Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JluccIFAxkXpHQQFi-Y0TXchD6w.roa
File: JluccIFAxkXpHQQFi-Y0TXchD6w.roa (raw, json)
Hash identifier: WEGrHW/lsi7RS7eLbE4kq57k0WC/TJIL9wNkvmGxePs=
Subject key identifier: 26:5B:9C:70:81:40:C6:45:E9:1D:04:05:8B:E6:34:4D:77:21:0F:AC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09A485BC8508BDBD0923972D7A1457131
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JluccIFAxkXpHQQFi-Y0TXchD6w.roa
Signing time: Sun 13 Sep 2026 10:20:28 +0000
ROA not before: Sun 13 Sep 2026 10:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 78.154.114.0/24 maxlen: 24
78.154.122.0/24 maxlen: 24
78.154.127.0/24 maxlen: 24
80.68.210.0/24 maxlen: 24
80.68.211.0/24 maxlen: 24
82.108.40.0/23 maxlen: 24
82.108.98.0/24 maxlen: 24
82.108.129.0/24 maxlen: 24
82.108.135.0/24 maxlen: 24
82.108.202.0/24 maxlen: 24
82.108.208.0/24 maxlen: 24
82.108.209.0/24 maxlen: 24
82.108.213.0/24 maxlen: 24
82.108.214.0/24 maxlen: 24
82.108.215.0/24 maxlen: 24
82.108.216.0/22 maxlen: 24
82.109.11.0/24 maxlen: 24
82.109.153.0/24 maxlen: 24
82.109.154.0/24 maxlen: 24
82.109.155.0/24 maxlen: 24
82.109.156.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
82.109.180.0/22 maxlen: 24
82.109.185.0/24 maxlen: 24
82.109.196.0/24 maxlen: 24
82.109.199.0/24 maxlen: 24
82.109.236.0/22 maxlen: 24
82.109.242.0/24 maxlen: 24
82.110.50.0/24 maxlen: 24
82.110.53.0/24 maxlen: 24
82.110.98.0/24 maxlen: 24
82.110.228.0/24 maxlen: 24
87.82.194.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.246.0/24 maxlen: 24
87.82.252.0/24 maxlen: 24
87.83.15.0/24 maxlen: 24
87.83.20.0/24 maxlen: 24
87.83.21.0/24 maxlen: 24
87.83.22.0/24 maxlen: 24
87.83.23.0/24 maxlen: 24
87.83.67.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.113.0/24 maxlen: 24
87.83.114.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.164.0/24 maxlen: 24
87.83.204.0/24 maxlen: 24
87.83.216.0/23 maxlen: 24
87.83.219.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
87.84.56.0/24 maxlen: 24
87.84.57.0/24 maxlen: 24
87.84.58.0/24 maxlen: 24
87.84.61.0/24 maxlen: 24
87.84.62.0/24 maxlen: 24
87.84.63.0/24 maxlen: 24
87.84.203.0/24 maxlen: 24
87.84.206.0/24 maxlen: 24
87.84.207.0/24 maxlen: 24
87.84.209.0/24 maxlen: 24
87.84.210.0/24 maxlen: 24
87.84.211.0/24 maxlen: 24
87.84.212.0/24 maxlen: 24
87.84.214.0/24 maxlen: 24
87.84.215.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
87.85.133.0/24 maxlen: 24
87.85.224.0/24 maxlen: 24
87.85.226.0/24 maxlen: 24
87.85.248.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.91.0/24 maxlen: 24
87.86.93.0/24 maxlen: 24
87.86.94.0/24 maxlen: 24
87.86.182.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
194.242.132.0/24 maxlen: 24
194.242.157.0/24 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.135.159.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
217.79.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:48:5b:c8:50:8b:db:d0:92:39:72:d7:a1:45:71:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 10:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=265b9c708140c645e91d04058be6344d77210fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:bf:f4:7b:6e:f3:4e:ae:49:95:6a:7c:3b:
