Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YOvdgKqYdGNdXbGxZn_pztEh02U.roa
File: YOvdgKqYdGNdXbGxZn_pztEh02U.roa (raw, json)
Hash identifier: /uNBXaqS5eTTZtAxYesmCdr2BXtDD4lOcNeuEh3CDr0=
Subject key identifier: 60:EB:DD:80:AA:98:74:63:5D:5D:B1:B1:66:7F:E9:CE:D1:21:D3:65
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A01E97039FDCD56BD2DEC2AB003E72C42B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YOvdgKqYdGNdXbGxZn_pztEh02U.roa
Signing time: Thu 20 Aug 2026 09:53:28 +0000
ROA not before: Thu 20 Aug 2026 09:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.36.188.0/24 maxlen: 24
192.71.33.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.109.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.181.184.0/23 maxlen: 23
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.188.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.152.0/24 maxlen: 24
194.14.8.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.94.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.71.132.0/22 maxlen: 22
194.103.240.0/21 maxlen: 21
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:97:03:9f:dc:d5:6b:d2:de:c2:ab:00:3e:72:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 20 09:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60ebdd80aa9874635d5db1b1667fe9ced121d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:a0:2d:c3:c3:e0:df:f8:5c:ee:fc:2f:f1:
c2:cc:94:a9:c3:a8:54:38:15:33:82:91:c0:93:fa:
ea:a0:e4:5a:4d:fe:e1:68:a5:da:29:3a:61:fe:8a:
b6:a5:c2:0d:02:8e:f2:f1:3d:7d:42:83:a4:4d:f6:
51:a4:6a:0f:0b:00:3a:e0:1b:cd:35:41:14:50:7c:
2b:ca:23:df:05:81:22:03:1d:79:5f:3a:7d:1d:0c:
29:fe:62:c5:4f:d8:b5:0d:5f:4d:e4:1e:6f:67:e9:
c9:51:c8:ca:f9:5f:f3:f2:1e:6c:4a:e7:13:2c:0a:
a3:55:90:42:93:4e:d4:fc:45:de:06:80:60:4b:e7:
15:b7:e2:32:02:88:9b:fe:8b:eb:4a:7b:80:76:bb:
b4:24:ec:63:f6:2b:fe:69:da:d8:d4:7f:74:68:9a:
d7:29:b5:e3:98:7a:c3:c5:dc:f5:4f:9c:2c:06:b2:
d5:b7:51:fd:ef:7e:a9:c7:4a:d3:a3:7f:b2:95:c7:
2b:e7:e6:84:26:13:57:8b:69:e9:f4:aa:13:e7:00:
9d:a8:fb:cc:2b:1c:e5:68:8e:5d:c7:33:bd:de:b3:
27:9a:29:06:17:f2:ee:8f:71:8e:07:a9:aa:fb:2e:
85:f7:77:b9:05:27:4a:95:de:3c:dd:7c:20:d7:17:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:DD:80:AA:98:74:63:5D:5D:B1:B1:66:7F:E9:CE:D1:21:D3:65
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YOvdgKqYdGNdXbGxZn_pztEh02U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.36.188.0/24
192.71.33.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.109.0/24
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.181.184.0/23
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.188.0/24
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.152.0/24
194.14.8.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.94.0/24
194.68.127.0/24
194.71.132.0/22
194.103.240.0/21
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
16:40:0a:06:52:c3:7b:35:a7:12:cb:e9:c1:9f:39:43:ab:03:
9a:88:94:ae:30:dd:bc:71:96:27:8d:3b:a3:14:27:3d:55:bd:
16:99:1c:bd:90:25:4f:48:48:b0:c8:b0:f3:68:57:b7:89:06:
7f:3f:73:70:5d:80:b2:54:89:9f:34:d9:66:58:b2:b2:3e:50:
35:06:70:24:54:19:0d:94:ac:e5:03:93:ff:f9:23:6e:21:89:
91:ab:39:46:76:e1:6b:74:42:ca:6c:15:3a:0a:da:d7:87:ac:
b8:3c:51:81:6c:6e:38:f4:0f:30:4f:c7:ea:32:60:a6:03:16:
e7:22:49:b4:67:2c:23:3b:3f:9c:e2:fa:c0:02:37:6e:2f:2f:
73:6a:59:da:67:d0:55:3c:cf:c2:c9:84:a9:5a:47:dd:95:a3:
fe:d3:d2:df:03:c1:a1:e5:4c:c0:c8:6f:79:e1:96:52:eb:cf:
e5:87:88:7f:62:92:3b:22:8c:59:a3:36:8f:dc:cc:cf:e2:fb:
b9:d9:ad:b4:38:ce:1d:8c:4a:fa:5a:d0:b5:59:17:26:6b:28:
60:56:8c:37:96:4c:46:af:7c:99:21:d0:5d:87:d6:34:62:4e:
5b:3d:8a:2a:ae:56:ad:97:41:57:c5:7e:91:ee:d5:bc:78:8d:
d9:90:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:41 2026 by rpki-client