Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/pJx1GRs62yt6_3e4TmI4txPi4kw.roa
File: pJx1GRs62yt6_3e4TmI4txPi4kw.roa (raw, json)
Hash identifier: W57qaGE0NC8R23WAWtoj/xP56AhTMywlg9xsMzbDvWs=
Subject key identifier: A4:9C:75:19:1B:3A:DB:2B:7A:FF:77:B8:4E:62:38:B7:13:E2:E2:4C
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019FA2C39486C3890992CB48B64CBD72FC6A
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/pJx1GRs62yt6_3e4TmI4txPi4kw.roa
Signing time: Mon 27 Jul 2026 08:49:14 +0000
ROA not before: Mon 27 Jul 2026 08:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 147.136.77.0/24 maxlen: 24
147.136.85.0/24 maxlen: 24
168.199.145.0/24 maxlen: 24
168.199.166.0/24 maxlen: 24
168.199.209.0/24 maxlen: 24
168.199.218.0/24 maxlen: 24
168.199.222.0/24 maxlen: 24
168.199.225.0/24 maxlen: 24
168.199.228.0/24 maxlen: 24
168.199.234.0/24 maxlen: 24
168.199.235.0/24 maxlen: 24
168.199.236.0/24 maxlen: 24
168.199.237.0/24 maxlen: 24
168.199.238.0/24 maxlen: 24
168.199.239.0/24 maxlen: 24
192.95.86.0/24 maxlen: 24
192.95.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:c3:94:86:c3:89:09:92:cb:48:b6:4c:bd:72:fc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 27 08:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a49c75191b3adb2b7aff77b84e6238b713e2e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:26:af:af:86:ca:c6:c9:b1:99:0f:75:db:
9d:e7:07:dd:a8:e7:30:72:f5:4c:e7:c6:fe:bc:34:
48:9b:a4:33:f3:ab:ab:35:49:71:31:5f:9c:cd:ae:
ab:11:64:c0:d1:09:b1:e2:bc:2c:64:0c:4d:03:96:
40:4e:10:6a:8a:f8:c9:55:f7:23:e4:78:17:6c:10:
e4:db:c2:28:37:7a:d9:a7:af:10:bf:84:b9:3b:55:
14:b5:e1:0f:ca:36:45:41:8a:a7:9c:8f:69:fd:b8:
d9:8f:4a:f3:09:7f:e7:9a:98:14:6c:62:f5:86:79:
15:3f:e8:50:4a:34:33:77:ac:b5:70:46:d5:7b:d6:
18:0e:d3:dc:f6:33:40:17:e1:16:ac:74:8e:af:4e:
a7:9f:78:d5:5f:c4:44:d9:d5:0b:3e:0b:2e:25:a3:
61:a2:24:d8:cc:d5:15:40:f9:45:0e:35:2e:e8:a0:
f4:4f:28:c0:e6:bd:73:0f:af:99:7a:05:28:17:c1:
e0:ac:1c:e7:84:46:92:28:f3:ba:0a:38:bb:45:a7:
d2:2f:04:67:a2:9a:ad:dc:49:2f:16:23:55:d8:11:
d9:1d:14:60:ab:eb:a9:36:22:20:2c:dc:d5:ee:aa:
2a:73:da:40:26:41:0d:4c:f6:44:a4:50:5a:69:c4:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:75:19:1B:3A:DB:2B:7A:FF:77:B8:4E:62:38:B7:13:E2:E2:4C
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/pJx1GRs62yt6_3e4TmI4txPi4kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.77.0/24
147.136.85.0/24
168.199.145.0/24
168.199.166.0/24
168.199.209.0/24
168.199.218.0/24
168.199.222.0/24
168.199.225.0/24
168.199.228.0/24
168.199.234.0-168.199.239.255
192.95.86.0/24
192.95.91.0/24
Signature Algorithm: sha256WithRSAEncryption
34:06:ac:d5:c9:ad:6c:08:cb:44:24:b9:d5:17:47:7b:2b:4e:
ad:8f:0a:57:78:aa:58:d1:0b:de:09:a5:7d:6c:0c:8e:3f:14:
88:65:71:34:52:a7:17:3b:06:73:41:04:41:8e:28:03:43:89:
30:3d:11:df:f8:20:0b:d4:81:6f:b5:cf:17:d3:ed:04:2d:8a:
d9:8e:55:1e:ac:99:83:35:1b:15:3f:4e:7e:7f:56:38:e3:5c:
f1:8e:2e:e0:a3:b2:6c:74:28:3c:d5:d1:4a:23:ee:0c:dc:48:
93:c3:70:7e:df:8f:3f:c7:6d:ec:8f:f2:ce:0b:ed:59:3e:5b:
0f:49:10:b2:b0:2e:cc:d1:e5:a0:fd:9f:f3:67:f9:a1:24:88:
5c:16:03:d9:e5:24:a1:74:a4:bf:8e:a7:7c:22:0b:c4:8c:12:
32:a0:c1:c8:45:20:a2:49:86:83:da:88:2b:cc:f1:4e:4b:c8:
27:58:ae:d9:6b:f1:d5:f2:98:5b:b3:bc:56:f3:f9:e0:9b:de:
18:ea:66:fb:20:dc:cd:ad:66:b2:71:d6:05:cb:0e:92:6e:5c:
62:a5:63:a1:30:4e:eb:ab:a1:47:76:18:06:b3:03:58:d0:c8:
a9:d0:17:c3:a8:91:f7:26:5d:5b:75:70:4e:3f:f1:b2:40:15:
3b:f0:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:37 2026 by rpki-client