Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bhJX9p_7im6eslWFKkFv9NPlyxo.roa
File: bhJX9p_7im6eslWFKkFv9NPlyxo.roa (raw, json)
Hash identifier: iwBKgv1v2NB3Vd2EkGaAhX4yy5ZNQL3/T3WmISVzl1Q=
Subject key identifier: 6E:12:57:F6:9F:FB:8A:6E:9E:B2:55:85:2A:41:6F:F4:D3:E5:CB:1A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019CD72807B4F3637699EF37B3718D02B37F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bhJX9p_7im6eslWFKkFv9NPlyxo.roa
Signing time: Tue 10 Mar 2026 09:50:50 +0000
ROA not before: Tue 10 Mar 2026 09:50:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.181.184.0/23 maxlen: 23
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.188.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.152.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.94.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.71.132.0/22 maxlen: 22
194.103.240.0/21 maxlen: 21
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:28:07:b4:f3:63:76:99:ef:37:b3:71:8d:02:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 10 09:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e1257f69ffb8a6e9eb255852a416ff4d3e5cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:65:4e:70:ac:f7:e3:a6:9b:14:64:bb:bd:
06:b3:a1:55:5e:d8:75:4b:26:20:d2:27:fd:bf:04:
08:6b:3b:a3:42:16:91:65:0a:d1:56:a3:df:28:35:
94:22:e1:41:5e:b4:88:b1:91:fb:63:72:ce:d3:5d:
f2:48:1b:02:1a:94:b6:3f:c2:3f:c2:a6:5e:c5:6a:
6b:8a:cd:c8:35:16:c8:20:75:f3:5d:7f:cc:fa:75:
11:fb:d8:07:10:39:cd:c4:96:15:2c:87:0a:49:37:
eb:a8:85:b4:4b:c4:f0:f7:4d:22:60:d1:be:1e:c6:
c1:58:58:33:ac:ed:45:10:a4:e0:26:da:af:c9:9d:
60:dd:c7:75:3a:ad:b7:78:fd:50:b6:bc:2b:f7:1f:
50:94:e6:f5:44:e0:17:14:d9:59:4e:09:6a:ed:ef:
0f:f8:e7:b6:31:30:5c:b2:89:b9:79:ee:75:eb:9d:
d8:55:52:b3:1e:6a:25:51:75:a9:49:6f:5b:a7:85:
e6:bc:f5:47:76:9b:3c:51:56:28:cb:c9:5a:d5:54:
9d:49:24:98:f8:43:54:ac:71:b3:a2:1a:01:69:b0:
bd:c2:2f:e0:66:12:5b:cf:27:cd:2b:28:c9:0d:8e:
6e:e6:8e:39:a5:f8:25:cf:3b:28:97:55:00:65:af:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:57:F6:9F:FB:8A:6E:9E:B2:55:85:2A:41:6F:F4:D3:E5:CB:1A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bhJX9p_7im6eslWFKkFv9NPlyxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.181.184.0/23
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.188.0/24
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.152.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.94.0/24
194.68.127.0/24
194.71.132.0/22
194.103.240.0/21
