Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RRXFkEuoU8ZQWlvjtotffciUYkw.roa
File: RRXFkEuoU8ZQWlvjtotffciUYkw.roa (raw, json)
Hash identifier: 7ygzm6RK3CDULlZ0vFzCJ9Ay4Mg53BjIAkIHskTDkmU=
Subject key identifier: 45:15:C5:90:4B:A8:53:C6:50:5A:5B:E3:B6:8B:5F:7D:C8:94:62:4C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A01F01FF81B3A27A1EAA5D7933CC4141C4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RRXFkEuoU8ZQWlvjtotffciUYkw.roa
Signing time: Thu 20 Aug 2026 11:50:19 +0000
ROA not before: Thu 20 Aug 2026 11:50:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 192.36.35.0/24 maxlen: 24
192.36.87.0/24 maxlen: 24
192.36.92.0/24 maxlen: 24
192.36.140.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
192.121.63.0/24 maxlen: 24
193.181.71.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
193.182.105.0/24 maxlen: 24
193.182.156.0/24 maxlen: 24
193.182.159.0/24 maxlen: 24
194.14.240.0/24 maxlen: 24
194.14.242.0/24 maxlen: 24
194.68.3.0/24 maxlen: 24
194.103.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:01:ff:81:b3:a2:7a:1e:aa:5d:79:33:cc:41:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 20 11:50:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4515c5904ba853c6505a5be3b68b5f7dc894624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:62:6f:de:42:2b:3d:8a:ea:11:da:dc:e7:
59:7a:eb:fa:e5:93:b1:5c:1f:5b:2c:22:bd:64:62:
d5:14:0a:cf:f9:a2:12:24:ab:9f:56:e1:00:ea:8d:
06:02:18:51:f1:ee:41:43:fa:07:f8:96:e7:8d:10:
f4:ee:90:06:a4:c7:88:2b:eb:08:31:59:5d:8a:8d:
bf:b9:84:1e:3a:25:de:a5:f2:8d:02:a3:dd:b2:8d:
cc:f2:8d:4b:0f:63:24:8a:17:4f:c2:03:96:69:3a:
5f:fd:fe:25:11:ec:88:d3:fd:b5:97:22:14:a6:fc:
b8:fd:08:dc:19:f0:51:63:c2:56:b8:32:b9:c1:99:
07:f2:e7:79:c5:81:1d:67:77:02:55:0f:d0:37:82:
a0:29:31:5e:3b:07:8f:74:65:95:37:59:61:b7:10:
84:4f:3f:2f:22:83:74:1e:b9:cc:6f:f3:2e:26:77:
e5:84:cc:f4:e3:74:ab:d6:22:62:95:96:4f:1e:f7:
30:92:25:ed:81:c6:52:b4:85:8c:c1:8b:c3:2e:d8:
2d:bf:a7:f5:d6:c2:e2:c3:14:c1:1e:5a:f4:b3:1e:
c0:af:ed:3f:7b:b0:ee:d3:fa:cb:5d:c4:69:73:aa:
75:62:c8:02:7f:b4:96:1f:20:0b:c5:4d:da:16:75:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:C5:90:4B:A8:53:C6:50:5A:5B:E3:B6:8B:5F:7D:C8:94:62:4C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RRXFkEuoU8ZQWlvjtotffciUYkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.35.0/24
192.36.87.0/24
192.36.92.0/24
192.36.140.0/24
192.71.200.0/24
192.121.63.0/24
193.181.71.0/24
193.182.6.0/24
193.182.105.0/24
193.182.156.0/24
193.182.159.0/24
194.14.240.0/24
194.14.242.0/24
194.68.3.0/24
194.103.248.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2a:28:6e:88:91:d3:f6:3e:f4:de:c2:48:d9:36:53:d8:cf:
d8:07:ac:35:d5:c4:f3:b6:9d:a2:ab:84:6c:df:8c:53:e6:32:
36:84:a6:70:f2:4a:04:77:77:ff:15:01:84:1e:b5:40:bd:cd:
e7:67:12:ef:83:8e:96:b7:a7:c3:d9:0b:08:d3:10:38:82:ce:
a8:66:43:3b:79:a1:08:fd:81:8d:89:20:e9:55:87:9f:f8:2d:
95:fb:44:3f:77:d4:12:14:d2:ef:33:b7:40:9f:3b:c9:34:6c:
47:ac:b3:5c:83:02:cd:35:00:d6:db:ba:c2:64:0c:73:45:ef:
02:06:a7:b2:bd:cf:5d:df:8d:09:ad:51:ca:3b:57:2c:f1:03:
8e:fa:aa:dd:e2:12:f0:1d:93:c9:36:92:37:50:a3:63:d4:f5:
79:b0:b9:1e:32:96:ad:86:31:2c:34:3e:c3:d9:0a:ea:0b:3c:
4b:b7:fc:02:00:1b:4c:11:74:fe:06:05:8e:02:57:84:8a:d5:
fb:61:24:6c:66:1a:c8:73:d4:47:f3:13:14:93:00:5a:5a:09:
3b:3e:3c:af:44:ce:85:6e:3c:88:5c:6b:e9:43:08:e6:54:d0:
62:48:c6:35:54:07:5b:70:bb:62:f3:b8:18:b7:e1:ea:06:3a:
10:fc:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:48 2026 by rpki-client