Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Yhka2tDO7z-rdmQ4qiD4dqIpeCw.roa
File: Yhka2tDO7z-rdmQ4qiD4dqIpeCw.roa (raw, json)
Hash identifier: xaDU2NwxjL7sznbPuMCqD9vKFyI0hloDTgM4KlpuaoI=
Subject key identifier: 62:19:1A:DA:D0:CE:EF:3F:AB:76:64:38:AA:20:F8:76:A2:29:78:2C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0F6554D17CC05EE4253D315BA875B707C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Yhka2tDO7z-rdmQ4qiD4dqIpeCw.roa
Signing time: Thu 01 Oct 2026 07:19:40 +0000
ROA not before: Thu 01 Oct 2026 07:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57630
IP address blocks: 192.36.200.0/24 maxlen: 24
192.71.0.0/24 maxlen: 24
192.71.206.0/24 maxlen: 24
192.71.223.0/24 maxlen: 24
192.165.3.0/24 maxlen: 24
192.165.134.0/23 maxlen: 23
192.165.152.0/22 maxlen: 24
192.165.157.0/24 maxlen: 24
192.165.194.0/24 maxlen: 24
193.180.92.0/24 maxlen: 24
193.181.34.0/24 maxlen: 24
193.183.20.0/24 maxlen: 24
193.183.49.0/24 maxlen: 24
193.183.59.0/24 maxlen: 24
193.234.3.0/24 maxlen: 24
193.234.94.0/24 maxlen: 24
193.234.116.0/22 maxlen: 22
193.234.144.0/24 maxlen: 24
193.234.205.0/24 maxlen: 24
194.14.57.0/24 maxlen: 24
194.68.22.0/23 maxlen: 24
194.68.24.0/24 maxlen: 24
194.68.181.0/24 maxlen: 24
194.71.0.0/23 maxlen: 23
194.71.106.0/24 maxlen: 24
194.71.219.0/24 maxlen: 24
194.103.3.0/24 maxlen: 24
194.103.16.0/23 maxlen: 24
194.103.95.0/24 maxlen: 24
194.103.145.0/24 maxlen: 24
194.103.197.0/24 maxlen: 24
194.132.120.0/24 maxlen: 24
194.132.164.0/24 maxlen: 24
194.132.166.0/24 maxlen: 24
194.132.172.0/23 maxlen: 24
194.132.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:55:4d:17:cc:05:ee:42:53:d3:15:ba:87:5b:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 1 07:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62191adad0ceef3fab766438aa20f876a229782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:15:e1:d2:34:48:48:09:bc:33:ef:43:73:
5d:eb:d5:37:22:91:99:a6:37:06:77:d2:be:76:69:
d5:47:67:3d:4b:ac:d2:10:7e:9b:89:a6:03:c0:28:
9a:34:99:93:86:ba:3a:94:7d:82:7a:59:60:16:2f:
70:c9:52:5a:e0:b9:9e:47:0e:0a:b3:a1:d4:7e:cb:
b5:86:8a:55:42:1a:99:ea:87:98:3f:f8:7f:6e:24:
d2:41:0c:c9:33:9c:17:08:2a:07:db:9f:81:a3:b2:
24:ff:20:a7:21:50:dc:75:bb:17:a9:15:87:7b:b1:
28:72:c6:12:e6:62:09:75:e7:aa:ae:28:06:1b:59:
58:9d:c2:88:70:5f:5a:f8:db:90:a1:1b:2b:de:2c:
eb:dd:76:e8:ed:93:1b:7a:c4:0c:f0:26:e2:6a:c2:
65:18:88:10:9f:9d:a7:23:9e:4a:81:8c:5d:10:3b:
1e:26:01:8b:e3:06:a0:92:08:58:1e:ad:4a:0d:a0:
0f:ef:2e:37:46:87:37:91:8c:31:d5:17:d6:ce:8d:
fe:a9:0e:05:93:cf:87:f3:36:d7:ec:03:4a:40:3e:
9b:b6:7a:e1:a5:0c:1f:b2:44:ad:c4:d0:83:33:31:
56:3a:cc:1c:20:da:df:80:66:a5:81:49:94:4b:82:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:1A:DA:D0:CE:EF:3F:AB:76:64:38:AA:20:F8:76:A2:29:78:2C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Yhka2tDO7z-rdmQ4qiD4dqIpeCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.200.0/24
192.71.0.0/24
192.71.206.0/24
192.71.223.0/24
192.165.3.0/24
192.165.134.0/23
192.165.152.0/22
192.165.157.0/24
192.165.194.0/24
193.180.92.0/24
193.181.34.0/24
193.183.20.0/24
193.183.49.0/24
193.183.59.0/24
193.234.3.0/24
193.234.94.0/24
193.234.116.0/22
193.234.144.0/24
193.234.205.0/24
194.14.57.0/24
194.68.22.0-194.68.24.255
194.68.181.0/24
194.71.0.0/23
194.71.106.0/24
194.71.219.0/24
194.103.3.0/24
194.103.16.0/23
194.103.95.0/24
194.103.145.0/24
194.103.197.0/24
194.132.120.0/24
194.132.164.0/24
194.132.166.0/24
194.132.172.0/23
194.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:95:16:a9:62:0a:e5:2e:dd:11:68:95:5a:8b:04:6c:3e:55:
ad:5d:9e:c7:c9:ba:02:2c:b7:2c:e6:7d:8d:bb:5e:c2:63:6a:
c5:54:2c:29:bb:10:df:6a:7b:a6:e4:2c:11:9c:f4:20:e4:f0:
34:f5:cc:7d:54:02:0b:40:6b:ae:29:cd:1d:1f:21:46:95:64:
16:8e:26:70:11:9c:6d:0e:52:0f:2c:6a:6d:18:d4:89:cc:d2:
81:b0:3f:14:45:99:58:f6:65:6c:84:a0:9b:1d:d8:89:e4:be:
29:70:a0:f7:0e:b8:cf:c3:db:8a:7e:f7:91:3a:a2:dd:cb:08:
7b:37:78:95:d5:e1:48:c4:44:1f:fa:d7:fd:55:9e:fe:aa:7e:
71:94:75:be:73:14:7e:1e:c2:a4:c0:fb:79:78:ba:bd:44:83:
96:84:53:a0:37:8d:ea:68:ae:93:d7:5c:c3:0a:39:ad:a3:ec:
34:42:5d:f6:6c:61:60:6d:63:75:dd:28:36:12:bb:30:bc:fa:
3d:a5:d1:a0:2b:1f:ab:97:55:ac:a4:1c:1c:8e:ba:78:d3:1a:
ba:d5:ef:c5:8a:63:d9:de:19:48:dd:89:f1:5e:db:b9:27:66:
fd:50:cc:c0:26:c8:85:3c:80:07:8d:4f:85:c7:af:18:6c:d5:
19:bc:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:24 2026 by rpki-client