Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jFB9lITJpJx4GWfVwLZOF79wzi0.roa
File: jFB9lITJpJx4GWfVwLZOF79wzi0.roa (raw, json)
Hash identifier: HqIpqTGvcuDCe7d7wXemiGCT8rKvYLQmJesy3eVGCGA=
Subject key identifier: 8C:50:7D:94:84:C9:A4:9C:78:19:67:D5:C0:B6:4E:17:BF:70:CE:2D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019EB292E5835B8F30E3BEB0BBA776A71774
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jFB9lITJpJx4GWfVwLZOF79wzi0.roa
Signing time: Wed 10 Jun 2026 17:27:11 +0000
ROA not before: Wed 10 Jun 2026 17:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209207
IP address blocks: 147.45.39.0/24 maxlen: 24
193.233.75.0/24 maxlen: 24
193.233.82.0/24 maxlen: 24
193.233.126.0/24 maxlen: 24
193.233.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:92:e5:83:5b:8f:30:e3:be:b0:bb:a7:76:a7:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 10 17:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c507d9484c9a49c781967d5c0b64e17bf70ce2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:71:88:b5:2d:5e:8f:67:db:0e:22:ba:9a:
e4:92:c3:b5:7d:9f:dc:c4:c4:73:67:96:9c:13:d3:
a9:a9:62:d2:e8:69:69:6e:2c:11:fa:92:28:21:d6:
f1:a6:9d:f9:da:09:5e:c0:75:eb:aa:b8:b1:61:5a:
a8:07:6a:98:c5:72:d4:34:00:7a:21:98:a3:93:13:
83:0a:41:bd:8e:a7:fc:b5:f2:1d:2d:d1:e7:de:e4:
64:b0:0e:22:34:c9:f5:cc:56:c5:b0:16:84:46:db:
b2:e0:85:0a:4a:ff:9c:43:7f:3b:2a:1e:bc:a2:0e:
f7:c1:4e:43:5d:19:84:1a:c5:03:f7:6f:7d:13:82:
22:e7:08:b4:b9:c0:cf:05:b0:26:89:23:56:a2:b7:
1a:69:70:44:79:07:90:e9:7d:bb:30:74:18:8d:02:
65:76:4e:92:c3:52:f4:a8:4f:c3:85:b6:4a:24:6d:
f2:26:d9:21:a2:61:51:5e:87:24:47:d7:50:32:3b:
5a:1b:9d:2d:53:eb:4f:b2:d0:0b:f2:fc:5d:4a:36:
ca:89:3c:64:90:f7:1e:bb:07:23:9f:07:ff:df:8c:
32:9b:1f:2e:13:5e:9c:87:ab:37:bc:ef:ff:0e:ae:
2f:32:52:b9:19:1b:95:b2:01:c1:ea:f6:3f:87:b5:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:7D:94:84:C9:A4:9C:78:19:67:D5:C0:B6:4E:17:BF:70:CE:2D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jFB9lITJpJx4GWfVwLZOF79wzi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.39.0/24
193.233.75.0/24
193.233.82.0/24
193.233.126.0/24
193.233.198.0/24
Signature Algorithm: sha256WithRSAEncryption
65:66:6a:c6:55:b2:72:b1:54:37:28:5c:b4:09:fd:c1:ae:2e:
d7:01:d4:c7:5d:af:3d:29:96:c3:fc:ba:42:0b:fe:7e:79:61:
8e:d1:d1:71:c2:18:04:77:fd:be:08:b7:45:32:31:7c:62:4d:
d0:7b:ee:b3:6d:d1:7d:35:7a:c5:84:45:58:60:d2:c3:7a:fc:
b2:8d:0e:e6:74:6e:00:f0:9c:a3:55:32:6e:6f:ab:a1:77:3d:
c0:4c:9f:f6:6b:75:07:79:10:40:cc:e9:b6:ad:51:76:d4:ea:
24:c5:8b:ab:b5:9a:f5:b7:44:37:07:e3:78:94:1e:06:a2:81:
de:21:46:79:07:e1:d3:74:dd:c4:a0:6e:b8:a7:7e:48:1a:2f:
8b:94:fe:81:64:58:f3:b3:dc:63:08:20:d9:51:48:5b:0a:b2:
57:9a:f1:18:6c:c3:a3:38:b5:38:7b:1c:48:5f:f0:76:04:12:
66:31:e4:b3:33:bd:6b:21:f7:91:c0:dd:7b:e1:a5:03:a8:3d:
3d:fe:61:19:dd:18:ab:6f:2a:89:02:ce:8e:d8:4c:bc:5d:8b:
6a:73:c9:23:9e:57:55:88:ce:55:91:cf:78:37:cf:77:b2:ea:
92:b1:78:1e:0d:fc:49:00:3b:6c:06:5f:fd:8e:95:aa:af:28:
de:d9:f9:dd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ6ykuWDW48w476wu6d2pxd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwNjEwMTcyNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzUwN2Q5NDg0YzlhNDljNzgxOTY3ZDVjMGI2NGUxN2JmNzBjZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1VxiLUtXo9n2w4iuprkksO1fZ/c
xMRzZ5acE9OpqWLS6GlpbiwR+pIoIdbxpp352glewHXrqrixYVqoB2qYxXLUNAB6
IZijkxODCkG9jqf8tfIdLdHn3uRksA4iNMn1zFbFsBaERtuy4IUKSv+cQ387Kh68
og73wU5DXRmEGsUD9299E4Ii5wi0ucDPBbAmiSNWorcaaXBEeQeQ6X27MHQYjQJl
dk6Sw1L0qE/DhbZKJG3yJtkhomFRXockR9dQMjtaG50tU+tPstAL8vxdSjbKiTxk
kPceuwcjnwf/34wymx8uE16ch6s3vO//Dq4vMlK5GRuVsgHB6vY/h7WzfwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIxQfZSEyaSceBln1cC2The/cM4tMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvakZCOWxJVEpwSng0R1dmVndMWk9GNzl3emkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAky0nAwQA
welLAwQAwelSAwQAwel+AwQAwenGMA0GCSqGSIb3DQEBCwUAA4IBAQBlZmrGVbJy
sVQ3KFy0Cf3Bri7XAdTHXa89KZbD/LpCC/5+eWGO0dFxwhgEd/2+CLdFMjF8Yk3Q
e+6zbdF9NXrFhEVYYNLDevyyjQ7mdG4A8JyjVTJub6uhdz3ATJ/2a3UHeRBAzOm2
rVF21OokxYurtZr1t0Q3B+N4lB4GooHeIUZ5B+HTdN3EoG64p35IGi+LlP6BZFjz
s9xjCCDZUUhbCrJXmvEYbMOjOLU4exxIX/B2BBJmMeSzM71rIfeRwN174aUDqD09
/mEZ3RirbyqJAs6O2Ey8XYtqc8kjnldViM5Vkc94N893suqSsXgeDfxJADtsBl/9
jpWqryje2fnd
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:57 2026 by rpki-client