Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Jgg_iysAaSMDSzzhVhudsdxtoTc.roa
File: Jgg_iysAaSMDSzzhVhudsdxtoTc.roa (raw, json)
Hash identifier: 573n9c258gisca6Ag/Euga/+zIbpfDidBbe5joPP9I8=
Subject key identifier: 26:08:3F:8B:2B:00:69:23:03:4B:3C:E1:56:1B:9D:B1:DC:6D:A1:37
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EABA2C74EBE05E88E999187903BAA6FDC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Jgg_iysAaSMDSzzhVhudsdxtoTc.roa
Signing time: Tue 09 Jun 2026 09:07:12 +0000
ROA not before: Tue 09 Jun 2026 09:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 82.108.162.0/24 maxlen: 24
82.108.173.0/24 maxlen: 24
82.108.202.0/24 maxlen: 24
82.108.220.0/24 maxlen: 24
82.109.11.0/24 maxlen: 24
82.109.60.0/24 maxlen: 24
82.109.69.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
82.109.172.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.83.0.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.83.235.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.78.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.85.99.0/24 maxlen: 24
87.85.138.0/24 maxlen: 24
87.85.143.0/24 maxlen: 24
87.85.164.0/24 maxlen: 24
87.85.253.0/24 maxlen: 24
87.85.255.0/24 maxlen: 24
87.86.92.0/24 maxlen: 24
87.86.95.0/24 maxlen: 24
87.86.188.0/24 maxlen: 24
87.86.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:a2:c7:4e:be:05:e8:8e:99:91:87:90:3b:aa:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 9 09:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26083f8b2b006923034b3ce1561b9db1dc6da137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:9a:eb:d1:80:17:a5:1d:40:0d:d1:2b:b0:
15:ee:06:a9:20:37:06:82:e6:78:27:a2:fd:f7:ab:
70:b7:bd:5d:b2:d0:79:38:cc:84:34:b1:09:42:72:
2c:9f:85:a1:92:c5:c2:87:1b:5f:10:45:8d:e6:9e:
50:fe:0e:c9:ad:a9:a2:7f:ca:42:d8:3c:e3:e8:db:
66:9d:9a:f5:14:61:1d:4c:77:d8:8d:46:e0:74:9f:
bd:84:32:01:8a:26:1d:b5:bd:32:9f:43:a9:fb:d2:
fa:3b:91:34:58:04:e0:e0:3c:ad:21:30:73:3c:ef:
52:2d:23:8c:a7:b7:83:7e:13:a4:c1:87:47:b7:83:
43:47:22:e7:c8:cc:19:b9:db:1f:0c:0e:cc:17:cb:
8b:4d:a6:c1:72:83:2e:b9:0c:64:75:46:82:38:75:
0b:8f:9f:0b:3b:86:6b:96:d3:9e:67:02:39:cc:a0:
fb:c6:90:39:c3:3f:79:31:ff:d9:91:7a:94:24:6d:
7f:a6:ba:eb:8d:f1:e1:31:39:32:26:a5:2e:52:a1:
97:3d:b1:c3:3b:e5:04:0b:68:de:f0:64:43:b5:6c:
90:fe:e0:7f:0b:0d:29:14:e0:7d:9a:fb:4f:79:6b:
c7:4a:d4:a5:2c:62:9b:9a:a4:71:8a:55:a9:b0:c3:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:3F:8B:2B:00:69:23:03:4B:3C:E1:56:1B:9D:B1:DC:6D:A1:37
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Jgg_iysAaSMDSzzhVhudsdxtoTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.162.0/24
82.108.173.0/24
82.108.202.0/24
82.108.220.0/24
82.109.11.0/24
82.109.60.0/24
82.109.69.0/24
82.109.98.0/24
82.109.102.0/24
82.109.151.0/24
82.109.166.0/24
82.109.172.0/24
87.82.232.0/24
87.83.0.0/24
87.83.174.0/24
87.83.232.0/24
87.83.235.0/24
87.84.76.0/24
87.84.78.0/24
87.84.220.0/24
87.85.99.0/24
87.85.138.0/24
87.85.143.0/24
87.85.164.0/24
87.85.253.0/24
87.85.255.0/24
87.86.92.0/24
87.86.95.0/24
87.86.188.0/24
87.86.191.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:49:67:e3:c6:26:74:1b:ab:78:78:8e:c2:e0:6e:50:0a:4a:
3a:f8:e2:ba:2d:87:7e:70:ae:43:fd:6f:86:4b:38:72:6c:5f:
31:cb:45:e4:dc:8f:48:d4:3e:e3:14:bf:0c:77:a5:6c:98:c1:
a1:9c:ac:b1:eb:f5:49:f9:81:2c:d1:08:86:b8:9e:c1:10:01:
42:3a:b2:b5:67:8d:88:b1:b3:a6:98:05:64:c6:9a:3f:0a:49:
17:47:12:31:86:93:ee:25:01:f5:41:d2:de:aa:f5:42:fa:a9:
75:51:21:9c:d9:97:e3:09:3f:64:c1:d3:11:86:7f:49:27:2b:
06:24:8c:62:dc:1a:d1:30:f9:d8:4b:11:df:0a:03:e4:ce:ac:
93:e5:ff:15:2d:34:7a:d1:04:f5:45:cc:80:d2:7e:e7:c6:28:
46:10:8d:2e:69:fb:e1:68:f0:70:a1:8b:91:6b:19:f9:3b:8a:
5f:3d:c6:01:d3:9d:04:45:36:92:e4:5a:1e:e7:05:7c:62:ed:
aa:4e:84:9f:a9:b6:10:51:a7:36:b4:54:2e:81:53:86:94:b8:
31:e0:e4:13:5c:e5:23:06:b3:57:fc:41:35:b3:59:81:4f:d6:
08:6c:d3:40:fa:02:aa:7d:33:78:0c:e2:b9:42:8f:a8:ed:80:
0c:62:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:54:07 2026 by rpki-client