Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/JjDY8JKDP0TqAR9nUykXtyrhD-0.roa
File: JjDY8JKDP0TqAR9nUykXtyrhD-0.roa (raw, json)
Hash identifier: Qp43dCNVXCh/WLDhB87XwdpjjWnXysQWBPdeu9g0hs8=
Subject key identifier: 26:30:D8:F0:92:83:3F:44:EA:01:1F:67:53:29:17:B7:2A:E1:0F:ED
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 01A07C0BC13C1FBD3801CA82F63EB599C8DA
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/JjDY8JKDP0TqAR9nUykXtyrhD-0.roa
Signing time: Mon 07 Sep 2026 13:25:40 +0000
ROA not before: Mon 07 Sep 2026 13:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
81.90.176.0/24 maxlen: 24
81.90.177.0/24 maxlen: 24
81.90.178.0/24 maxlen: 24
81.90.179.0/24 maxlen: 24
81.200.140.0/24 maxlen: 24
81.200.141.0/24 maxlen: 24
81.200.142.0/24 maxlen: 24
81.200.143.0/24 maxlen: 24
91.106.216.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
153.56.138.0/24 maxlen: 24
153.56.139.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
193.138.172.0/24 maxlen: 24
193.138.173.0/24 maxlen: 24
193.138.174.0/24 maxlen: 24
193.138.175.0/24 maxlen: 24
194.56.184.0/24 maxlen: 24
194.56.185.0/24 maxlen: 24
194.56.186.0/24 maxlen: 24
194.56.187.0/24 maxlen: 24
194.127.116.0/24 maxlen: 24
194.127.117.0/24 maxlen: 24
194.127.118.0/24 maxlen: 24
194.127.119.0/24 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.38.0/24 maxlen: 24
212.103.39.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:0b:c1:3c:1f:bd:38:01:ca:82:f6:3e:b5:99:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Sep 7 13:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2630d8f092833f44ea011f67532917b72ae10fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:59:ad:ec:d7:1e:a1:5a:86:cf:ad:c4:a0:
29:31:43:ef:78:8a:f2:29:7b:ed:7d:da:7e:20:98:
5e:fc:80:4c:1e:5f:30:60:5b:9c:6b:d3:4d:f6:49:
a4:3a:f2:89:99:64:2e:5f:89:e3:6b:2b:a1:8a:0d:
0c:25:24:7a:61:98:d8:06:ce:e4:75:a9:a6:3c:0b:
24:5f:f9:cd:59:5d:8f:00:5a:83:27:c3:01:a3:c8:
50:07:a3:10:c4:70:0f:92:3c:f2:25:eb:d2:ed:4d:
bb:18:2b:20:d0:b5:d2:97:bf:45:51:4e:45:a2:28:
e0:10:7d:9d:99:3a:98:3f:c2:57:5f:d8:d5:20:4d:
77:8a:30:4e:7b:5b:d9:3c:cb:e9:75:b0:21:e5:94:
84:e3:99:c6:e5:0e:a3:58:15:7d:66:da:9e:34:96:
a9:aa:41:dc:0a:96:6e:4e:2a:dc:9b:33:82:7d:ad:
ae:0a:2c:b0:6b:e9:7c:99:1a:84:68:1e:6e:08:81:
b1:e4:35:55:02:08:d0:5c:9e:43:53:0b:b0:1e:f9:
47:db:b4:8e:a3:ad:f3:78:2b:13:18:24:bc:48:7e:
25:f9:9b:9e:e1:de:c2:25:b5:92:73:f6:2e:55:ab:
53:d7:c2:fb:55:75:61:a7:a4:e6:06:32:fd:41:2f:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:D8:F0:92:83:3F:44:EA:01:1F:67:53:29:17:B7:2A:E1:0F:ED
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/JjDY8JKDP0TqAR9nUykXtyrhD-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
81.90.176.0/22
81.200.140.0/22
91.106.216.0/22
91.194.52.0/24
91.194.54.0/24
153.56.138.0/23
185.82.220.0/22
185.126.177.0-185.126.179.255
185.201.212.0/22
193.35.204.0/22
193.138.172.0/22
194.56.184.0/22
194.127.116.0/22
212.103.36.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
8b:42:e0:e4:d0:e6:cd:e6:77:36:ac:e6:48:b5:62:0d:9c:47:
b6:70:af:1c:f1:67:23:ad:28:73:ad:32:22:51:b9:f1:7f:c1:
a4:ca:23:f0:81:12:e6:10:65:be:06:3c:45:b8:85:09:d9:7b:
22:78:f6:b8:34:1b:09:22:0b:68:e9:a5:a2:13:11:df:c6:10:
34:24:30:03:5c:82:fd:fd:50:a5:4f:9c:ad:4d:5e:07:3c:68:
f3:22:09:3d:9c:ae:c1:51:d4:83:b2:bd:80:96:6a:2f:47:2a:
1f:cc:b0:55:5e:05:6c:ff:e5:0a:f4:70:32:4e:77:76:7d:5c:
db:f0:77:58:d2:81:89:c0:e9:97:f7:96:22:f8:ce:c8:39:14:
2f:df:b2:0b:9d:85:ad:ed:10:b3:a9:93:5f:bf:e4:3f:f8:f9:
10:67:12:44:4b:ed:a9:6f:8a:17:db:13:e9:12:db:a0:46:cf:
e6:57:fe:34:7a:d1:fd:da:0b:e4:93:04:2e:60:b9:c0:a0:d3:
18:54:34:da:76:3c:e5:cc:6a:e0:72:09:82:e2:df:cd:b8:1f:
2a:87:dc:78:c9:29:20:45:13:b4:65:22:c0:6c:7a:b3:9f:61:
e8:f4:c0:95:8f:f6:9f:cb:7d:de:ea:1c:ee:31:83:00:6e:7e:
0c:c5:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:45 2026 by rpki-client