Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JP2YTEXKfbz2rysCMlsFUJ9glSA.roa
File: JP2YTEXKfbz2rysCMlsFUJ9glSA.roa (raw, json)
Hash identifier: uVECZc2WYQz19jnkv5udVj9qIJJkl75Ld5dAAc4lGkI=
Subject key identifier: 24:FD:98:4C:45:CA:7D:BC:F6:AF:2B:02:32:5B:05:50:9F:60:95:20
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019E9D608A106BA02C15EC5743A481F5B115
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JP2YTEXKfbz2rysCMlsFUJ9glSA.roa
Signing time: Sat 06 Jun 2026 14:40:10 +0000
ROA not before: Sat 06 Jun 2026 14:40:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 45.89.63.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.167.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
45.155.54.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
91.211.114.0/24 maxlen: 24
138.124.182.0/24 maxlen: 24
146.19.230.0/24 maxlen: 32
185.33.24.0/24 maxlen: 32
194.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:60:8a:10:6b:a0:2c:15:ec:57:43:a4:81:f5:b1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 6 14:40:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24fd984c45ca7dbcf6af2b02325b05509f609520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:8a:8f:09:a4:de:44:42:9c:69:b9:15:56:
4d:8e:9b:ea:af:5a:84:8d:8b:bc:a8:f5:28:43:e0:
64:24:70:3b:d7:ef:ac:03:04:c8:54:2e:40:fc:fa:
9c:48:11:6f:aa:2b:29:5c:9c:3c:5c:f8:cf:bf:38:
1a:63:7e:68:38:93:a3:2d:77:22:41:92:b3:fd:f3:
02:ca:59:bd:98:63:1a:0b:89:74:92:b5:ea:40:58:
07:45:f6:e1:62:58:58:69:10:5e:93:40:41:fa:16:
c8:5c:8f:f9:19:78:f5:08:04:c1:26:a3:f3:b0:89:
fb:18:f8:15:06:c5:fc:02:f9:86:a8:bb:d3:4a:36:
36:e4:9a:b1:e9:dd:ac:47:4b:40:b8:ed:c6:d0:e3:
44:ad:98:a8:fa:c4:55:0f:ad:a2:dc:43:5e:18:7e:
69:29:30:c8:4a:31:32:f9:7f:d4:16:a3:41:b0:df:
d6:24:ba:51:c6:63:2f:f9:3c:fa:f9:d1:60:56:a5:
c6:6d:48:59:49:f8:53:83:5a:14:42:b5:2d:6a:72:
04:29:a1:69:bc:d6:3c:23:9f:9b:0e:d3:9e:b8:a6:
d2:0d:58:6d:61:6b:0a:ca:fe:4d:b0:8c:cb:f3:cc:
2f:55:0f:00:34:e9:42:4b:ad:93:ae:b2:87:d8:f3:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:98:4C:45:CA:7D:BC:F6:AF:2B:02:32:5B:05:50:9F:60:95:20
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JP2YTEXKfbz2rysCMlsFUJ9glSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.63.0/24
45.140.147.0/24
45.140.167.0/24
45.144.28.0/23
45.144.232.0/22
45.155.54.0/23
91.211.114.0/24
138.124.182.0/24
146.19.230.0/24
185.33.24.0/24
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:94:49:bb:78:4d:e5:21:16:8b:27:1a:c6:2f:25:b4:68:de:
bf:65:06:29:11:82:bc:e9:ae:1e:5b:39:b7:46:87:b6:4e:d3:
5c:db:4e:8b:73:33:e5:83:2c:7f:7e:c5:3e:30:bd:d9:33:fe:
4f:da:4f:99:54:13:0e:d5:ee:fe:f8:f2:2f:cc:a6:fb:13:f7:
18:a0:60:75:9b:95:75:7a:a8:c0:18:37:71:4c:4e:95:d0:bd:
02:fa:3c:e0:06:cb:a0:3a:b5:2d:48:04:11:61:77:99:d6:65:
f9:b6:a7:4e:33:89:13:f4:5b:20:27:5d:e3:ae:1b:c9:55:97:
2c:32:dc:36:f7:7c:12:2d:cc:87:46:f3:ce:1c:63:96:d4:05:
fa:9c:84:f3:63:84:16:05:37:80:cc:f8:da:e3:b3:3c:97:30:
87:52:c0:01:f3:77:dd:dc:e4:db:54:c4:b3:70:26:cc:ab:71:
cc:64:41:4a:0f:38:7f:a7:47:89:38:39:63:fe:67:cc:3a:98:
66:3c:51:99:ef:9a:3c:c6:28:ca:25:ad:8f:81:f0:d2:6a:18:
21:90:68:98:7d:6d:ee:2b:62:0f:d4:3b:94:cc:e3:d2:aa:65:
07:6f:ac:cb:e2:8f:5a:b8:d1:c8:cc:43:8c:e2:02:33:d9:09:
79:6a:c3:e9
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ6dYIoQa6AsFexXQ6SB9bEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwNjA2MTQ0MDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGZkOTg0YzQ1Y2E3ZGJjZjZhZjJiMDIzMjViMDU1MDlmNjA5NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7+Kjwmk3kRCnGm5FVZNjpvqr1qE
jYu8qPUoQ+BkJHA71++sAwTIVC5A/PqcSBFvqispXJw8XPjPvzgaY35oOJOjLXci
QZKz/fMCylm9mGMaC4l0krXqQFgHRfbhYlhYaRBek0BB+hbIXI/5GXj1CATBJqPz
sIn7GPgVBsX8AvmGqLvTSjY25Jqx6d2sR0tAuO3G0ONErZio+sRVD62i3ENeGH5p
KTDISjEy+X/UFqNBsN/WJLpRxmMv+Tz6+dFgVqXGbUhZSfhTg1oUQrUtanIEKaFp
vNY8I5+bDtOeuKbSDVhtYWsKyv5NsIzL88wvVQ8ANOlCS62TrrKH2POTqQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFCT9mExFyn289q8rAjJbBVCfYJUgMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvSlAyWVRFWEtmYnoycnlzQ01sc0ZVSjlnbFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALVk/AwQA
LYyTAwQALYynAwQBLZAcAwQCLZDoAwQBLZs2AwQAW9NyAwQAiny2AwQAkhPmAwQA
uSEYAwQAwiduMA0GCSqGSIb3DQEBCwUAA4IBAQAvlEm7eE3lIRaLJxrGLyW0aN6/
ZQYpEYK86a4eWzm3Roe2TtNc206LczPlgyx/fsU+ML3ZM/5P2k+ZVBMO1e7++PIv
zKb7E/cYoGB1m5V1eqjAGDdxTE6V0L0C+jzgBsugOrUtSAQRYXeZ1mX5tqdOM4kT
9FsgJ13jrhvJVZcsMtw293wSLcyHRvPOHGOW1AX6nITzY4QWBTeAzPja47M8lzCH
UsAB83fd3OTbVMSzcCbMq3HMZEFKDzh/p0eJODlj/mfMOphmPFGZ75o8xijKJa2P
gfDSahghkGiYfW3uK2IP1DuUzOPSqmUHb6zL4o9auNHIzEOM4gIz2Ql5asPp
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:58 2026 by rpki-client