Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mGt7aFRwJxN3PS32l4Uhum5DXzA.roa
File: mGt7aFRwJxN3PS32l4Uhum5DXzA.roa (raw, json)
Hash identifier: gpy1OyMOq9jkq7hCKVFrN6sUEXjTGj7SDrNqrOsMycU=
Subject key identifier: 98:6B:7B:68:54:70:27:13:77:3D:2D:F6:97:85:21:BA:6E:43:5F:30
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A158B932D00E6ED32A60C831C3AB59EDBA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mGt7aFRwJxN3PS32l4Uhum5DXzA.roa
Signing time: Tue 20 Oct 2026 09:51:34 +0000
ROA not before: Tue 20 Oct 2026 09:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57169
IP address blocks: 192.36.38.0/24 maxlen: 24
192.36.39.0/24 maxlen: 24
192.36.41.0/24 maxlen: 24
192.36.56.0/24 maxlen: 24
192.36.61.0/24 maxlen: 24
192.71.26.0/24 maxlen: 24
192.71.233.0/24 maxlen: 24
192.71.247.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
192.121.16.0/24 maxlen: 24
192.121.17.0/24 maxlen: 24
192.121.163.0/24 maxlen: 24
192.121.170.0/24 maxlen: 24
192.121.171.0/24 maxlen: 24
193.182.145.0/24 maxlen: 24
193.235.147.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.68.225.0/24 maxlen: 24
194.71.107.0/24 maxlen: 24
194.71.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:b9:32:d0:0e:6e:d3:2a:60:c8:31:c3:ab:59:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 20 09:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=986b7b6854702713773d2df6978521ba6e435f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:cb:f1:9b:13:1c:44:60:8f:52:65:c5:33:
e3:1c:61:53:a9:fb:09:3d:62:7e:aa:15:15:0e:bc:
ab:11:0f:b0:97:2a:23:81:03:1e:a9:a9:38:00:5c:
26:7c:6a:e4:90:5e:90:44:0e:12:5e:8d:cd:32:a6:
66:db:2c:77:70:f7:cf:db:f2:f9:1b:28:bf:fe:cd:
6e:39:98:44:28:c2:2f:d2:6c:f1:cf:a5:bf:bb:6f:
a6:f5:01:f9:ef:a3:4c:95:60:7c:51:8b:7e:07:49:
08:23:95:6f:80:2e:79:ab:ac:e2:b0:6c:17:d0:34:
a0:a4:56:19:7a:7f:2b:7c:e9:3f:89:ca:1d:64:7a:
9b:ec:7d:2d:de:60:4e:d0:43:23:fd:80:e2:ba:14:
b6:6a:cc:ea:39:88:63:dd:ed:25:f3:d2:97:07:95:
50:8d:aa:82:46:bf:34:ed:b3:9d:64:7d:d8:fe:bc:
3d:bc:95:fe:fd:97:c4:e1:6d:6e:5b:f5:88:ba:80:
74:f1:4f:52:5d:ca:f0:ad:a2:3c:21:05:ed:72:c7:
33:5b:83:30:e6:25:15:74:80:1c:bb:98:65:c0:a9:
21:24:57:42:48:c3:09:5d:57:01:85:97:4e:68:41:
73:bf:ec:1b:bc:61:29:38:96:09:e5:d4:5e:77:c4:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:7B:68:54:70:27:13:77:3D:2D:F6:97:85:21:BA:6E:43:5F:30
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mGt7aFRwJxN3PS32l4Uhum5DXzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.38.0/23
192.36.41.0/24
192.36.56.0/24
192.36.61.0/24
192.71.26.0/24
192.71.233.0/24
192.71.247.0/24
192.71.249.0/24
192.121.16.0/23
192.121.163.0/24
192.121.170.0/23
193.182.145.0/24
193.235.147.0/24
194.14.208.0/24
194.68.225.0/24
194.71.107.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
16:27:22:aa:bc:dc:6e:5b:24:e8:90:b9:50:85:3b:08:27:e3:
67:70:0e:b1:f6:31:27:5a:54:f9:02:b7:52:d4:e5:f4:b2:11:
ad:73:ea:c9:a8:c2:38:48:69:fa:4e:23:c7:96:27:7f:8e:3c:
1a:75:99:3b:db:5b:58:44:84:80:04:fa:0b:7a:2e:e3:fc:d2:
9e:a3:49:a3:30:79:66:67:dc:21:01:e7:c7:24:41:de:d2:2e:
58:a2:c4:57:38:e5:9c:ca:44:43:24:00:2a:c7:c0:9e:a2:4f:
72:b7:a0:79:ec:a6:45:0d:5d:6e:e2:5a:43:3a:93:6c:8c:f2:
45:80:a6:f5:a5:83:95:79:ec:e7:7f:17:8b:3b:4c:d7:b0:02:
bd:d5:f7:4b:37:61:02:66:52:11:35:f3:a5:66:be:23:59:c8:
5a:4d:99:55:27:e0:44:e7:2f:b5:c7:53:8c:b9:6d:6e:b6:15:
96:52:96:55:12:19:1e:14:c4:b9:7c:54:c2:88:7e:29:ba:2f:
51:ba:9a:d6:56:66:ff:d6:9b:0a:98:e0:1f:63:44:4a:9a:f9:
5e:ef:6a:b4:e5:7d:ee:93:88:8a:93:e5:95:ba:7c:cb:15:95:
64:81:be:16:a7:02:08:31:73:88:04:79:4e:ff:b2:6e:79:5f:
8d:a3:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:01 2026 by rpki-client