Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j9akHjFBJMuoESerliGKJyJ58nU.roa
File: j9akHjFBJMuoESerliGKJyJ58nU.roa (raw, json)
Hash identifier: rtG2G46+umlMWM2+37S9oNNMfF/EbhfcRWkjKrSqVTg=
Subject key identifier: 8F:D6:A4:1E:31:41:24:CB:A8:11:27:AB:96:21:8A:27:22:79:F2:75
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019ECAE300DDD22459F77EAA6304EF60CF5A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j9akHjFBJMuoESerliGKJyJ58nU.roa
Signing time: Mon 15 Jun 2026 10:45:34 +0000
ROA not before: Mon 15 Jun 2026 10:45:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 194.68.123.0/24 maxlen: 24
194.68.128.0/24 maxlen: 24
194.68.130.0/23 maxlen: 23
194.68.133.0/24 maxlen: 24
194.68.135.0/24 maxlen: 24
194.132.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:e3:00:dd:d2:24:59:f7:7e:aa:63:04:ef:60:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 15 10:45:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd6a41e314124cba81127ab96218a272279f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:ac:4f:73:bc:bc:7e:5f:e2:9a:61:3f:ab:
b3:79:a4:79:e1:5b:82:ca:25:4b:80:35:97:bb:52:
bd:21:c9:ac:72:0c:95:c2:8a:f0:45:a2:22:b5:78:
d5:33:b1:87:16:f5:47:a8:a3:7b:bb:55:4b:1b:30:
0f:40:79:1d:75:dd:08:93:5e:58:60:39:87:8b:bb:
ed:bf:67:f1:f1:58:2f:e2:7e:b1:42:20:4a:16:df:
8c:c5:5b:a2:7f:71:4a:56:76:a3:aa:ed:ff:0c:da:
9d:4d:ba:5d:94:73:ed:b2:69:69:74:5c:20:08:92:
d9:29:c5:ef:0d:0a:eb:b8:04:1c:e5:79:b2:d7:05:
f6:c3:4d:21:29:9b:d2:7e:af:0c:e9:8b:50:f6:57:
0c:98:c9:34:8b:bf:7e:f1:fe:2f:bd:82:c8:f8:6d:
36:a5:04:39:3a:ee:82:2f:c7:cf:3f:8b:3d:a9:4b:
07:79:82:42:9e:a6:85:44:6d:fd:d4:de:d4:f2:ed:
99:31:13:3e:bd:2a:0d:e6:f0:42:7d:0a:0a:39:7a:
d7:76:2d:72:da:26:ee:cc:82:10:4a:94:a2:eb:0a:
60:ec:b6:8d:36:ef:80:53:18:8e:ec:ad:ef:09:57:
70:17:01:91:44:e9:05:c0:f9:23:9c:9b:51:19:95:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:A4:1E:31:41:24:CB:A8:11:27:AB:96:21:8A:27:22:79:F2:75
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j9akHjFBJMuoESerliGKJyJ58nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.123.0/24
194.68.128.0/24
194.68.130.0/23
194.68.133.0/24
194.68.135.0/24
194.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
22:78:94:5d:09:5a:01:60:71:2e:6e:5f:ed:da:4c:00:ed:61:
93:d1:da:2b:42:e6:b2:7f:60:ae:01:c8:4f:9d:9e:b4:51:9c:
30:bf:f0:a6:d2:df:45:5e:e9:a4:18:86:97:c9:ec:9c:f3:14:
37:35:39:7a:db:a9:7c:40:47:0a:c5:c5:3e:3a:ab:75:77:2c:
c5:6f:03:81:0e:fb:47:69:28:de:a1:51:5b:9e:e6:12:bc:07:
8c:38:50:16:60:9b:db:19:86:61:e4:25:b8:23:cb:4d:b2:2d:
a0:51:02:36:9d:d7:3f:9f:d7:fb:d4:68:8f:c0:af:7e:25:50:
8f:1d:1f:08:a2:4f:8b:f8:74:fe:a7:90:f4:74:9e:b7:4d:27:
e3:dc:5e:62:56:e1:e8:3a:3a:ba:93:12:15:d2:aa:9d:56:49:
24:2a:33:9a:8b:72:cc:18:94:17:2f:63:b8:d4:3c:8c:b8:4a:
6a:dd:cc:de:20:8f:0c:a4:b5:73:29:4e:be:43:10:00:be:10:
fe:ae:1c:11:70:71:89:9e:59:dc:51:87:af:c8:1c:70:77:e4:
f5:ae:ce:11:a5:a5:98:7e:4a:32:38:e4:94:f6:5f:9f:27:dc:
c8:40:a1:f4:6b:79:9a:49:ec:81:97:5b:4e:7c:49:69:2b:e4:
06:92:e2:76
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ7K4wDd0iRZ936qYwTvYM9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNjE1MTA0NTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmQ2YTQxZTMxNDEyNGNiYTgxMTI3YWI5NjIxOGEyNzIyNzlmMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOsT3O8vH5f4pphP6uzeaR54VuC
yiVLgDWXu1K9IcmscgyVworwRaIitXjVM7GHFvVHqKN7u1VLGzAPQHkddd0Ik15Y
YDmHi7vtv2fx8Vgv4n6xQiBKFt+MxVuif3FKVnajqu3/DNqdTbpdlHPtsmlpdFwg
CJLZKcXvDQrruAQc5Xmy1wX2w00hKZvSfq8M6YtQ9lcMmMk0i79+8f4vvYLI+G02
pQQ5Ou6CL8fPP4s9qUsHeYJCnqaFRG391N7U8u2ZMRM+vSoN5vBCfQoKOXrXdi1y
2ibuzIIQSpSi6wpg7LaNNu+AUxiO7K3vCVdwFwGRROkFwPkjnJtRGZWcGwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFI/WpB4xQSTLqBEnq5YhiiciefJ1MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvajlha0hqRkJKTXVvRVNlcmxpR0tKeUo1OG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwkR7AwQA
wkSAAwQBwkSCAwQAwkSFAwQAwkSHAwQAwoQ7MA0GCSqGSIb3DQEBCwUAA4IBAQAi
eJRdCVoBYHEubl/t2kwA7WGT0dorQuayf2CuAchPnZ60UZwwv/Cm0t9FXumkGIaX
yeyc8xQ3NTl626l8QEcKxcU+Oqt1dyzFbwOBDvtHaSjeoVFbnuYSvAeMOFAWYJvb
GYZh5CW4I8tNsi2gUQI2ndc/n9f71GiPwK9+JVCPHR8Iok+L+HT+p5D0dJ63TSfj
3F5iVuHoOjq6kxIV0qqdVkkkKjOai3LMGJQXL2O41DyMuEpq3czeII8MpLVzKU6+
QxAAvhD+rhwRcHGJnlncUYevyBxwd+T1rs4RpaWYfkoyOOSU9l+fJ9zIQKH0a3ma
SeyBl1tOfElpK+QGkuJ2
-----END CERTIFICATE-----
Generated at Wed Jun 24 16:00:42 2026 by rpki-client