Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/JDo3Dh0tpt2WY936ANlUtYGWoM0.roa
File: JDo3Dh0tpt2WY936ANlUtYGWoM0.roa (raw, json)
Hash identifier: WvNxcMUuMNQVZtG0J9Fei7h17wqCMKoS9L4tiVuv4NU=
Subject key identifier: 24:3A:37:0E:1D:2D:A6:DD:96:63:DD:FA:00:D9:54:B5:81:96:A0:CD
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019EB0AE933E2CD8A7F2E657B7BE2F6690A9
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/JDo3Dh0tpt2WY936ANlUtYGWoM0.roa
Signing time: Wed 10 Jun 2026 08:38:11 +0000
ROA not before: Wed 10 Jun 2026 08:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
45.66.36.0/22 maxlen: 22
45.80.160.0/22 maxlen: 22
45.130.56.0/22 maxlen: 22
45.143.112.0/22 maxlen: 22
45.152.28.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.216.0/22 maxlen: 22
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.240.0/23 maxlen: 24
137.44.112.0/21 maxlen: 21
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
150.251.120.0/22 maxlen: 22
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
188.214.236.0/22 maxlen: 22
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
194.169.152.0/22 maxlen: 22
195.72.56.0/22 maxlen: 22
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
195.242.148.0/23 maxlen: 23
195.244.2.0/23 maxlen: 23
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
217.171.100.0/22 maxlen: 22
217.171.104.0/22 maxlen: 22
2a07:5940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:ae:93:3e:2c:d8:a7:f2:e6:57:b7:be:2f:66:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jun 10 08:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=243a370e1d2da6dd9663ddfa00d954b58196a0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:8b:f2:63:e9:f8:23:f2:d2:5f:2e:d0:50:
ce:08:7c:cb:32:c5:25:3b:2f:e1:b5:33:20:cb:03:
fb:1f:9d:de:2d:02:8b:2b:5b:ca:36:a0:ed:28:43:
6a:b7:6a:67:e8:d0:d1:cd:e9:6a:36:68:75:91:0b:
1f:11:04:c1:91:5f:b8:00:50:74:90:29:83:12:8e:
fc:a1:7f:f6:1b:cc:04:f3:21:a2:5d:e0:87:f8:94:
e1:2e:86:af:7b:50:e9:76:ab:18:3e:23:81:bb:75:
7b:5d:04:66:40:24:f6:52:7e:66:48:1d:1d:1e:5c:
d3:0e:c4:7e:b6:69:2a:93:e1:b1:90:33:3c:fd:e6:
15:30:57:9a:21:7a:13:6a:3d:16:32:f0:6c:b1:2f:
4a:41:9b:25:20:bc:0d:17:fc:ca:94:ab:49:41:d7:
7d:7b:d5:e4:33:a4:a3:b8:51:21:b2:72:8e:8d:b2:
1a:8f:7e:e5:bd:1d:23:73:55:ec:a8:1f:1e:d1:8e:
23:fd:fc:a3:b9:8c:24:d8:4d:8c:eb:1d:62:e3:35:
a0:a5:a7:0b:e0:eb:d1:34:ef:49:ab:d2:e5:6c:64:
0f:7d:18:73:d5:55:4d:a9:b9:9c:13:ed:12:5f:b6:
42:3a:d3:77:fb:f0:86:46:6f:ec:d5:54:4b:c5:68:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:37:0E:1D:2D:A6:DD:96:63:DD:FA:00:D9:54:B5:81:96:A0:CD
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/JDo3Dh0tpt2WY936ANlUtYGWoM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
45.66.36.0/22
45.80.160.0/22
45.130.56.0/22
45.143.112.0/22
45.152.28.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.216.0/22
109.224.224.0/22
109.224.234.0-109.224.241.255
137.44.112.0/21
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
150.251.120.0/22
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
188.214.236.0/22
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
194.169.152.0/22
195.72.56.0/22
195.184.250.0/23
195.206.172.0/22
195.242.148.0/23
195.244.2.0/23
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
217.171.100.0-217.171.107.255
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d2:0e:36:3c:ee:ad:56:b2:07:88:15:1b:3d:87:3d:57:ce:
d5:45:23:ef:06:b8:9a:c5:75:e6:05:ad:92:97:2a:c4:8f:ab:
28:c3:7b:70:a6:62:8b:52:34:0a:d2:65:8e:e2:c2:e9:05:a1:
38:14:92:2e:8b:6e:b5:ce:58:48:e2:a6:7b:b1:50:16:93:f4:
ef:71:cc:fb:14:ea:dd:cb:d0:d5:66:43:05:f9:5e:b5:c8:db:
97:f8:53:ab:e2:1f:76:99:d4:b5:86:ea:27:f9:69:21:bf:88:
a3:ab:66:bc:26:70:b9:db:34:36:64:33:22:68:c3:68:f5:24:
c1:df:38:92:19:93:c1:5b:41:5d:81:48:d5:32:3e:aa:30:99:
91:6d:37:31:7b:5c:c5:67:5b:fb:f4:af:7e:20:b0:fe:64:01:
d0:5a:96:d5:9c:e3:a0:4f:d9:99:10:d3:d1:4e:f9:ff:4c:12:
0f:a2:ea:8f:7d:d1:a5:2c:05:6a:38:b9:f7:18:09:f4:ae:f3:
ce:3f:5f:37:0c:e0:43:78:65:41:39:22:b0:ca:62:a8:69:8a:
e3:1b:c9:9d:3b:61:21:7e:e8:e9:13:21:80:01:d2:03:b0:26:
44:15:33:64:a2:94:d2:7f:50:22:c2:14:c8:16:c7:49:8b:02:
9c:21:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:56 2026 by rpki-client