226.0/24
192.121.57.0/24
192.121.59.0/24
192.121.90.0/24
192.121.105.0/24
192.121.219.0/24
192.121.230.0/23
192.121.248.0/24
192.176.45.0/24
192.176.228.0/24
193.180.76.0/22
193.181.192.0/23
193.182.245.0/24
193.183.143.0/24
193.183.145.0-193.183.146.255
193.234.18.0/24
193.234.98.0/24
193.234.124.0/23
193.234.127.0/24
193.234.143.0/24
193.235.1.0/24
193.235.3.0/24
193.235.32.0/24
193.235.40.0-193.235.42.255
193.235.47.0-193.235.48.255
193.235.97.0-193.235.98.255
194.14.35.0/24
194.14.39.0/24
194.14.49.0/24
194.14.134.0/24
194.14.177.0/24
194.14.249.0/24
194.68.37.0-194.68.38.255
194.68.111.0/24
194.68.118.0/24
194.68.161.0/24
194.68.219.0/24
194.71.3.0-194.71.4.255
194.71.92.0/24
194.71.111.0/24
194.71.182.0/24
194.71.223.0/24
194.71.242.0/24
194.103.52.0/24
194.103.238.0/24
194.132.10.0/24
194.132.29.0/24
194.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
17:63:bf:5c:d5:72:e4:54:0d:7c:89:b6:bb:91:b7:d0:f7:62:
ae:60:6b:bb:b0:f9:7e:28:4e:47:c3:1d:11:b1:f3:e8:9b:72:
82:af:ae:02:0a:48:05:7d:ae:59:73:ac:46:e5:82:d2:40:6d:
e0:c1:a7:e3:2c:b7:ce:fd:68:20:e1:f3:a3:d8:42:1f:8d:a3:
3f:52:d5:8f:f8:48:e8:ca:74:37:07:87:eb:f3:bc:00:24:6e:
ee:30:2a:94:30:0e:10:90:e5:89:3a:57:e9:8d:2d:96:1d:52:
7f:5a:25:d8:4f:95:85:d8:a4:ae:64:f3:a7:0a:fb:4c:a9:a3:
78:20:a6:21:16:d2:96:86:52:71:f1:33:32:f9:d3:bd:33:81:
bc:f8:5a:2a:ee:75:a8:91:cc:e7:f0:73:48:fe:b7:fb:75:ba:
60:b7:2f:5f:5e:9e:60:c3:54:34:9e:f8:46:68:81:a5:37:40:
cf:b4:25:96:3e:1b:9d:0f:42:26:31:76:15:34:17:88:19:0f:
9c:a5:34:4d:ed:db:eb:8c:d3:2c:be:89:0a:6a:ee:23:20:5a:
f8:16:f0:d3:58:53:a4:3c:c6:98:dd:b9:97:b0:f6:c8:0e:8d:
bf:e6:9c:52:f2:b5:0a:68:00:62:60:96:36:b6:f3:2b:54:6f:
ce:d8:4e:58
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgISAaCv8HoZPlpdy70xhq0dEnVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwOTE3MTUxNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTJhOGZhMmE3N2UxMzVlMDk5NDY4ODk5ZTcxMjg5MmMyMjM3ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1pFBtySRyHI333HNQLqtBtH/Qwb
HuJf+TpumPRuKuSpsMewRSjCGSJe0hEIyWvLr442a79UWJ3iKRHNyIWjseGIuZ/s
+z3+mqp0TXxmqyFvKqQe9PXwbQ5M2zJUgHd6oP8BASPGTrWaC+DggcvduYS28t9c
IxSQbIqga6/eXs55GYQWnKqq8mhGhjI+ZvAnralPiu7VZr4zdBHGh+luoqIpPOnF
/7rNsjopknkxTTaWvb+DHDeGX6RM48sIdaFn2OncenNKrNpBXZpLpYPzKeR304qN
37c1kCp+FIVld0jzg7VtJIimGj6LzpYziwpP5EUUHuW4RIIwOJPOaYLHRwIDAQAB
o4IDqTCCA6UwHQYDVR0OBBYEFLkqj6KnfhNeCZRoiZ5xKJLCI3/qMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvdVNxUG9xZC1FMTRKbEdpSm5uRW9rc0lqZi1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvQYIKwYBBQUHAQcBAf8EggGsMIIBqDCCAaQEAgABMIIB
nDAMAwQAwCRrAwQAwCRsAwQAwCTDAwQAwCTrAwQAwCT8AwQAwEcnAwQAwEdbMAwD
BADAR2UDBADAR2YDBADAR6MDBADAR7cDBADAR8ADBADAR+IDBADAeTkDBADAeTsD
BADAeVoDBADAeWkDBADAedsDBAHAeeYDBADAefgDBADAsC0DBADAsOQDBALBtEwD
BAHBtcADBADBtvUDBADBt48wDAMEAMG3kQMEAMG3kgMEAMHqEgMEAMHqYgMEAcHq
fAMEAMHqfwMEAMHqjwMEAMHrAQMEAMHrAwMEAMHrIDAMAwQDwesoAwQAwesqMAwD
BADB6y8DBADB6zAwDAMEAMHrYQMEAMHrYgMEAMIOIwMEAMIOJwMEAMIOMQMEAMIO
hgMEAMIOsQMEAMIO+TAMAwQAwkQlAwQAwkQmAwQAwkRvAwQAwkR2AwQAwkShAwQA
wkTbMAwDBADCRwMDBADCRwQDBADCR1wDBADCR28DBADCR7YDBADCR98DBADCR/ID
BADCZzQDBADCZ+4DBADChAoDBADChB0DBADChDswDQYJKoZIhvcNAQELBQADggEB
ABdjv1zVcuRUDXyJtruRt9D3Yq5ga7uw+X4oTkfDHRGx8+ibcoKvrgIKSAV9rllz
rEblgtJAbeDBp+Mst879aCDh86PYQh+Noz9S1Y/4SOjKdDcHh+vzvAAkbu4wKpQw
DhCQ5Yk6V+mNLZYdUn9aJdhPlYXYpK5k86cK+0ypo3ggpiEW0paGUnHxMzL5070z
gbz4WirudaiRzOfwc0j+t/t1umC3L19enmDDVDSe+EZogaU3QM+0JZY+G50PQiYx
dhU0F4gZD5ylNE3t2+uM0yy+iQpq7iMgWvgW8NNYU6Q8xpjduZew9sgOjb/mnFLy
tQpoAGJglja28ytUb87YTlg=
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:58:50 2026 by rpki-client