Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Jx_7mgaTZWW_r1Zixq-XgagXBZE.roa
File: Jx_7mgaTZWW_r1Zixq-XgagXBZE.roa (raw, json)
Hash identifier: SA3+YqEI+bvIhtF6pXbJQHfoDXTyXpeqLkUySOw5IU0=
Subject key identifier: 27:1F:FB:9A:06:93:65:65:BF:AF:56:62:C6:AF:97:81:A8:17:05:91
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019FA89D62894DCA40667ACCB99BEA982F76
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Jx_7mgaTZWW_r1Zixq-XgagXBZE.roa
Signing time: Tue 28 Jul 2026 12:05:14 +0000
ROA not before: Tue 28 Jul 2026 12:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 45.92.172.0/24 maxlen: 24
45.135.177.0/24 maxlen: 24
45.138.144.0/24 maxlen: 24
45.138.147.0/24 maxlen: 24
45.140.60.0/24 maxlen: 24
45.140.62.0/24 maxlen: 24
45.140.63.0/24 maxlen: 24
45.142.72.0/24 maxlen: 24
45.142.73.0/24 maxlen: 24
45.142.74.0/24 maxlen: 24
45.142.75.0/24 maxlen: 24
45.143.142.0/24 maxlen: 24
45.147.252.0/24 maxlen: 24
45.152.212.0/24 maxlen: 24
45.152.213.0/24 maxlen: 24
45.152.214.0/24 maxlen: 24
45.152.215.0/24 maxlen: 24
45.156.148.0/24 maxlen: 24
45.156.151.0/24 maxlen: 24
45.158.45.0/24 maxlen: 24
87.247.141.0/24 maxlen: 24
91.188.228.0/24 maxlen: 24
91.188.229.0/24 maxlen: 24
91.188.230.0/24 maxlen: 24
91.188.231.0/24 maxlen: 24
91.213.35.0/24 maxlen: 24
91.220.206.0/24 maxlen: 24
91.220.229.0/24 maxlen: 24
193.8.171.0/24 maxlen: 24
194.156.0.0/24 maxlen: 24
194.156.27.0/24 maxlen: 24
213.226.102.0/24 maxlen: 24
213.226.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9d:62:89:4d:ca:40:66:7a:cc:b9:9b:ea:98:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 28 12:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=271ffb9a06936565bfaf5662c6af9781a8170591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:12:ce:61:70:a8:d9:45:de:7a:b9:aa:a1:
68:63:c4:f5:34:f5:bc:28:08:37:be:48:7c:7e:da:
04:b6:94:39:64:bc:79:60:1e:f6:72:44:e5:ad:cd:
8b:6e:b2:b5:ab:73:ae:e8:07:ca:7b:c7:71:e1:8f:
a1:71:92:83:e7:cd:90:6d:71:a8:a0:8d:56:42:5e:
09:a3:74:36:c0:e2:bb:24:76:fa:6e:af:2b:61:de:
54:e3:e3:b0:77:22:8c:3b:dc:39:71:ad:6b:1e:20:
16:96:c9:20:b9:90:ae:33:42:a5:f7:0d:4b:ad:f4:
5d:1f:df:db:51:13:70:5f:71:31:05:e8:4b:9a:09:
ed:34:c0:70:6e:74:b8:69:e4:41:2e:51:e2:f8:dc:
97:b8:8a:3c:67:9c:27:88:0f:5f:9f:e4:8d:cc:19:
50:55:84:7d:00:a2:9a:2d:78:ba:e6:95:e7:1b:4e:
a5:bd:9d:59:e3:41:77:c5:44:da:d1:c8:ee:ca:59:
c4:b6:fc:e8:4b:76:86:99:ae:13:ed:c9:d6:cf:8a:
a1:6b:e1:d7:64:18:38:04:fe:45:c7:50:f8:9c:66:
53:c9:80:f5:6c:e6:48:a8:5b:6a:7a:54:5b:13:9e:
78:f9:08:98:ae:d2:02:13:dc:5a:5c:c6:5f:2b:b9:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:FB:9A:06:93:65:65:BF:AF:56:62:C6:AF:97:81:A8:17:05:91
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Jx_7mgaTZWW_r1Zixq-XgagXBZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.172.0/24
45.135.177.0/24
45.138.144.0/24
45.138.147.0/24
45.140.60.0/24
45.140.62.0/23
45.142.72.0/22
45.143.142.0/24
45.147.252.0/24
45.152.212.0/22
45.156.148.0/24
45.156.151.0/24
45.158.45.0/24
87.247.141.0/24
91.188.228.0/22
91.213.35.0/24
91.220.206.0/24
91.220.229.0/24
193.8.171.0/24
194.156.0.0/24
194.156.27.0/24
213.226.102.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:00:ac:3c:95:a0:87:3b:66:fe:b1:05:02:d3:9d:6d:17:c5:
6e:d8:0b:ad:ff:70:fc:85:22:19:ce:b6:04:ff:fc:05:71:47:
d0:c9:bd:74:fe:e4:3e:bb:6e:f2:3d:74:bd:0a:b1:02:f5:32:
87:b6:19:a1:25:37:dc:37:88:21:99:03:7d:16:33:da:08:2d:
fb:b6:17:7c:89:e5:65:b9:5a:cb:f5:11:1a:c1:94:62:d4:e6:
42:48:42:34:d9:0d:e6:25:d6:21:6f:ce:ba:7a:85:f2:b0:a5:
7f:47:75:83:29:ed:4f:48:a6:06:1b:22:84:b3:fc:c8:cc:88:
7c:68:51:ac:bc:87:00:3a:78:bd:a1:39:c3:56:fd:f4:96:c4:
42:42:cf:43:a1:bf:a4:d9:b7:f2:ed:6f:b5:a6:03:35:fb:63:
41:19:09:29:43:01:ba:31:ea:2d:37:73:89:c4:3b:9d:e2:a5:
96:4b:e9:66:8a:ee:20:5e:32:d1:00:73:de:77:81:4e:a6:f1:
e6:e1:5a:83:e0:19:d1:85:f9:a9:9b:f5:42:bd:d9:3e:d9:0f:
32:cb:ff:aa:23:78:1c:41:19:92:9e:cb:8c:a2:bc:e9:c4:21:
67:63:3b:16:35:da:31:8f:ae:87:16:57:42:15:d7:26:6a:3f:
0b:16:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:55 2026 by rpki-client