Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/inP85_he-RCW5CauWE1WhzzmFsk.roa
File: inP85_he-RCW5CauWE1WhzzmFsk.roa (raw, json)
Hash identifier: P7qb+BWNgEdEbkFwTeYaTRNUYA7oJOTzmJ31o0wDMF8=
Subject key identifier: 8A:73:FC:E7:F8:5E:F9:10:96:E4:26:AE:58:4D:56:87:3C:E6:16:C9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019DBFE546D05A7BEC06FC6AE60A23D72196
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/inP85_he-RCW5CauWE1WhzzmFsk.roa
Signing time: Fri 24 Apr 2026 14:29:27 +0000
ROA not before: Fri 24 Apr 2026 14:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201216
IP address blocks: 192.36.107.0/24 maxlen: 24
192.36.108.0/24 maxlen: 24
192.36.195.0/24 maxlen: 24
192.36.235.0/24 maxlen: 24
192.36.252.0/24 maxlen: 24
192.71.39.0/24 maxlen: 24
192.71.91.0/24 maxlen: 24
192.71.183.0/24 maxlen: 24
192.71.226.0/24 maxlen: 24
192.121.57.0/24 maxlen: 24
192.121.59.0/24 maxlen: 24
192.121.90.0/24 maxlen: 24
192.121.105.0/24 maxlen: 24
192.121.248.0/24 maxlen: 24
192.176.45.0/24 maxlen: 24
192.176.228.0/24 maxlen: 24
193.180.76.0/22 maxlen: 24
193.181.192.0/24 maxlen: 24
193.181.193.0/24 maxlen: 24
193.182.245.0/24 maxlen: 24
193.183.143.0/24 maxlen: 24
193.183.145.0/24 maxlen: 24
193.183.146.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
193.234.98.0/24 maxlen: 24
193.234.143.0/24 maxlen: 24
193.235.1.0/24 maxlen: 24
193.235.3.0/24 maxlen: 24
193.235.32.0/24 maxlen: 24
193.235.47.0/24 maxlen: 24
193.235.97.0/24 maxlen: 24
193.235.98.0/24 maxlen: 24
194.14.35.0/24 maxlen: 24
194.14.39.0/24 maxlen: 24
194.14.49.0/24 maxlen: 24
194.14.134.0/24 maxlen: 24
194.14.177.0/24 maxlen: 24
194.68.37.0/24 maxlen: 24
194.68.38.0/24 maxlen: 24
194.68.111.0/24 maxlen: 24
194.68.118.0/24 maxlen: 24
194.68.161.0/24 maxlen: 24
194.68.219.0/24 maxlen: 24
194.71.92.0/24 maxlen: 24
194.71.111.0/24 maxlen: 24
194.71.182.0/24 maxlen: 24
194.71.223.0/24 maxlen: 24
194.71.242.0/24 maxlen: 24
194.103.52.0/24 maxlen: 24
194.132.10.0/24 maxlen: 24
194.132.29.0/24 maxlen: 24
194.132.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:e5:46:d0:5a:7b:ec:06:fc:6a:e6:0a:23:d7:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 24 14:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a73fce7f85ef91096e426ae584d56873ce616c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:96:a2:ae:97:3c:d9:22:c8:76:e6:50:dd:
05:f8:9c:49:3c:cf:c6:6f:a2:ec:35:32:7f:6e:56:
99:af:9c:56:bc:e8:95:01:11:18:46:11:1f:b7:9d:
4f:03:31:42:0e:f1:88:48:37:0e:76:d4:75:3d:4f:
45:97:16:68:57:78:10:3e:ac:89:75:b1:47:95:83:
98:23:b5:ff:d7:0b:7d:63:8d:75:23:1e:5a:36:d6:
ba:1f:3a:a5:ea:e7:2f:62:74:2b:ce:8d:5e:18:c1:
2a:c4:52:b0:fa:a3:6e:75:f9:ac:41:9c:6f:81:37:
f2:a3:23:a5:6f:8f:44:26:0b:bf:40:fa:48:83:f8:
c0:e6:1b:41:b6:38:f6:ab:fb:52:1e:d7:b4:89:fa:
e6:32:db:b0:a8:25:64:7d:7d:c4:73:11:fe:66:6c:
a4:d0:51:15:4d:73:9e:03:1f:11:9b:17:db:0b:75:
51:40:39:26:d7:de:07:58:2e:3b:74:97:a1:46:a9:
54:88:b5:af:74:ea:e9:2b:02:04:71:e9:b5:e8:dd:
22:aa:ae:9d:84:68:f8:04:6c:3d:ab:d6:7d:d0:ea:
21:a2:a1:ff:9a:3b:b0:b7:e4:40:09:57:15:9f:0b:
ae:7b:c1:51:e8:9a:76:91:57:05:f0:5e:b2:a6:a5:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:FC:E7:F8:5E:F9:10:96:E4:26:AE:58:4D:56:87:3C:E6:16:C9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/inP85_he-RCW5CauWE1WhzzmFsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.107.0-192.36.108.255
