Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JaJ9NDH2jmDjv9eAD12a9fBmU2A.roa
File: JaJ9NDH2jmDjv9eAD12a9fBmU2A.roa (raw, json)
Hash identifier: jNkFH3RgeQL5lohNVlgh3zj6pIAxRw7WSi+C1JGfrP8=
Subject key identifier: 25:A2:7D:34:31:F6:8E:60:E3:BF:D7:80:0F:5D:9A:F5:F0:66:53:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C8BE7261768EEE38F93E417E181398471
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JaJ9NDH2jmDjv9eAD12a9fBmU2A.roa
Signing time: Mon 23 Feb 2026 19:08:27 +0000
ROA not before: Mon 23 Feb 2026 19:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:e7:26:17:68:ee:e3:8f:93:e4:17:e1:81:39:84:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 19:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25a27d3431f68e60e3bfd7800f5d9af5f0665360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:79:17:af:80:93:5c:9a:91:18:79:1b:f7:
9e:18:c4:ce:c3:40:9d:3a:aa:be:5d:59:27:93:cc:
0b:4b:77:b6:cc:17:48:f9:91:8d:05:ca:4e:7a:ad:
83:29:71:c9:38:13:ff:ce:a4:9c:9d:d3:3f:6b:b5:
57:60:28:d2:77:2f:a2:ca:43:ec:43:df:37:f8:54:
bf:16:11:2f:eb:e0:e2:9a:ba:72:1e:da:4c:97:9d:
cf:ed:6c:59:93:7a:ca:24:b4:27:0f:47:80:9f:6f:
38:60:a7:16:73:59:49:68:b2:6d:dd:4e:85:4e:b7:
26:db:36:db:81:2d:34:7a:4a:ff:0a:57:7d:a9:db:
1c:40:b8:db:23:08:62:9e:d6:13:44:0c:bb:bf:cd:
70:9b:52:24:42:a7:13:0c:a5:7a:d9:5a:a6:9e:76:
c4:a8:cd:07:24:71:da:9d:d9:e4:84:f5:09:b5:df:
79:48:a8:2e:18:ca:47:3f:98:ff:b4:87:6e:ac:31:
da:e5:48:c2:6c:e3:50:ee:1d:be:46:a3:5d:95:b5:
ae:a0:28:8e:1d:df:46:ed:43:a0:52:3b:c3:80:e1:
06:91:de:d5:5a:dd:f4:d6:7b:3e:ce:82:29:67:e6:
b2:70:1f:fa:b1:a7:d5:64:76:06:74:fa:9b:10:65:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:7D:34:31:F6:8E:60:E3:BF:D7:80:0F:5D:9A:F5:F0:66:53:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JaJ9NDH2jmDjv9eAD12a9fBmU2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.131.212.0/24
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.146.131.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
45.158.185.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.242.245.0/24
193.8.215.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
20:1d:e9:19:47:12:a9:be:c2:27:0d:b2:e4:73:6e:a2:9d:4f:
d7:cb:c7:19:82:f0:12:cd:1a:c2:a9:b1:50:32:f4:35:39:c8:
c9:cd:59:47:cc:d9:e5:23:6e:7f:93:4e:94:ce:80:65:d1:e6:
e2:b4:5d:dd:e6:d3:28:6a:db:c6:61:ec:ca:5a:42:ca:35:70:
17:f7:19:0a:91:6d:47:dc:b1:06:6e:1b:ac:7d:22:59:b6:51:
52:de:f9:76:1d:8c:c7:00:0c:9d:82:82:03:ac:9c:35:17:dc:
c9:4e:dc:02:02:21:3e:91:1c:0e:7a:1f:82:f8:4d:69:0e:e7:
39:41:50:3d:6d:f0:e3:76:68:e6:e8:9f:2b:36:de:f6:a1:76:
4f:9e:34:7b:e5:11:d4:81:50:c5:9e:eb:d6:3b:e9:35:c4:7c:
d8:59:a2:51:e7:3c:92:80:8a:a0:4c:1f:7a:86:9d:a5:2e:b2:
d3:d1:93:43:da:6c:55:c3:3c:0b:88:ec:43:54:46:fa:d0:7b:
68:64:90:fc:d7:6a:72:b1:71:07:63:80:8f:9a:17:3d:48:b0:
fd:d1:47:ba:98:2f:6c:7d:56:2a:07:95:47:69:04:2c:77:28:
5a:bc:53:23:1e:07:c4:e9:4d:2c:b1:56:8d:44:d4:23:54:08:
64:32:93:5d
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZyL5yYXaO7jj5PkF+GBOYRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMjIzMTkwODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWEyN2QzNDMxZjY4ZTYwZTNiZmQ3ODAwZjVkOWFmNWYwNjY1MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKB5F6+Ak1yakRh5G/eeGMTOw0Cd
Oqq+XVknk8wLS3e2zBdI+ZGNBcpOeq2DKXHJOBP/zqScndM/a7VXYCjSdy+iykPs
Q983+FS/FhEv6+DimrpyHtpMl53P7WxZk3rKJLQnD0eAn284YKcWc1lJaLJt3U6F
Trcm2zbbgS00ekr/Cld9qdscQLjbIwhintYTRAy7v81wm1IkQqcTDKV62VqmnnbE
qM0HJHHandnkhPUJtd95SKguGMpHP5j/tIdurDHa5UjCbONQ7h2+RqNdlbWuoCiO
Hd9G7UOgUjvDgOEGkd7VWt301ns+zoIpZ+aycB/6safVZHYGdPqbEGUZdwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFCWifTQx9o5g47/XgA9dmvXwZlNgMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSmFKOU5ESDJqbURqdjllQUQxMmE5ZkJtVTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBiwQCAAEwgYQDBAAt
CXUDBAAtX2ADBAAtdvgDBAAtgjwDBAAtg9QDBAAtg9cDBAAthycDBAAtiVEDBAAt
jA0DBAAtjbEDBAAtkoMDBAAtmNADBAAtmRYDBAAtm0UDBAAtnrkDBABV0YADBABn
cisDBABxHpoDBAC5eqsDBAC5fkADBAC58vUDBADBCNcwGAQCAAIwEgMHACoMeIYB
BQMHACoP58YQADANBgkqhkiG9w0BAQsFAAOCAQEAIB3pGUcSqb7CJw2y5HNuop1P
18vHGYLwEs0awqmxUDL0NTnIyc1ZR8zZ5SNuf5NOlM6AZdHm4rRd3ebTKGrbxmHs
ylpCyjVwF/cZCpFtR9yxBm4brH0iWbZRUt75dh2MxwAMnYKCA6ycNRfcyU7cAgIh
PpEcDnofgvhNaQ7nOUFQPW3w43Zo5uifKzbe9qF2T540e+UR1IFQxZ7r1jvpNcR8
2FmiUec8koCKoEwfeoadpS6y09GTQ9psVcM8C4jsQ1RG+tB7aGSQ/NdqcrFxB2OA
j5oXPUiw/dFHupgvbH1WKgeVR2kELHcoWrxTIx4HxOlNLLFWjUTUI1QIZDKTXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:44 2026 by rpki-client