Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wzzU8QK5BETiRXn2CjuIhIQLGmQ.roa
File: wzzU8QK5BETiRXn2CjuIhIQLGmQ.roa (raw, json)
Hash identifier: 6tXfHl+8L/cK2GE8+c02rW1UbDPOpFoqp/CRQyAcdqQ=
Subject key identifier: C3:3C:D4:F1:02:B9:04:44:E2:45:79:F6:0A:3B:88:84:84:0B:1A:64
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0CD23C257D66D71FEB206EC583DA698C6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wzzU8QK5BETiRXn2CjuIhIQLGmQ.roa
Signing time: Wed 23 Sep 2026 07:21:07 +0000
ROA not before: Wed 23 Sep 2026 07:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 192.36.35.0/24 maxlen: 24
192.36.87.0/24 maxlen: 24
192.36.92.0/24 maxlen: 24
192.36.140.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
192.121.63.0/24 maxlen: 24
193.181.71.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
193.182.105.0/24 maxlen: 24
193.182.156.0/24 maxlen: 24
193.182.159.0/24 maxlen: 24
194.14.240.0/24 maxlen: 24
194.14.242.0/24 maxlen: 24
194.68.3.0/24 maxlen: 24
194.103.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:23:c2:57:d6:6d:71:fe:b2:06:ec:58:3d:a6:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 23 07:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c33cd4f102b90444e24579f60a3b8884840b1a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:f0:40:dd:b7:15:7e:89:f4:ec:99:25:ec:
74:33:18:18:f4:6e:23:94:fe:99:a6:3a:ce:ed:9e:
46:39:19:57:2b:4a:eb:85:b5:19:84:f0:6f:e4:67:
93:69:93:88:b0:b4:bc:6b:d7:60:65:2b:66:f4:71:
7f:17:8f:88:53:9f:52:9c:c7:56:36:82:6b:0b:70:
51:f3:cd:7a:5c:89:3f:c6:90:8e:aa:64:86:a2:79:
5a:63:68:3b:ef:7a:b9:eb:23:b7:6a:aa:30:68:68:
de:b6:01:56:42:9e:2c:45:36:37:bc:d6:8f:37:1f:
2d:5a:20:1b:f3:cc:10:47:3e:12:c1:7c:1c:72:21:
a1:5f:f0:9e:4e:07:9c:7b:48:f8:6c:df:99:c3:22:
da:da:9b:33:23:7e:0a:4a:9c:f0:39:9c:ec:78:8d:
be:c4:95:27:6d:fb:e2:ce:2d:74:0c:80:a3:1e:bf:
e2:9e:45:c2:f5:f9:9f:f9:3e:98:9d:17:91:bf:c7:
4a:d7:94:ad:38:8a:77:8a:60:99:39:82:45:bb:68:
d2:29:3a:a3:2c:7b:bf:67:70:09:e8:22:fd:a9:58:
4d:f5:26:cd:40:5a:9a:31:4b:17:1c:89:78:ca:46:
f1:8c:b1:7d:48:d0:ee:51:1b:76:57:ec:a3:d4:a0:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3C:D4:F1:02:B9:04:44:E2:45:79:F6:0A:3B:88:84:84:0B:1A:64
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wzzU8QK5BETiRXn2CjuIhIQLGmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.35.0/24
192.36.87.0/24
192.36.92.0/24
192.36.140.0/24
192.71.200.0/24
192.121.63.0/24
