Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa
File: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (raw, json)
Hash identifier: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=
Subject key identifier: 26:3F:49:02:C3:64:68:2C:D5:87:7C:B8:5D:69:B5:3F:FA:D7:61:4D
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019D71F7D319D1A45BCF29F91B5161A6451C
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa
Signing time: Thu 09 Apr 2026 11:19:19 +0000
ROA not before: Thu 09 Apr 2026 11:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12392
IP address blocks: 62.197.64.0/18 maxlen: 18
62.197.64.0/20 maxlen: 20
62.197.80.0/20 maxlen: 20
62.197.96.0/20 maxlen: 20
62.197.112.0/20 maxlen: 20
78.129.0.0/17 maxlen: 17
78.129.0.0/20 maxlen: 20
78.129.16.0/20 maxlen: 20
78.129.32.0/20 maxlen: 20
78.129.48.0/20 maxlen: 20
78.129.64.0/20 maxlen: 20
78.129.80.0/20 maxlen: 20
78.129.96.0/20 maxlen: 20
78.129.112.0/20 maxlen: 20
82.212.128.0/18 maxlen: 18
82.212.128.0/20 maxlen: 20
82.212.144.0/20 maxlen: 20
82.212.160.0/20 maxlen: 20
82.212.176.0/20 maxlen: 20
85.26.0.0/17 maxlen: 17
85.26.0.0/20 maxlen: 20
85.26.16.0/20 maxlen: 20
85.26.32.0/20 maxlen: 20
85.26.48.0/20 maxlen: 20
85.26.64.0/20 maxlen: 20
85.26.80.0/20 maxlen: 20
85.26.96.0/20 maxlen: 20
85.26.112.0/20 maxlen: 20
85.27.0.0/17 maxlen: 17
85.27.32.0/20 maxlen: 20
85.27.48.0/20 maxlen: 20
85.201.0.0/16 maxlen: 16
85.201.0.0/20 maxlen: 20
85.201.16.0/20 maxlen: 20
85.201.32.0/20 maxlen: 20
85.201.48.0/20 maxlen: 20
85.201.64.0/20 maxlen: 20
85.201.80.0/20 maxlen: 20
85.201.96.0/20 maxlen: 20
85.201.112.0/20 maxlen: 20
85.201.128.0/20 maxlen: 20
85.201.144.0/20 maxlen: 20
85.201.160.0/20 maxlen: 20
85.201.176.0/20 maxlen: 20
85.201.192.0/20 maxlen: 20
85.201.208.0/20 maxlen: 20
85.201.224.0/20 maxlen: 20
85.201.240.0/20 maxlen: 20
95.182.128.0/17 maxlen: 17
95.182.128.0/20 maxlen: 20
95.182.144.0/20 maxlen: 20
95.182.192.0/20 maxlen: 20
95.182.208.0/20 maxlen: 20
95.182.224.0/20 maxlen: 20
95.182.240.0/20 maxlen: 20
109.88.0.0/15 maxlen: 15
109.88.0.0/20 maxlen: 20
109.88.16.0/20 maxlen: 20
109.88.32.0/20 maxlen: 20
109.88.48.0/20 maxlen: 20
109.88.64.0/20 maxlen: 20
109.88.80.0/20 maxlen: 20
109.88.96.0/19 maxlen: 19
109.88.128.0/19 maxlen: 19
109.88.160.0/20 maxlen: 20
109.88.176.0/20 maxlen: 20
109.88.192.0/20 maxlen: 20
109.88.208.0/20 maxlen: 20
109.88.224.0/20 maxlen: 20
109.88.240.0/20 maxlen: 20
109.89.0.0/20 maxlen: 20
109.89.16.0/20 maxlen: 20
109.89.32.0/20 maxlen: 20
109.89.48.0/20 maxlen: 20
109.89.64.0/20 maxlen: 20
109.89.80.0/20 maxlen: 20
109.89.96.0/20 maxlen: 20
109.89.112.0/20 maxlen: 20
109.89.128.0/20 maxlen: 20
109.89.144.0/20 maxlen: 20
109.89.160.0/20 maxlen: 20
109.89.176.0/20 maxlen: 20
109.89.192.0/20 maxlen: 20
109.89.208.0/20 maxlen: 20
109.89.224.0/20 maxlen: 20
109.89.240.0/20 maxlen: 20
149.154.192.0/18 maxlen: 18
185.3.160.0/22 maxlen: 22
212.68.192.0/18 maxlen: 18
212.68.192.0/20 maxlen: 20
212.68.208.0/20 maxlen: 20
212.68.224.0/20 maxlen: 20
212.68.240.0/20 maxlen: 20
213.189.160.0/19 maxlen: 19
