Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HaD9KbmtCaE69ZQKWyOfvq-1TMs.roa
File: HaD9KbmtCaE69ZQKWyOfvq-1TMs.roa (raw, json)
Hash identifier: 3HaRH42CJ+55aoMvh38fKJuiqAz3VKNyEHlKizFsS4c=
Subject key identifier: 1D:A0:FD:29:B9:AD:09:A1:3A:F5:94:0A:5B:23:9F:BE:AF:B5:4C:CB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A163923030FE8E538CE76D4DE0138614FB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HaD9KbmtCaE69ZQKWyOfvq-1TMs.roa
Signing time: Thu 22 Oct 2026 12:24:47 +0000
ROA not before: Thu 22 Oct 2026 12:24:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 192.36.57.0/24 maxlen: 24
192.71.227.0/24 maxlen: 24
192.71.247.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
192.121.22.0/24 maxlen: 24
192.121.23.0/24 maxlen: 24
192.121.46.0/23 maxlen: 24
192.121.46.0/24 maxlen: 24
192.121.47.0/24 maxlen: 24
192.121.162.0/24 maxlen: 24
192.121.170.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.14.217.0/24 maxlen: 24
194.68.26.0/24 maxlen: 24
194.68.27.0/24 maxlen: 24
194.68.44.0/24 maxlen: 24
194.71.126.0/24 maxlen: 24
194.71.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:92:30:30:fe:8e:53:8c:e7:6d:4d:e0:13:86:14:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 22 12:24:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1da0fd29b9ad09a13af5940a5b239fbeafb54ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:86:07:44:3e:54:4b:cf:90:d6:2d:43:70:
ea:bd:c5:2a:35:e0:cf:f1:0c:28:47:10:03:3b:16:
74:8c:a2:fb:48:64:8e:11:5c:63:4c:7a:a3:00:8d:
3a:14:21:cc:9d:58:76:61:b7:f3:59:85:de:cd:99:
21:24:f4:25:5e:d5:5e:dd:b5:6c:09:57:80:32:7e:
d9:e1:b6:36:08:f7:e1:5d:43:5b:ea:5a:8b:28:50:
95:7e:70:7a:bc:08:26:aa:46:c9:53:ba:58:4b:b6:
e9:3d:77:a0:b6:d0:3f:46:d5:a1:19:06:ae:f9:06:
2c:f7:1a:28:4c:bb:16:d5:e3:a0:3e:45:3a:a0:91:
17:d9:28:a4:d5:0c:13:93:47:25:e9:5a:f3:b5:0d:
0f:36:3f:cb:59:17:b9:de:4d:3e:50:35:7b:61:19:
1a:f6:6a:a7:d9:81:0c:12:b5:28:d3:74:97:7c:fc:
05:9b:60:93:e7:3d:9c:6c:83:0f:f4:ba:7e:85:f7:
bb:34:18:a6:b5:fc:9c:d2:db:95:32:df:30:f0:d5:
e0:f0:ed:9d:c3:72:56:0a:73:44:64:23:07:63:d7:
47:19:b2:4d:07:71:71:03:25:f8:4d:0a:1b:e3:7e:
2c:0a:72:b1:f9:92:4a:d4:4d:43:ea:c1:d2:f3:b1:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A0:FD:29:B9:AD:09:A1:3A:F5:94:0A:5B:23:9F:BE:AF:B5:4C:CB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HaD9KbmtCaE69ZQKWyOfvq-1TMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.57.0/24
192.71.227.0/24
192.71.247.0/24
192.71.249.0/24
192.121.22.0/23
192.121.46.0/23
192.121.162.0/24
192.121.170.0/24
194.14.208.0/24
194.14.217.0/24
194.68.26.0/23
194.68.44.0/24
194.71.126.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d4:da:8f:ef:37:76:56:d2:48:ed:d7:e6:7a:e0:41:19:07:
7a:dd:c0:6e:52:87:b3:91:1e:69:c5:9e:f8:a8:cf:63:ed:39:
4d:d6:43:ea:9c:8f:eb:44:b9:43:d9:0e:4b:a1:4e:90:02:51:
46:94:ec:35:35:c9:8e:73:9c:4d:c6:41:3a:23:e6:4f:4c:2f:
40:f2:12:76:60:f9:14:93:de:9a:39:e0:e6:4e:4e:7b:5d:57:
dd:3b:a1:c9:2e:77:12:1c:73:8f:93:c6:c2:31:e6:2f:5a:f9:
8d:af:51:a1:73:e9:03:2b:40:29:4c:34:6f:93:be:19:ad:1c:
41:ee:c6:ec:f3:5b:f0:9f:a2:c6:cd:56:c1:4e:65:fa:ea:fb:
b4:0d:57:c8:9e:72:08:d2:79:49:18:20:9b:a2:03:88:8f:bf:
1d:5e:a5:4c:13:ec:71:7a:44:00:86:0d:bf:92:0a:4b:31:7b:
0e:85:e7:4e:b7:46:50:e6:cd:07:d7:09:8b:71:75:dc:85:a4:
c1:ea:aa:87:6b:43:71:12:01:7b:c6:5f:e4:af:6a:3f:15:52:
b4:4a:b6:0c:85:4f:0c:62:9e:ad:35:05:49:18:03:66:34:be:
9e:ca:08:12:58:72:5b:bc:be:5f:3d:f2:69:f9:36:e1:c6:a5:
a9:d9:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:59 2026 by rpki-client