192.36.195.0/24
192.36.235.0/24
192.36.252.0/24
192.71.39.0/24
192.71.91.0/24
192.71.183.0/24
192.71.226.0/24
192.121.57.0/24
192.121.59.0/24
192.121.90.0/24
192.121.105.0/24
192.121.248.0/24
192.176.45.0/24
192.176.228.0/24
193.180.76.0/22
193.181.192.0/23
193.182.245.0/24
193.183.143.0/24
193.183.145.0-193.183.146.255
193.234.18.0/24
193.234.98.0/24
193.234.143.0/24
193.235.1.0/24
193.235.3.0/24
193.235.32.0/24
193.235.47.0/24
193.235.97.0-193.235.98.255
194.14.35.0/24
194.14.39.0/24
194.14.49.0/24
194.14.134.0/24
194.14.177.0/24
194.68.37.0-194.68.38.255
194.68.111.0/24
194.68.118.0/24
194.68.161.0/24
194.68.219.0/24
194.71.92.0/24
194.71.111.0/24
194.71.182.0/24
194.71.223.0/24
194.71.242.0/24
194.103.52.0/24
194.132.10.0/24
194.132.29.0/24
194.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cb:6b:08:1d:45:dc:e6:21:c0:d2:c1:9f:1b:2b:7c:14:2d:
01:cf:15:23:2c:22:d4:95:d6:2b:42:58:44:18:14:50:69:10:
21:4e:24:0c:9e:09:6f:2d:88:7d:50:d0:b9:78:bb:a7:b8:3f:
be:da:13:86:00:fd:3f:18:7c:f9:b2:d0:43:5b:a1:e1:af:e0:
40:63:2a:2e:91:e0:22:33:6d:9d:2b:79:23:67:7b:b4:74:e9:
d0:bd:46:94:aa:8d:23:bc:8d:19:50:10:c6:a3:c9:2c:e4:0a:
b7:5e:f7:1e:6d:89:22:cd:c6:d0:61:89:0b:ee:09:0c:cb:a5:
d2:dd:aa:74:3a:f8:da:3f:0b:fc:aa:29:77:a3:95:90:0c:8b:
76:3e:d5:ce:66:cd:42:9a:67:4f:fb:c5:03:3a:a8:59:80:cf:
81:9d:8e:67:d2:18:93:e9:bc:c4:f0:a2:bc:27:4b:3d:26:f8:
fe:fb:f3:50:5f:72:9a:5c:3c:95:ec:db:7a:5f:9f:db:ed:b0:
2d:df:d2:ad:b4:fe:4b:f2:c2:00:91:e6:e7:62:d1:b3:2e:73:
49:aa:bd:c1:85:c4:b9:d6:08:93:e3:15:6a:ec:90:da:63:30:
33:1a:88:72:35:00:ab:dc:12:64:15:4b:4a:1e:94:22:32:d6:
68:24:d0:00
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgISAZ2/5UbQWnvsBvxq5goj1yGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNDI0MTQyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTczZmNlN2Y4NWVmOTEwOTZlNDI2YWU1ODRkNTY4NzNjZTYxNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLyWoq6XPNkiyHbmUN0F+JxJPM/G
b6LsNTJ/blaZr5xWvOiVAREYRhEft51PAzFCDvGISDcOdtR1PU9FlxZoV3gQPqyJ
dbFHlYOYI7X/1wt9Y411Ix5aNta6Hzql6ucvYnQrzo1eGMEqxFKw+qNudfmsQZxv
gTfyoyOlb49EJgu/QPpIg/jA5htBtjj2q/tSHte0ifrmMtuwqCVkfX3EcxH+Zmyk
0FEVTXOeAx8RmxfbC3VRQDkm194HWC47dJehRqlUiLWvdOrpKwIEcem16N0iqq6d
hGj4BGw9q9Z90OohoqH/mjuwt+RACVcVnwuue8FR6Jp2kVcF8F6ypqUVjQIDAQAB
o4IDRzCCA0MwHQYDVR0OBBYEFIpz/Of4XvkQluQmrlhNVoc85hbJMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvaW5QODVfaGUtUkNXNUNhdVdFMVdoenptRnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWwYIKwYBBQUHAQcBAf8EggFKMIIBRjCCAUIEAgABMIIB
OjAMAwQAwCRrAwQAwCRsAwQAwCTDAwQAwCTrAwQAwCT8AwQAwEcnAwQAwEdbAwQA
wEe3AwQAwEfiAwQAwHk5AwQAwHk7AwQAwHlaAwQAwHlpAwQAwHn4AwQAwLAtAwQA
wLDkAwQCwbRMAwQBwbXAAwQAwbb1AwQAwbePMAwDBADBt5EDBADBt5IDBADB6hID
BADB6mIDBADB6o8DBADB6wEDBADB6wMDBADB6yADBADB6y8wDAMEAMHrYQMEAMHr
YgMEAMIOIwMEAMIOJwMEAMIOMQMEAMIOhgMEAMIOsTAMAwQAwkQlAwQAwkQmAwQA
wkRvAwQAwkR2AwQAwkShAwQAwkTbAwQAwkdcAwQAwkdvAwQAwke2AwQAwkffAwQA
wkfyAwQAwmc0AwQAwoQKAwQAwoQdAwQAwoQ7MA0GCSqGSIb3DQEBCwUAA4IBAQB5
y2sIHUXc5iHA0sGfGyt8FC0BzxUjLCLUldYrQlhEGBRQaRAhTiQMnglvLYh9UNC5
eLunuD++2hOGAP0/GHz5stBDW6Hhr+BAYyoukeAiM22dK3kjZ3u0dOnQvUaUqo0j
vI0ZUBDGo8ks5Aq3XvcebYkizcbQYYkL7gkMy6XS3ap0OvjaPwv8qil3o5WQDIt2
PtXOZs1CmmdP+8UDOqhZgM+BnY5n0hiT6bzE8KK8J0s9Jvj++/NQX3KaXDyV7Nt6
X5/b7bAt39KttP5L8sIAkebnYtGzLnNJqr3BhcS51giT4xVq7JDaYzAzGohyNQCr
3BJkFUtKHpQiMtZoJNAA
-----END CERTIFICATE-----
Generated at Mon Apr 27 00:13:36 2026 by rpki-client