Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w_hyqmPQCYA_b3Mu-zz1KSSUGVw.roa
File: w_hyqmPQCYA_b3Mu-zz1KSSUGVw.roa (raw, json)
Hash identifier: EFcjjK1qfe8bWLPmUxplVOM+OMRoRR66hR5HJAye/f8=
Subject key identifier: C3:F8:72:AA:63:D0:09:80:3F:6F:73:2E:FB:3C:F5:29:24:94:19:5C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019CF5E1F116CC9C3E8F4D4BC78A6E85434F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w_hyqmPQCYA_b3Mu-zz1KSSUGVw.roa
Signing time: Mon 16 Mar 2026 09:02:31 +0000
ROA not before: Mon 16 Mar 2026 09:02:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201816
IP address blocks: 193.183.141.0/24 maxlen: 24
193.183.142.0/24 maxlen: 24
193.235.208.0/24 maxlen: 24
193.235.209.0/24 maxlen: 24
193.235.210.0/24 maxlen: 24
193.235.211.0/24 maxlen: 24
193.235.212.0/24 maxlen: 24
193.235.213.0/24 maxlen: 24
193.235.214.0/24 maxlen: 24
193.235.215.0/24 maxlen: 24
193.235.216.0/24 maxlen: 24
193.235.217.0/24 maxlen: 24
193.235.218.0/24 maxlen: 24
193.235.219.0/24 maxlen: 24
193.235.220.0/24 maxlen: 24
193.235.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:e1:f1:16:cc:9c:3e:8f:4d:4b:c7:8a:6e:85:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 16 09:02:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3f872aa63d009803f6f732efb3cf5292494195c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:5e:7f:fa:c6:0e:31:a4:ff:05:4c:3e:b3:
f2:5e:ee:d7:54:42:be:ff:03:b9:29:85:04:52:f6:
df:99:e4:b3:5c:4d:b1:b4:84:78:52:90:05:51:f4:
e5:5f:5a:a5:5e:b7:07:5e:24:2f:af:28:de:98:15:
a1:6a:1d:89:91:1d:7b:5b:91:98:43:93:23:4f:6b:
71:4b:0e:04:5b:4e:3d:d9:f3:39:47:7e:06:2b:30:
c6:52:98:ae:9f:44:d8:34:12:5d:98:6b:44:7a:ad:
ec:24:f3:f9:19:3f:ee:df:6f:62:84:51:a6:69:2e:
8c:91:07:64:ab:7e:79:42:52:6f:07:5d:68:21:11:
39:0a:71:4a:08:d9:92:c1:ce:85:d3:98:70:29:a8:
14:d1:af:54:b5:96:b6:96:f4:6d:58:d9:2f:05:37:
b4:7d:ee:1e:ba:40:b6:40:7c:68:e7:4c:a9:6f:43:
43:c5:54:eb:99:f3:86:31:34:0a:22:68:b2:35:9d:
3e:f8:24:07:e4:e2:7e:0f:29:0a:c9:f4:a4:14:97:
2d:62:57:b2:64:2e:39:ec:4f:3b:30:9e:ab:b1:b5:
49:cf:d8:6e:2e:f8:ea:9f:76:83:ad:70:8f:e7:31:
76:62:17:e8:dc:de:6d:b3:08:49:f5:7d:f9:71:80:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:72:AA:63:D0:09:80:3F:6F:73:2E:FB:3C:F5:29:24:94:19:5C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w_hyqmPQCYA_b3Mu-zz1KSSUGVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.141.0-193.183.142.255
193.235.208.0-193.235.221.255
Signature Algorithm: sha256WithRSAEncryption
14:46:71:46:6f:0d:73:a1:7d:23:52:73:0a:eb:ec:88:cc:16:
41:bf:49:ef:47:34:f8:e3:66:60:b7:36:20:84:cc:5d:e2:ab:
c5:e9:56:90:74:b5:6f:c9:93:20:77:5e:c9:0f:31:81:87:34:
90:38:29:47:8c:6a:a6:08:88:a6:f4:e1:91:ac:2e:50:bb:b9:
e6:35:4d:15:83:2a:d7:3e:d3:a9:0e:fb:2c:ea:42:a4:4b:41:
a3:79:ce:b7:5d:03:0e:36:dd:8b:2a:7a:73:61:f1:54:48:8f:
e5:0d:c6:a5:a1:6e:80:05:18:f4:e8:81:6c:bc:2c:92:df:ea:
64:69:c0:50:02:74:ce:ad:2f:55:2d:1a:ee:24:55:3f:2a:bc:
fb:77:83:2a:85:ab:2b:4f:4c:d2:90:84:cd:af:3e:25:89:8d:
d9:91:5e:85:c6:b0:93:8a:63:a5:64:35:cc:f7:1f:1d:b5:79:
5f:1b:06:b9:2e:6e:7c:2a:0f:8d:8d:4c:35:c9:0e:68:95:ec:
85:2d:73:96:ae:e3:bf:af:43:86:64:49:5e:ec:a8:c5:51:72:
17:6b:dc:a7:10:35:d2:fa:e7:96:cc:2d:44:a8:49:ea:d3:66:
23:ce:4f:63:6d:c2:8c:00:38:26:54:40:d6:b7:d7:ab:4f:0a:
de:0f:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:54 2026 by rpki-client