Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/JVyJapkubi6hwpawUDVyCMGChmk.roa
File: JVyJapkubi6hwpawUDVyCMGChmk.roa (raw, json)
Hash identifier: 9+Xk8J65pvF3WM1GTEgD30u0QtmBjUESAobq/ZpU38Y=
Subject key identifier: 25:5C:89:6A:99:2E:6E:2E:A1:C2:96:B0:50:35:72:08:C1:82:86:69
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 019C284DC1A111561A200E0439296516D40D
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/JVyJapkubi6hwpawUDVyCMGChmk.roa
Signing time: Wed 04 Feb 2026 10:58:30 +0000
ROA not before: Wed 04 Feb 2026 10:58:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60501
IP address blocks: 46.30.216.0/24 maxlen: 24
185.30.64.0/22 maxlen: 22
185.109.24.0/22 maxlen: 22
185.109.24.0/24 maxlen: 24
185.109.25.0/24 maxlen: 24
185.109.26.0/24 maxlen: 24
185.109.27.0/24 maxlen: 24
185.187.62.0/24 maxlen: 24
185.253.53.0/24 maxlen: 24
193.43.208.0/24 maxlen: 24
194.156.180.0/22 maxlen: 22
2a00:ae20::/32 maxlen: 32
2a06:4dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:4d:c1:a1:11:56:1a:20:0e:04:39:29:65:16:d4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Feb 4 10:58:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255c896a992e6e2ea1c296b050357208c1828669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:71:75:ae:7e:a8:b3:74:77:19:e5:75:42:
6b:82:df:21:54:73:f8:3c:d7:9b:dd:7a:eb:7e:95:
9e:34:f6:0c:6d:88:68:8d:6c:75:c8:c3:4f:86:64:
3a:76:d0:3d:5a:83:1f:9c:07:8e:ce:e4:3c:0e:d5:
22:32:35:48:10:da:00:0d:8e:b5:cd:38:fb:a9:63:
6e:e0:8c:b8:da:09:12:42:88:30:0d:a1:c0:7d:b2:
73:99:c6:1d:ba:21:5c:1b:00:d4:dd:d6:43:fb:a1:
c0:6c:90:67:e8:72:59:02:61:26:d0:ad:dc:11:a9:
e8:14:2f:1f:19:e2:e0:93:22:89:eb:13:b0:46:3f:
fd:0c:af:0b:31:42:d4:05:b8:62:a3:47:cb:e9:96:
64:fa:69:5d:6b:7b:10:99:19:9a:75:66:93:9b:49:
6d:8c:6b:fe:ef:3d:b4:13:a0:6a:81:0b:37:af:16:
43:50:9c:97:e8:1e:41:db:65:40:32:3d:91:25:5a:
1e:16:2e:6b:00:37:32:49:04:85:56:b1:d9:5e:7d:
f8:46:a7:3a:f8:e3:2b:0b:9b:85:16:34:74:16:9c:
68:1f:e6:02:d9:7a:f8:a0:c0:69:86:f1:ad:dc:e6:
28:ec:6c:ca:af:0c:5a:24:45:d2:cb:c8:15:cc:d5:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:89:6A:99:2E:6E:2E:A1:C2:96:B0:50:35:72:08:C1:82:86:69
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/JVyJapkubi6hwpawUDVyCMGChmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.216.0/24
185.30.64.0/22
185.109.24.0/22
185.187.62.0/24
185.253.53.0/24
193.43.208.0/24
194.156.180.0/22
IPv6:
2a00:ae20::/32
2a06:4dc0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:45:27:49:a0:30:13:5e:f9:8b:a0:a9:f1:65:82:da:64:18:
95:99:5a:be:ad:a3:88:48:75:67:be:a5:50:a7:76:ac:a9:02:
f8:eb:18:0d:59:7d:f9:b5:e0:d4:02:20:1b:4d:91:23:c2:d5:
b2:98:e2:2f:57:d1:c8:52:80:97:4f:af:16:5b:ff:eb:77:da:
3d:63:45:1a:0c:3a:19:7e:52:cf:33:d9:a5:8e:31:56:14:16:
f8:50:ba:31:bb:d3:1e:00:6b:ac:fb:7c:fa:09:1f:fa:1c:31:
37:f3:35:ff:98:bf:13:73:f9:0c:5f:e1:48:37:c6:42:f0:fb:
33:18:9c:d6:ad:5a:3d:c9:94:be:db:74:03:a4:57:e9:7a:5c:
b2:ab:72:2b:7e:fb:9d:1c:56:0e:01:97:7e:41:a8:c2:8c:d7:
71:8d:25:35:90:c2:ee:3b:40:cd:08:e3:14:19:c2:5a:67:70:
9b:05:3f:e3:21:78:ec:b8:fc:09:da:3b:a8:93:e6:90:76:37:
0d:a5:96:89:cb:4f:62:cd:77:01:5d:f6:ac:9f:60:11:ef:58:
2f:53:d5:39:d7:0f:73:2c:1a:e7:42:6d:fb:6c:02:1d:3b:8b:
22:5c:75:e4:ad:27:b3:25:29:39:7c:e1:88:d6:90:69:5a:49:
98:34:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:56:06 2026 by rpki-client