Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/N252-J36Gn8KN1r9gILlU-jfnQU.roa
File: N252-J36Gn8KN1r9gILlU-jfnQU.roa (raw, json)
Hash identifier: 5cUsBV5al+RaVl2MtWt92EIEb08fasU/kCdXV5P/kpw=
Subject key identifier: 37:6E:76:F8:9D:FA:1A:7F:0A:37:5A:FD:80:82:E5:53:E8:DF:9D:05
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A153D177928BD90403B654E95DD3926B87
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/N252-J36Gn8KN1r9gILlU-jfnQU.roa
Signing time: Mon 19 Oct 2026 10:59:58 +0000
ROA not before: Mon 19 Oct 2026 10:59:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 192.36.8.0/24 maxlen: 24
192.36.9.0/24 maxlen: 24
192.36.242.0/24 maxlen: 24
192.71.161.0/24 maxlen: 24
192.165.109.0/24 maxlen: 24
192.165.247.0/24 maxlen: 24
193.180.0.0/24 maxlen: 24
193.180.21.0/24 maxlen: 24
193.180.94.0/23 maxlen: 23
193.180.119.0/24 maxlen: 24
193.181.176.0/24 maxlen: 24
193.182.251.0/24 maxlen: 24
193.182.252.0/24 maxlen: 24
193.182.253.0/24 maxlen: 24
193.234.44.0/24 maxlen: 24
193.234.45.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
193.234.90.0/24 maxlen: 24
193.234.91.0/24 maxlen: 24
193.235.104.0/24 maxlen: 24
193.235.106.0/24 maxlen: 24
193.235.108.0/23 maxlen: 24
194.68.212.0/24 maxlen: 24
194.68.236.0/24 maxlen: 24
194.71.204.0/24 maxlen: 24
194.71.221.0/24 maxlen: 24
194.103.47.0/24 maxlen: 24
194.132.122.0/24 maxlen: 24
2a01:280:368::/48 maxlen: 48
2a01:280:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d1:77:92:8b:d9:04:03:b6:54:e9:5d:d3:92:6b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 19 10:59:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=376e76f89dfa1a7f0a375afd8082e553e8df9d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:a4:9a:5f:c7:db:7a:32:51:aa:e1:f3:36:
05:27:5f:24:45:d1:37:45:17:79:15:8d:79:9b:3b:
9d:74:94:4f:e6:53:f9:4a:2a:e6:51:c8:fd:e7:d3:
e0:c3:63:e5:f6:c6:1e:ea:9b:de:5c:59:49:9d:54:
7c:6d:a6:1e:06:dd:48:26:83:f8:e5:74:77:1f:43:
35:e5:3d:78:3b:4e:ae:f8:e8:0e:15:47:39:72:97:
63:ae:59:c2:8b:af:6f:09:d9:71:a1:3d:5f:59:79:
3d:e3:21:23:77:50:bc:e2:e4:fc:45:ab:cc:42:22:
00:bb:6e:d9:85:5c:af:12:a3:2a:35:22:f3:7f:88:
90:a1:56:92:b4:d0:a2:89:e0:f8:06:b8:3c:78:60:
25:af:db:bb:49:3e:0d:31:7f:90:98:0e:86:3d:8c:
b4:39:61:53:13:41:dc:a3:7c:d8:aa:a4:11:7f:c4:
15:f8:06:91:36:80:1b:4f:02:db:36:83:6f:c4:5c:
94:c8:1e:0c:93:ab:40:a6:b0:c4:f0:47:37:fa:b9:
74:8a:c6:b0:78:61:fa:eb:5f:cd:e8:c2:b0:0a:c8:
b5:47:a6:06:63:3b:13:a5:09:5c:90:2d:a9:6d:cc:
e5:a6:18:d2:48:d7:12:e6:a1:b5:75:dc:34:94:d9:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:76:F8:9D:FA:1A:7F:0A:37:5A:FD:80:82:E5:53:E8:DF:9D:05
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/N252-J36Gn8KN1r9gILlU-jfnQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.8.0/23
192.36.242.0/24
192.71.161.0/24