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:fd:e9:20:48:0b:22:1e:8f:7f:ad:a9:93:e5:e0:b6:cd:87:
cb:dc:e7:0b:09:ac:39:d7:02:8c:03:7a:8a:d9:05:51:c3:20:
8c:2d:63:38:26:4a:54:12:c1:bf:a3:40:d9:be:69:95:88:3d:
9b:02:b8:83:ca:a3:25:60:6d:04:74:a8:5c:1b:e3:8e:72:7c:
2b:9d:24:ea:31:2f:84:80:5d:68:58:4a:27:ba:30:a4:39:69:
f3:9f:89:6a:6d:c3:75:b6:60:81:63:c3:52:af:11:3f:18:08:
27:30:c2:cd:9b:6b:94:89:90:31:ef:e6:35:4c:7f:b1:7a:34:
68:10:54:2f:ee:cd:97:69:de:9c:3e:a5:5a:40:d3:d1:4b:8e:
c4:27:3f:f3:f7:35:7e:1a:f8:30:29:cb:5a:2f:18:30:30:52:
15:82:d6:23:ec:e3:4c:ca:00:0b:ca:d2:5d:ef:57:0d:ff:39:
56:e3:de:9a:cf:43:d2:5a:5f:83:e9:73:a7:8c:4c:51:d9:45:
4a:1e:ef:14:4a:6d:eb:e4:cf:76:85:a4:a4:f0:69:d7:07:36:
90:d8:12:c3:9a:ff:37:26:a8:73:38:8d:c3:bb:7e:7d:bc:46:
9b:b5:a2:df:0a:65:ae:d6:e5:18:05:ee:bb:86:af:29:d9:4d:
88:87:66:e3
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAZzXKAe082N2me83s3GNArN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwMzEwMDk1MDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTEyNTdmNjlmZmI4YTZlOWViMjU1ODUyYTQxNmZmNGQzZTVjYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAZlTnCs9+OmmxRku70Gs6FVXth1
SyYg0if9vwQIazujQhaRZQrRVqPfKDWUIuFBXrSIsZH7Y3LO013ySBsCGpS2P8I/
wqZexWpris3INRbIIHXzXX/M+nUR+9gHEDnNxJYVLIcKSTfrqIW0S8Tw900iYNG+
HsbBWFgzrO1FEKTgJtqvyZ1g3cd1Oq23eP1Qtrwr9x9QlOb1ROAXFNlZTglq7e8P
+Oe2MTBcsom5ee51653YVVKzHmolUXWpSW9bp4XmvPVHdps8UVYoy8la1VSdSSSY
+ENUrHGzohoBabC9wi/gZhJbzyfNKyjJDY5u5o45pfglzzsol1UAZa9l2wIDAQAB
o4IDDTCCAwkwHQYDVR0OBBYEFG4SV/af+4punrJVhSpBb/TT5csaMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvYmhKWDlwXzdpbTZlc2xXRktrRnY5TlBseXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCCAQgEAgABMIIB
AAMEAMAkYAMEAMB5KDAMAwQBwHkyAwQAwHk0AwQAwHlzAwQAwHnlAwQAwKUIAwQA
wKUMAwQAwKUfAwQAwKVfAwQAwKWtAwQAwKW0AwQAwKXlAwQAwLB8AwQAwbQHMAwD
BADBtK8DBADBtLAwDAMEA8G1SAMEAMG1SgMEAcG1uAMEAMG2awMEAMG2fgMEAcG2
mAMEAMG2vAMEAMG2vgMEAsG35AMEAcG37AMEAcHquAMEAMHrmDAMAwQBwg6aAwQA
wg6cAwQAwg71MAwDBAPCREgDBAHCREwDBADCRE8DBADCRF4DBADCRH8DBALCR4QD
BAPCZ/ADBADChF8DBALChLwwDQYJKoZIhvcNAQELBQADggEBAF/96SBICyIej3+t
qZPl4LbNh8vc5wsJrDnXAowDeorZBVHDIIwtYzgmSlQSwb+jQNm+aZWIPZsCuIPK
oyVgbQR0qFwb445yfCudJOoxL4SAXWhYSie6MKQ5afOfiWptw3W2YIFjw1KvET8Y
CCcwws2ba5SJkDHv5jVMf7F6NGgQVC/uzZdp3pw+pVpA09FLjsQnP/P3NX4a+DAp
y1ovGDAwUhWC1iPs40zKAAvK0l3vVw3/OVbj3prPQ9JaX4Ppc6eMTFHZRUoe7xRK
bevkz3aFpKTwadcHNpDYEsOa/zcmqHM4jcO7fn28Rpu1ot8KZa7W5RgF7ruGrynZ
TYiHZuM=
-----END CERTIFICATE-----
Generated at Thu Mar 12 21:36:39 2026 by rpki-client