213.189.160.0/20 maxlen: 20
213.189.176.0/20 maxlen: 20
213.213.192.0/18 maxlen: 18
213.213.192.0/20 maxlen: 20
213.213.208.0/20 maxlen: 20
213.213.224.0/20 maxlen: 20
213.213.240.0/20 maxlen: 20
217.15.224.0/20 maxlen: 20
2a02:2788::/32 maxlen: 32
2a02:2788::/40 maxlen: 40
2a02:2788:100::/40 maxlen: 40
2a02:2788:200::/40 maxlen: 40
2a02:2788:300::/40 maxlen: 40
2a02:2788:400::/40 maxlen: 40
2a02:2788:500::/40 maxlen: 40
2a02:2788:600::/40 maxlen: 40
2a02:2788:700::/40 maxlen: 40
2a02:2788:800::/40 maxlen: 40
2a02:2788:900::/40 maxlen: 40
2a02:2788:a00::/40 maxlen: 40
2a02:2788:b00::/40 maxlen: 40
2a02:2788:c00::/40 maxlen: 40
2a02:2788:d00::/40 maxlen: 40
2a02:2788:e00::/40 maxlen: 40
2a02:2788:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:f7:d3:19:d1:a4:5b:cf:29:f9:1b:51:61:a6:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Apr 9 11:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263f4902c364682cd5877cb85d69b53ffad7614d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:7b:44:9e:e3:5f:24:83:44:43:1f:46:4b:
1e:e0:7c:7e:a5:9d:d2:e3:92:30:df:01:ed:00:fd:
e6:5f:6c:eb:f1:fe:35:0f:fa:ff:7d:f4:44:e9:25:
57:c9:5c:d2:53:48:6b:55:08:37:4e:c7:de:9e:30:
96:83:7a:e3:b5:f3:73:97:5a:b3:1f:03:c8:f2:e8:
b6:a4:8d:85:40:18:b8:88:11:34:d1:e2:63:28:72:
ea:6c:2c:0d:7e:6a:d5:cc:35:82:c2:bf:e2:4c:a1:
36:c8:36:04:7a:47:d9:83:df:c0:59:f2:3c:ca:0a:
bb:59:c7:d8:94:3d:89:c8:44:75:03:21:e9:88:51:
ec:9d:b2:51:99:12:83:48:96:24:b7:51:17:1a:a9:
ea:f7:79:9d:43:35:62:9a:c2:22:58:60:66:ac:5e:
6c:10:92:45:6c:f1:2b:91:f7:f5:7e:c3:d1:cd:0c:
74:f1:80:3c:4e:45:79:4f:72:da:36:b5:c3:d1:ed:
52:1e:a4:7f:3f:18:ef:bd:09:b5:b8:69:02:c9:dd:
e7:3a:e6:7d:76:37:20:3d:6c:71:ae:a7:ad:aa:b1:
4e:25:51:60:f1:cc:5e:39:22:d2:37:cf:ce:10:a1:
1c:34:f9:ae:eb:b7:38:9b:3b:ef:2e:e8:98:56:5d:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:49:02:C3:64:68:2C:D5:87:7C:B8:5D:69:B5:3F:FA:D7:61:4D
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.64.0/18
78.129.0.0/17
82.212.128.0/18
85.26.0.0/17
85.27.0.0/17
85.201.0.0/16
95.182.128.0/17
109.88.0.0/15
149.154.192.0/18
185.3.160.0/22
212.68.192.0/18
213.189.160.0/19
213.213.192.0/18
217.15.224.0/20
IPv6:
2a02:2788::/32
Signature Algorithm: sha256WithRSAEncryption
48:49:a2:96:ed:4e:6b:c0:81:16:5f:66:dc:13:8c:3c:de:c2:
17:a6:d8:f8:f5:ec:19:0f:31:2e:d4:5f:d7:dd:86:fb:8a:b6:
60:e1:0c:9f:af:cc:19:ed:d0:0e:ba:d1:2f:87:6e:d0:67:fc:
3b:2e:4b:b9:68:56:94:6e:37:66:c5:70:13:f3:ba:59:c0:39:
58:b6:0a:68:18:2c:d0:7e:86:18:28:82:f9:56:1d:4e:ea:7b:
af:2e:7a:d0:0a:11:12:6b:e4:43:7b:bc:9f:35:2f:9d:a2:61:
c5:97:52:1f:c2:e7:75:4a:49:d5:1b:64:16:fe:4d:a4:5e:a6:
fc:1e:45:c7:1c:24:fa:a5:51:cb:54:a3:29:40:3e:dc:70:b6:
68:83:5c:c9:1e:57:41:81:a2:65:cd:d2:db:33:9f:75:88:5c:
c9:c2:2b:06:fe:5d:c9:44:bb:59:e4:b6:7c:0c:ef:02:cb:f3:
a5:fc:d0:e2:17:ed:e4:4e:dc:12:e8:03:b2:be:15:82:77:5c:
92:36:0b:63:51:8a:24:78:01:7c:8b:bc:98:5b:c1:30:8d:cf:
f8:90:5d:08:af:58:02:77:00:7b:ec:bc:1a:70:17:36:61:c4:
3b:f2:91:00:47:5b:43:6a:01:4d:6a:8c:ed:e4:5a:32:3e:27:
94:b2:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:32:07 2026 by rpki-client