Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/JhUMKiYCn9eUbg_7DmY6uovoHoc.roa
File: JhUMKiYCn9eUbg_7DmY6uovoHoc.roa (raw, json)
Hash identifier: /VG5t/ryLvfnmkQXWQxGTz3xvzzUl1+taEQKWl5+rjA=
Subject key identifier: 26:15:0C:2A:26:02:9F:D7:94:6E:0F:FB:0E:66:3A:BA:8B:E8:1E:87
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019C904D3DB5560FD4F1DE054B36DCBB9380
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/JhUMKiYCn9eUbg_7DmY6uovoHoc.roa
Signing time: Tue 24 Feb 2026 15:38:26 +0000
ROA not before: Tue 24 Feb 2026 15:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21305
IP address blocks: 79.98.48.0/22 maxlen: 22
79.98.48.0/24 maxlen: 24
79.98.49.0/24 maxlen: 24
79.98.50.0/24 maxlen: 24
79.98.51.0/24 maxlen: 24
79.98.53.0/24 maxlen: 24
80.94.224.0/20 maxlen: 20
80.94.224.0/24 maxlen: 24
80.94.225.0/24 maxlen: 24
80.94.226.0/24 maxlen: 24
80.94.227.0/24 maxlen: 24
80.94.228.0/24 maxlen: 24
80.94.229.0/24 maxlen: 24
80.94.230.0/24 maxlen: 24
80.94.231.0/24 maxlen: 24
80.94.232.0/24 maxlen: 24
80.94.233.0/24 maxlen: 24
80.94.234.0/24 maxlen: 24
80.94.235.0/24 maxlen: 24
80.94.236.0/24 maxlen: 24
80.94.237.0/24 maxlen: 24
80.94.238.0/24 maxlen: 24
80.94.239.0/24 maxlen: 24
95.128.64.0/23 maxlen: 23
95.128.64.0/24 maxlen: 24
95.128.65.0/24 maxlen: 24
95.128.67.0/24 maxlen: 24
95.128.68.0/24 maxlen: 24
95.128.69.0/24 maxlen: 24
95.128.70.0/24 maxlen: 24
2a04:9b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:4d:3d:b5:56:0f:d4:f1:de:05:4b:36:dc:bb:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Feb 24 15:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26150c2a26029fd7946e0ffb0e663aba8be81e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:d2:07:e3:90:ac:d1:1b:bc:02:d6:64:86:
90:85:40:9c:d1:be:09:5c:14:ff:9b:1f:25:32:37:
f6:15:46:ee:65:b6:13:31:83:20:83:3f:20:84:f0:
24:a0:7f:86:f3:98:36:0a:bf:d9:ff:51:32:49:44:
5d:22:cb:c3:04:3a:9b:92:10:59:a6:e0:78:d1:be:
34:c2:a6:4d:e5:37:57:2f:33:13:a3:71:3f:50:4b:
44:2d:2a:4f:66:1a:dd:ba:23:71:91:6e:ff:da:ed:
a8:87:db:f0:b8:b8:2d:7e:f2:d6:04:2f:3c:3c:5c:
d4:ca:32:f5:79:3d:d4:ad:ba:83:91:86:d4:ac:de:
a8:c2:7e:40:24:0e:f8:bb:2a:99:c4:66:17:26:d8:
0b:c1:fd:c6:13:74:01:25:6b:3b:e0:6b:11:15:13:
7d:5b:9d:ae:c1:11:bb:48:8f:e1:f9:40:a1:be:b1:
d1:ce:fc:df:35:e8:a2:19:7d:e3:36:b9:d4:e6:10:
4e:a7:e9:ae:96:0b:14:6e:9c:46:00:62:a3:04:44:
1e:e9:ae:43:02:b9:7a:81:f5:5f:1a:0b:12:29:73:
74:b3:d8:36:44:7a:cc:cf:d5:68:d0:4c:43:e0:13:
72:2f:37:36:71:51:eb:ed:05:d5:3b:01:64:83:13:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:0C:2A:26:02:9F:D7:94:6E:0F:FB:0E:66:3A:BA:8B:E8:1E:87
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/JhUMKiYCn9eUbg_7DmY6uovoHoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.48.0/22
79.98.53.0/24
80.94.224.0/20
95.128.64.0/23
95.128.67.0-95.128.70.255
IPv6:
2a04:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
06:36:aa:48:6d:f9:e8:04:cb:08:1b:29:91:de:9e:86:a3:8a:
10:77:2a:5d:19:7a:41:16:8e:61:73:16:d0:10:17:ff:8e:67:
38:21:3a:70:4f:fa:65:ac:a0:da:08:81:78:e4:4b:38:54:4d:
6b:62:36:3d:20:09:18:81:63:08:6f:7a:7e:ba:a9:3e:44:b3:
56:e9:c0:c0:ed:cc:c0:b0:3e:3c:10:fc:6d:bc:61:86:48:14:
19:7e:68:e1:be:74:55:93:12:be:2e:8a:78:0a:25:d2:68:44:
25:93:72:49:eb:3a:72:7a:46:f7:90:18:a0:a9:ed:f2:9c:78:
db:9e:af:09:42:21:70:90:72:63:da:2d:7e:d4:ca:09:3f:02:
db:11:82:af:9b:82:0c:56:8d:c0:f4:fa:8c:b8:cd:e5:b2:50:
b4:e4:27:71:1e:d6:6f:41:da:a4:a6:a5:18:b0:a3:34:29:d9:
ef:a3:93:d5:9f:42:e5:a6:74:0a:98:2d:ce:0e:f2:e5:8a:9c:
34:c5:57:1e:f0:bc:03:5a:df:cc:71:71:89:c8:a9:dc:68:23:
4c:fd:0f:6e:dd:0e:5c:ec:05:a4:6c:01:36:64:84:e5:9a:7b:
08:16:00:88:b5:de:81:a6:c0:a4:a5:ed:4b:cd:93:ff:3a:85:
71:e6:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:51 2026 by rpki-client