bc:e9:02:a7:e9:34:a6:2d:5c:f6:c4:9d:0b:82:04:
51:3e:e4:13:73:7f:a7:f8:82:36:d7:a9:4c:1b:cf:
10:cf:42:a9:c1:cd:38:96:fe:37:9d:27:37:9e:05:
f3:e2:7c:16:6d:6d:39:de:ae:82:98:a4:35:89:da:
07:a1:74:e2:e5:c8:2c:b1:c4:5f:01:7b:03:05:58:
33:b1:8b:34:e6:d5:c4:a6:3d:b4:c3:f6:ef:a0:38:
25:73:88:02:ea:d0:22:f0:4d:37:dd:8c:b8:d1:41:
ea:2c:d5:6b:41:20:4f:38:c7:a1:2f:45:e5:cc:e6:
31:8f:bd:21:46:6d:d8:a9:69:3b:b7:fb:9a:0d:bd:
6e:a5:28:cd:e3:f5:64:68:37:00:83:2b:14:06:88:
91:f2:1b:e8:9d:f8:05:b3:8d:08:8a:31:4f:40:95:
18:6b:e3:87:f3:6c:25:13:28:da:9f:8f:f4:87:71:
65:1a:37:b7:43:7a:a9:ec:bd:e4:3c:06:2a:a5:9e:
36:26:40:8f:cd:3e:4f:81:e3:cb:66:a2:19:f4:e7:
1d:da:c2:95:95:b2:ef:de:33:eb:25:4a:e0:74:ea:
21:c9:22:b0:10:62:ad:27:92:3c:bd:b7:7b:86:80:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:9C:70:81:40:C6:45:E9:1D:04:05:8B:E6:34:4D:77:21:0F:AC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JluccIFAxkXpHQQFi-Y0TXchD6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.114.0/24
78.154.122.0/24
78.154.127.0/24
80.68.210.0/23
82.108.40.0/23
82.108.98.0/24
82.108.129.0/24
82.108.135.0/24
82.108.202.0/24
82.108.208.0/23
82.108.213.0-82.108.219.255
82.109.11.0/24
82.109.153.0-82.109.156.255
82.109.166.0/24
82.109.180.0/22
82.109.185.0/24
82.109.196.0/24
82.109.199.0/24
82.109.236.0/22
82.109.242.0/24
82.110.50.0/24
82.110.53.0/24
82.110.98.0/24
82.110.228.0/24
87.82.194.0/24
87.82.232.0/24
87.82.246.0/24
87.82.252.0/24
87.83.15.0/24
87.83.20.0/22
87.83.67.0/24
87.83.71.0/24
87.83.113.0-87.83.114.255
87.83.125.0/24
87.83.161.0/24
87.83.163.0-87.83.164.255
87.83.204.0/24
87.83.216.0/23
87.83.219.0/24
87.83.222.0/24
87.84.56.0-87.84.58.255
87.84.61.0-87.84.63.255
87.84.203.0/24
87.84.206.0/23
87.84.209.0-87.84.212.255
87.84.214.0/23
87.85.129.0/24
87.85.133.0/24
87.85.224.0/24
87.85.226.0/24
87.85.248.0/24
87.85.250.0/24
87.86.91.0/24
87.86.93.0-87.86.94.255
87.86.182.0/24
109.204.104.0/21
194.242.132.0/24
194.242.157.0/24
212.134.38.0/24
212.134.116.0/22
212.134.158.0/24
212.135.159.0/24
212.135.161.0/24
212.135.164.0/24
212.212.25.0/24
217.79.96.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a3:cc:60:35:9f:bd:d4:c8:7c:53:38:d4:86:40:09:0b:f6:
6c:e2:74:b9:b4:7a:4c:b3:8b:95:a2:f2:49:68:1c:5f:dd:5c:
f1:39:5b:8e:de:ef:1d:5e:c2:16:3a:a6:54:52:d2:93:c7:97:
2f:38:55:3e:cd:45:5b:cd:52:7e:42:86:6b:0c:a8:6c:b3:0e:
c3:7f:b7:62:00:38:0a:54:d7:2d:1b:aa:7b:7f:01:fd:98:05:
d4:09:fc:bd:19:90:f0:03:35:69:e4:82:9c:58:64:7b:94:53:
42:8b:91:c2:70:53:f2:fb:26:5c:5d:65:c8:67:5a:1a:d4:fc:
43:d5:75:8d:32:fa:c5:58:2e:be:2c:76:12:25:06:d5:da:29:
4f:83:cf:38:0f:6f:19:fe:06:4f:4d:cd:55:2b:b2:77:88:f8:
ea:05:a5:4b:54:71:8e:23:81:f8:39:26:d9:fb:7a:40:fa:4b:
86:b1:bb:e6:f2:07:a2:a4:be:97:68:fd:be:58:5f:a3:e9:36:
44:1c:95:58:58:22:f0:38:e5:25:06:24:c6:c1:36:e7:d7:b4:
0a:ff:32:68:f7:3f:f3:c7:45:9a:d6:fd:f5:5a:0b:ac:ae:dd:
8c:c9:62:f6:ad:69:64:30:25:42:ce:c6:80:b8:1a:c1:e0:fe:
d0:f9:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:46 2026 by rpki-client