Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/JADJiuE6tvZhP-ADE9ZVAGh-TxE.roa
File: JADJiuE6tvZhP-ADE9ZVAGh-TxE.roa (raw, json)
Hash identifier: e4VPX19bqYSEe++f595d3g9xUSsHBhw/WylnXQVFMDk=
Subject key identifier: 24:00:C9:8A:E1:3A:B6:F6:61:3F:E0:03:13:D6:55:00:68:7E:4F:11
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019C6B70AF8E5D9CFF9B944BC91D7AF3C0A7
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/JADJiuE6tvZhP-ADE9ZVAGh-TxE.roa
Signing time: Tue 17 Feb 2026 11:51:12 +0000
ROA not before: Tue 17 Feb 2026 11:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42065
IP address blocks: 46.19.184.0/21 maxlen: 21
77.239.224.0/19 maxlen: 19
91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
92.62.48.0/20 maxlen: 22
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
94.229.96.0/20 maxlen: 20
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.95.0/24 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.100.0/23 maxlen: 23
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.125.0/24 maxlen: 24
95.161.127.0/24 maxlen: 24
185.51.60.0/22 maxlen: 24
188.65.64.0/21 maxlen: 21
212.232.64.0/20 maxlen: 20
213.21.0.0/19 maxlen: 19
213.21.48.0/20 maxlen: 20
2a00:11d8::/32 maxlen: 48
2a02:1e1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:70:af:8e:5d:9c:ff:9b:94:4b:c9:1d:7a:f3:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Feb 17 11:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2400c98ae13ab6f6613fe00313d65500687e4f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:69:f7:18:c5:c5:37:99:4c:dc:73:3b:91:75:
4a:18:83:ac:12:8e:80:96:14:a3:44:97:f4:06:14:
f8:c5:0b:5c:64:a1:75:f9:de:11:21:7a:6c:36:1c:
bb:84:49:eb:46:51:9a:22:18:fb:a9:82:0c:0a:fa:
c4:92:c5:4e:fd:71:15:1a:97:e9:6b:dc:35:a3:71:
37:22:c1:c1:84:c3:a2:2d:7c:f8:fd:12:14:91:45:
bf:12:81:59:f5:fc:5d:55:10:1e:1e:12:ea:c1:9e:
bc:1e:44:eb:c4:56:84:ba:3b:bf:b5:7b:bd:fe:fe:
f8:07:b5:2f:6b:cf:d1:36:d9:23:5d:b7:55:43:c1:
9b:88:56:96:b7:fe:5f:ff:75:23:2f:35:13:bc:b2:
79:2e:5e:e7:e7:7d:e6:ed:29:fb:df:ad:eb:f3:1a:
28:a3:6f:d0:90:ad:d4:82:2e:4e:87:d7:d4:26:ce:
6f:7f:07:c8:f8:c5:7f:e0:ec:6c:28:b3:77:b1:af:
dd:32:8b:ef:c3:79:bb:35:ca:c4:6c:f0:97:4b:a1:
f6:86:f2:83:27:c2:ea:41:59:6c:f7:0b:10:1f:19:
46:0a:96:4f:4f:fb:da:88:02:15:2f:79:8a:f6:33:
21:f0:6c:e5:6a:7c:27:c6:ca:6e:c6:c7:95:ab:ab:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:C9:8A:E1:3A:B6:F6:61:3F:E0:03:13:D6:55:00:68:7E:4F:11
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/JADJiuE6tvZhP-ADE9ZVAGh-TxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.184.0/21
77.239.224.0/19
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
92.62.48.0/20
94.124.176.0/22
94.229.96.0/20
95.140.92.0/24
95.140.94.0/24
95.161.0.0/18
95.161.88.0/22
95.161.95.0-95.161.97.255
95.161.100.0-95.161.105.255
95.161.124.0/23
95.161.127.0/24
185.51.60.0/22
188.65.64.0/21
212.232.64.0/20
213.21.0.0/19
213.21.48.0/20
IPv6:
2a00:11d8::/32
2a02:1e1::/32
Signature Algorithm: sha256WithRSAEncryption
70:1b:6f:92:1e:be:f5:6f:ba:95:9c:47:e8:75:bd:11:de:6b:
ff:bb:f1:c6:80:5e:f3:01:87:63:cf:34:e6:68:72:fe:75:d3:
14:51:66:37:0e:5f:b8:65:01:14:7e:f7:bb:9e:8f:f1:4e:00:
69:e1:07:f9:15:75:50:2b:94:a2:a0:78:38:61:f8:4b:d7:bb:
81:a4:83:fe:e7:ee:b7:a3:dc:8d:8c:07:6c:56:a9:2b:19:c1:
3d:c3:25:35:19:98:80:81:b0:d3:93:74:1e:8c:a5:0b:9b:07:
55:d3:b9:54:99:63:62:c7:b2:51:ed:2e:3d:34:44:4a:3d:08:
c5:8a:76:f1:a6:2c:55:a8:1d:11:06:c2:b3:c6:ff:5f:5a:ed:
31:9a:d5:f2:44:a6:a8:ec:d4:53:6d:cc:83:dd:99:04:ee:c4:
ee:99:92:67:c5:57:b8:81:4f:f8:6a:f5:1b:c6:fa:e8:ca:61:
85:57:e0:10:12:9f:f1:ef:52:1a:b8:01:f5:a0:c2:6a:4a:11:
3e:c0:95:9b:0f:22:97:21:04:e7:3a:b3:9b:58:9d:3e:06:b1:
37:c1:e9:25:c7:c2:8e:c3:f9:cc:e4:66:8d:62:23:68:35:3a:
46:ff:48:26:04:23:04:12:9e:75:d0:de:af:69:0e:1d:93:21:
d8:ce:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:31 2026 by rpki-client