Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fR6KuDcEh-8uMkoWX419g7bQBUI.roa
File: fR6KuDcEh-8uMkoWX419g7bQBUI.roa (raw, json)
Hash identifier: bHEFkNWk8oLdal8oE4Blz4knm7AxG5R11I9udVeMImE=
Subject key identifier: 7D:1E:8A:B8:37:04:87:EF:2E:32:4A:16:5F:8D:7D:83:B6:D0:05:42
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A01FA8C1554977A232FC6092600C3FC84A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fR6KuDcEh-8uMkoWX419g7bQBUI.roa
Signing time: Thu 20 Aug 2026 14:52:28 +0000
ROA not before: Thu 20 Aug 2026 14:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204302
IP address blocks: 192.121.68.0/24 maxlen: 24
192.121.179.0/24 maxlen: 24
192.165.128.0/23 maxlen: 23
192.165.248.0/23 maxlen: 23
194.68.35.0/24 maxlen: 24
194.103.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:a8:c1:55:49:77:a2:32:fc:60:92:60:0c:3f:c8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 20 14:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d1e8ab8370487ef2e324a165f8d7d83b6d00542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:1b:16:a5:57:45:08:7b:e3:64:94:cc:2a:
6d:6c:40:03:80:5c:f9:27:9d:b0:fc:62:01:55:7b:
a1:bd:8a:43:e0:05:6b:9f:cb:07:60:21:c4:a7:57:
32:8a:5b:14:cd:e2:3c:d8:ff:b3:a0:21:74:02:53:
09:bd:6b:ec:7d:9d:c3:74:2e:28:29:d7:40:0e:85:
31:5c:ac:3e:0d:e8:07:0e:74:17:b8:9b:35:7b:e4:
87:c5:43:d3:22:5f:50:c4:54:ff:4a:b6:52:32:f7:
ca:07:ee:4e:ef:2e:fb:87:b8:1b:97:9d:2f:70:76:
13:85:94:54:18:bd:9a:04:d9:d1:b3:57:34:18:fa:
32:a7:93:12:0b:ba:75:9e:f4:d0:41:24:d9:52:f1:
b2:6b:ac:1d:1a:98:d5:fc:b9:ea:96:bb:46:60:57:
97:5a:06:84:05:16:ae:f2:c5:bd:88:45:9a:8d:06:
3e:33:38:da:2c:3e:f5:d6:be:fc:e8:5a:bf:c5:4c:
46:06:46:00:6e:88:89:4f:f3:2a:28:27:b2:e6:67:
4a:d1:b7:5a:da:80:f0:32:cd:ac:4f:62:c3:8d:ca:
2f:63:14:a9:a0:f4:d5:21:a8:e4:e4:cf:ab:f4:5c:
9c:cc:6e:73:c5:56:d3:c4:bb:8c:be:88:26:ad:8e:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:8A:B8:37:04:87:EF:2E:32:4A:16:5F:8D:7D:83:B6:D0:05:42
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fR6KuDcEh-8uMkoWX419g7bQBUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.68.0/24
192.121.179.0/24
192.165.128.0/23
192.165.248.0/23
194.68.35.0/24
194.103.142.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:30:53:de:69:36:fe:4b:d6:ed:92:22:9d:5d:07:55:a4:ae:
6c:24:fe:bf:ee:c4:65:8c:1d:ea:63:07:8f:fc:f3:34:20:10:
fb:19:af:f7:c3:b1:e3:5f:30:75:02:70:af:fb:34:28:25:86:
18:39:93:00:99:05:af:5c:77:59:a5:fe:8e:7c:ce:f5:25:3f:
79:da:49:f1:25:88:d0:99:a1:c6:32:6d:9b:2e:0f:8c:5c:47:
ed:34:7a:50:ce:8f:18:ce:0f:ff:f5:17:0f:41:2f:a4:80:d5:
62:1c:cd:dc:da:0e:dd:a7:7b:e7:1d:3b:7c:02:bb:0a:bb:7c:
c6:e1:3e:40:8e:a8:6d:85:b5:fe:a8:d2:c9:5e:4c:ff:94:de:
f0:d9:da:fe:dc:71:86:85:88:ca:4f:d0:8d:d6:18:20:1b:55:
cb:ad:22:fe:81:fe:be:03:a6:d6:3e:f1:9f:63:6d:fd:5f:54:
60:8a:a6:40:47:49:63:c3:c8:27:be:8a:c6:e1:05:4c:40:d6:
57:ea:89:f9:90:a3:b1:1c:3f:11:8a:b4:18:6b:ea:61:af:07:
42:59:c4:3d:f9:9e:f1:15:17:a7:63:53:78:4e:c4:df:f7:cb:
21:62:c1:2b:06:d9:eb:88:98:a5:27:f5:8c:cc:a2:2d:e7:dc:
df:74:31:d1
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaAfqMFVSXeiMvxgkmAMP8hKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwODIwMTQ1MjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDFlOGFiODM3MDQ4N2VmMmUzMjRhMTY1ZjhkN2Q4M2I2ZDAwNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJEbFqVXRQh742SUzCptbEADgFz5
J52w/GIBVXuhvYpD4AVrn8sHYCHEp1cyilsUzeI82P+zoCF0AlMJvWvsfZ3DdC4o
KddADoUxXKw+DegHDnQXuJs1e+SHxUPTIl9QxFT/SrZSMvfKB+5O7y77h7gbl50v
cHYThZRUGL2aBNnRs1c0GPoyp5MSC7p1nvTQQSTZUvGya6wdGpjV/LnqlrtGYFeX
WgaEBRau8sW9iEWajQY+MzjaLD711r786Fq/xUxGBkYAboiJT/MqKCey5mdK0bda
2oDwMs2sT2LDjcovYxSpoPTVIajk5M+r9FyczG5zxVbTxLuMvogmrY62AQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH0eirg3BIfvLjJKFl+NfYO20AVCMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvZlI2S3VEY0VoLTh1TWtvV1g0MTlnN2JRQlVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwHlEAwQA
wHmzAwQBwKWAAwQBwKX4AwQAwkQjAwQBwmeOMA0GCSqGSIb3DQEBCwUAA4IBAQB8
MFPeaTb+S9btkiKdXQdVpK5sJP6/7sRljB3qYweP/PM0IBD7Ga/3w7HjXzB1AnCv
+zQoJYYYOZMAmQWvXHdZpf6OfM71JT952knxJYjQmaHGMm2bLg+MXEftNHpQzo8Y
zg//9RcPQS+kgNViHM3c2g7dp3vnHTt8ArsKu3zG4T5AjqhthbX+qNLJXkz/lN7w
2dr+3HGGhYjKT9CN1hggG1XLrSL+gf6+A6bWPvGfY239X1RgiqZAR0ljw8gnvorG
4QVMQNZX6on5kKOxHD8RirQYa+phrwdCWcQ9+Z7xFRenY1N4TsTf98shYsErBtnr
iJilJ/WMzKIt59zfdDHR
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:55 2026 by rpki-client