192.165.109.0/24
192.165.247.0/24
193.180.0.0/24
193.180.21.0/24
193.180.94.0/23
193.180.119.0/24
193.181.176.0/24
193.182.251.0-193.182.253.255
193.234.44.0/23
193.234.82.0/24
193.234.90.0/23
193.235.104.0/24
193.235.106.0/24
193.235.108.0/23
194.68.212.0/24
194.68.236.0/24
194.71.204.0/24
194.71.221.0/24
194.103.47.0/24
194.132.122.0/24
IPv6:
2a01:280:368::/48
2a01:280:3e8::/48
Signature Algorithm: sha256WithRSAEncryption
c6:50:95:78:2d:ba:fe:c2:1c:e8:60:7f:f5:55:26:86:44:c8:
c4:5f:ea:eb:4d:8f:38:16:22:a3:e6:f3:b2:4e:bb:f3:a0:5b:
54:74:58:4e:41:e2:6d:49:d3:e6:f5:b1:4e:a7:12:54:1a:ad:
2a:0d:c4:07:8e:e3:13:36:3a:4b:56:d3:bf:e7:96:95:73:22:
a9:be:b1:65:9a:5c:65:8d:0e:17:01:f1:fa:38:f3:55:c0:8e:
3a:56:a8:b5:95:d8:2b:c9:d1:ab:5d:58:60:16:3c:fa:52:47:
36:af:b8:a4:7b:68:d9:fd:ff:ba:25:3a:cb:d2:b4:fc:40:d1:
60:f3:d5:37:12:8b:09:97:56:90:a0:33:0d:c7:c4:cc:71:a5:
87:17:bd:06:f5:1d:d2:4a:12:83:c5:35:14:ab:d6:4e:5c:04:
e9:c6:49:c6:aa:bb:a8:85:82:7f:65:5b:96:d5:2e:0a:b8:72:
68:ae:30:0d:28:35:18:45:0d:76:4e:15:9f:39:29:3b:c9:a6:
ba:15:48:17:b5:e6:da:5f:a0:f8:3f:f5:b4:d4:cf:c6:9d:96:
f5:93:ee:eb:42:57:30:2e:9b:b7:44:9f:ca:bb:2f:a4:cf:9b:
ea:7e:64:29:7b:c2:cc:d6:c5:6e:b5:45:40:89:57:e3:3e:ab:
c9:92:85:06
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAaFT0XeSi9kEA7ZU6V3TkmuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYxMDE5MTA1OTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzZlNzZmODlkZmExYTdmMGEzNzVhZmQ4MDgyZTU1M2U4ZGY5ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YWkml/H23oyUarh8zYFJ18kRdE3
RRd5FY15mzuddJRP5lP5SirmUcj959Pgw2Pl9sYe6pveXFlJnVR8baYeBt1IJoP4
5XR3H0M15T14O06u+OgOFUc5cpdjrlnCi69vCdlxoT1fWXk94yEjd1C84uT8RavM
QiIAu27ZhVyvEqMqNSLzf4iQoVaStNCiieD4Brg8eGAlr9u7ST4NMX+QmA6GPYy0
OWFTE0Hco3zYqqQRf8QV+AaRNoAbTwLbNoNvxFyUyB4Mk6tAprDE8Ec3+rl0isaw
eGH661/N6MKwCsi1R6YGYzsTpQlckC2pbczlphjSSNcS5qG1ddw0lNlIRwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFDdudvid+hp/Cjda/YCC5VPo350FMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTjI1Mi1KMzZHbjhLTjFyOWdJTGxVLWpmblFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBmQQCAAEwgZIDBAHA
JAgDBADAJPIDBADAR6EDBADApW0DBADApfcDBADBtAADBADBtBUDBAHBtF4DBADB
tHcDBADBtbAwDAMEAMG2+wMEAcG2/AMEAcHqLAMEAMHqUgMEAcHqWgMEAMHraAME
AMHragMEAcHrbAMEAMJE1AMEAMJE7AMEAMJHzAMEAMJH3QMEAMJnLwMEAMKEejAY
BAIAAjASAwcAKgECgANoAwcAKgECgAPoMA0GCSqGSIb3DQEBCwUAA4IBAQDGUJV4
Lbr+whzoYH/1VSaGRMjEX+rrTY84FiKj5vOyTrvzoFtUdFhOQeJtSdPm9bFOpxJU
Gq0qDcQHjuMTNjpLVtO/55aVcyKpvrFlmlxljQ4XAfH6OPNVwI46Vqi1ldgrydGr
XVhgFjz6Ukc2r7ike2jZ/f+6JTrL0rT8QNFg89U3EosJl1aQoDMNx8TMcaWHF70G
9R3SShKDxTUUq9ZOXATpxknGqruohYJ/ZVuW1S4KuHJorjANKDUYRQ12ThWfOSk7
yaa6FUgXtebaX6D4P/W01M/GnZb1k+7rQlcwLpu3RJ/Kuy+kz5vqfmQpe8LM1sVu
tUVAiVfjPqvJkoUG
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:09:37 2026 by rpki-client