193.181.71.0/24
193.182.6.0/24
193.182.105.0/24
193.182.156.0/24
193.182.159.0/24
194.14.240.0/24
194.14.242.0/24
194.68.3.0/24
194.103.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:56:b5:84:19:cd:65:32:33:04:2b:44:04:ce:07:72:4d:0c:
51:5c:60:33:49:20:9d:3e:5e:f2:09:17:8d:37:6f:90:4e:c8:
50:95:87:7e:06:eb:e5:91:7e:83:a8:22:17:bc:cf:a2:2e:6a:
50:9e:3a:0d:de:45:7e:2a:08:f1:ff:43:24:f9:d5:4d:81:df:
ed:be:44:70:eb:8f:7d:4c:c4:47:b6:4b:a5:07:b6:4b:72:13:
27:f6:78:c0:c7:46:37:22:0d:03:a3:81:31:10:5d:53:c2:a2:
ff:75:3b:35:b4:b6:97:a5:56:87:0c:e6:6e:62:70:81:e8:62:
a0:b6:0b:0c:c4:48:6f:c0:b0:49:19:d9:7b:c0:20:19:4f:35:
c4:76:01:5f:54:e8:4c:91:ba:0d:cd:bd:e7:ea:e2:db:99:b9:
f7:e6:01:f5:d9:49:7e:eb:fd:27:43:9f:96:78:06:40:c6:19:
61:1b:c8:fa:dd:b9:6a:75:b8:09:60:bd:63:3d:96:05:fc:c6:
ad:f3:15:d4:4d:95:8b:83:18:31:26:4b:f2:c9:0c:72:c0:cf:
c7:79:eb:c7:77:13:af:e3:11:55:b1:99:92:02:11:20:cb:ba:
b0:8c:fe:c7:d9:79:20:fc:b1:bb:46:30:cf:5a:f5:a4:6b:1b:
4c:75:40:03
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAaDNI8JX1m1x/rIG7Fg9ppjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwOTIzMDcyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzNjZDRmMTAyYjkwNDQ0ZTI0NTc5ZjYwYTNiODg4NDg0MGIxYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywXwQN23FX6J9OyZJex0MxgY9G4j
lP6ZpjrO7Z5GORlXK0rrhbUZhPBv5GeTaZOIsLS8a9dgZStm9HF/F4+IU59SnMdW
NoJrC3BR8816XIk/xpCOqmSGonlaY2g773q56yO3aqowaGjetgFWQp4sRTY3vNaP
Nx8tWiAb88wQRz4SwXwcciGhX/CeTgece0j4bN+ZwyLa2pszI34KSpzwOZzseI2+
xJUnbfvizi10DICjHr/inkXC9fmf+T6YnReRv8dK15StOIp3imCZOYJFu2jSKTqj
LHu/Z3AJ6CL9qVhN9SbNQFqaMUsXHIl4ykbxjLF9SNDuURt2V+yj1KDNuwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFMM81PECuQRE4kV59go7iISECxpkMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvd3p6VThRSzVCRVRpUlhuMkNqdUloSVFMR21RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAwCQjAwQA
wCRXAwQAwCRcAwQAwCSMAwQAwEfIAwQAwHk/AwQAwbVHAwQAwbYGAwQAwbZpAwQA
wbacAwQAwbafAwQAwg7wAwQAwg7yAwQAwkQDAwQAwmf4MA0GCSqGSIb3DQEBCwUA
A4IBAQCMVrWEGc1lMjMEK0QEzgdyTQxRXGAzSSCdPl7yCReNN2+QTshQlYd+Buvl
kX6DqCIXvM+iLmpQnjoN3kV+Kgjx/0Mk+dVNgd/tvkRw6499TMRHtkulB7ZLchMn
9njAx0Y3Ig0Do4ExEF1TwqL/dTs1tLaXpVaHDOZuYnCB6GKgtgsMxEhvwLBJGdl7
wCAZTzXEdgFfVOhMkboNzb3n6uLbmbn35gH12Ul+6/0nQ5+WeAZAxhlhG8j63blq
dbgJYL1jPZYF/Mat8xXUTZWLgxgxJkvyyQxywM/HeevHdxOv4xFVsZmSAhEgy7qw
jP7H2Xkg/LG7RjDPWvWkaxtMdUAD
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:06 2026 by rpki-client