Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/rJRRpJE-6cC4O8SwI0alLBz1rPc.roa
File: rJRRpJE-6cC4O8SwI0alLBz1rPc.roa (raw, json)
Hash identifier: Aa6SVSuENCVcWjFhj86DpzR8QL6YOkMd5fnKXC/zfeM=
Subject key identifier: AC:94:51:A4:91:3E:E9:C0:B8:3B:C4:B0:23:46:A5:2C:1C:F5:AC:F7
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019D48B6640D62F7311C25B1C0155B7792B5
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/rJRRpJE-6cC4O8SwI0alLBz1rPc.roa
Signing time: Wed 01 Apr 2026 11:03:25 +0000
ROA not before: Wed 01 Apr 2026 11:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.144.0/22 maxlen: 22
46.57.148.0/22 maxlen: 22
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.168.0/22 maxlen: 22
46.57.172.0/22 maxlen: 22
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/21 maxlen: 21
46.213.0.0/22 maxlen: 22
46.213.4.0/22 maxlen: 22
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.104.0/22 maxlen: 22
46.213.108.0/22 maxlen: 22
46.213.112.0/21 maxlen: 21
46.213.112.0/22 maxlen: 22
46.213.116.0/22 maxlen: 22
46.213.120.0/21 maxlen: 21
46.213.120.0/22 maxlen: 22
46.213.124.0/22 maxlen: 22
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.168.0/22 maxlen: 22
46.213.172.0/22 maxlen: 22
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.184.0/22 maxlen: 22
46.213.188.0/22 maxlen: 22
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.224.0/22 maxlen: 22
46.213.228.0/22 maxlen: 22
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/20 maxlen: 20
94.252.224.0/21 maxlen: 21
94.252.240.0/21 maxlen: 21
94.252.248.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.0.0/22 maxlen: 22
178.52.4.0/22 maxlen: 22
178.52.8.0/21 maxlen: 21
178.52.8.0/22 maxlen: 22
178.52.12.0/22 maxlen: 22
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.104.0/22 maxlen: 22
178.52.108.0/22 maxlen: 22
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.176.0/22 maxlen: 22
178.52.180.0/22 maxlen: 22
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
178.52.248.0/22 maxlen: 22
178.52.252.0/22 maxlen: 22
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
2a00:b800:3000::/55 maxlen: 55
2a00:b800:3000:200::/55 maxlen: 55
2a00:b800:3000:400::/55 maxlen: 55
2a00:b800:3000:600::/55 maxlen: 55
2a00:b800:3200::/55 maxlen: 55
2a00:b800:3200:200::/55 maxlen: 55
2a00:b800:3200:400::/55 maxlen: 55
2a00:b800:3200:600::/55 maxlen: 55
2a00:b800:3400::/55 maxlen: 55
2a00:b800:3400:200::/55 maxlen: 55
2a00:b800:3400:400::/55 maxlen: 55
2a00:b800:3400:600::/55 maxlen: 55
2a00:b800:3600::/55 maxlen: 55
2a00:b800:3600:200::/55 maxlen: 55
2a00:b800:3600:400::/55 maxlen: 55
2a00:b800:3600:600::/55 maxlen: 55
2a00:b800:3a00::/55 maxlen: 55
2a00:b800:3a00:200::/55 maxlen: 55
2a00:b800:3a00:400::/55 maxlen: 55
2a00:b800:3a00:600::/55 maxlen: 55
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:b6:64:0d:62:f7:31:1c:25:b1:c0:15:5b:77:92:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Apr 1 11:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac9451a4913ee9c0b83bc4b02346a52c1cf5acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:be:a4:d0:b9:c5:52:7e:e0:52:c9:2e:2b:
20:7c:8a:4e:cc:ac:fa:81:75:bf:18:09:62:f8:72:
cf:3c:8f:65:c4:4d:22:fd:5b:7d:a2:79:cd:72:8a:
97:bd:2a:77:ab:dc:0e:89:32:78:1d:34:93:38:a0:
49:02:96:60:32:ef:85:a8:2a:d4:cb:45:a0:6e:4d:
13:5b:37:7d:6b:31:de:c8:18:59:58:c1:ec:72:3e:
00:f5:aa:96:f3:84:6c:37:ee:4a:ba:42:47:da:a0:
51:f2:16:98:4b:1f:e8:06:f3:de:97:61:80:8d:83:
8d:85:e0:41:ba:12:93:30:9c:63:32:8c:b4:24:7c:
c5:34:a1:91:96:13:9d:ef:47:57:18:2f:3b:0f:f8:
ca:9e:a5:df:62:30:00:5d:41:6f:95:92:64:85:40:
29:c0:cf:bf:87:b2:50:51:61:71:76:bb:9d:00:0d:
38:35:4c:4f:20:67:55:e7:c0:38:77:c8:72:7e:0c:
f8:5c:a7:0a:23:4b:ab:da:dd:4a:13:95:c9:66:3c:
4d:99:44:5c:0c:00:79:a0:3d:0b:c3:30:52:9d:38:
c7:aa:26:ff:f6:63:2d:f9:06:11:d5:c5:ab:4a:b2:
d2:3f:f8:96:f8:f4:ba:5f:94:43:9e:c6:73:cb:82:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:51:A4:91:3E:E9:C0:B8:3B:C4:B0:23:46:A5:2C:1C:F5:AC:F7
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/rJRRpJE-6cC4O8SwI0alLBz1rPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
7e:b6:b9:5e:0f:19:e8:5a:9a:38:94:9b:be:4d:36:3f:bd:53:
62:56:17:a1:0d:52:b0:9f:76:50:e7:7c:8d:fb:09:3c:1a:d3:
4c:bf:eb:82:34:fe:86:d0:51:c2:2e:ed:0d:6a:7d:a1:44:09:
db:10:0c:d1:69:56:c2:ef:3b:3b:4d:ef:29:20:96:21:7f:86:
ea:e6:4c:26:9e:c4:0e:43:be:f5:db:a8:c7:8d:6e:04:b9:f2:
f9:44:ed:5c:86:bd:c2:cd:59:7c:53:d4:de:1b:b3:5c:08:1a:
8b:3a:f2:c9:60:27:60:c8:66:bb:bd:97:a5:d4:8e:af:e0:70:
c0:3d:41:d8:75:5b:d3:71:1e:52:c2:85:95:69:f1:88:05:dc:
92:61:a9:4e:8e:51:50:3f:01:37:7a:c2:aa:56:56:d4:1b:59:
6d:6d:e7:5f:2c:7e:0d:68:fd:e0:03:b7:6a:ac:6e:ad:1c:f7:
57:b5:3a:85:3c:f6:a7:5c:58:28:d4:88:28:93:0e:1a:9b:cb:
39:73:ae:49:34:3b:e8:bc:af:83:06:4f:85:43:ed:f5:48:b0:
1c:7a:66:68:05:1a:ff:82:d2:6f:7b:c5:85:1f:72:66:bd:7a:
69:c4:23:47:3b:c0:62:26:fe:d4:12:76:f1:76:21:0e:7e:88:
19:88:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:36 2026 by rpki-client