Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JkPCW3hZrgqzBOdEJnW7e2RP1G8.roa
File: JkPCW3hZrgqzBOdEJnW7e2RP1G8.roa (raw, json)
Hash identifier: q2BHsD4zNAIXxXBTi/hz0TC1Y/B9jk8wfXpL9Wx05JU=
Subject key identifier: 26:43:C2:5B:78:59:AE:0A:B3:04:E7:44:26:75:BB:7B:64:4F:D4:6F
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019F89A4EA05224E55332CC9BB1C9BB62171
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JkPCW3hZrgqzBOdEJnW7e2RP1G8.roa
Signing time: Wed 22 Jul 2026 11:45:14 +0000
ROA not before: Wed 22 Jul 2026 11:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31638
IP address blocks: 5.144.184.0/21 maxlen: 24
5.144.184.0/22 maxlen: 22
5.144.188.0/22 maxlen: 22
5.144.188.0/24 maxlen: 24
5.144.190.0/24 maxlen: 24
37.156.96.0/22 maxlen: 23
37.156.96.0/23 maxlen: 23
37.156.98.0/23 maxlen: 23
37.156.148.0/22 maxlen: 24
37.156.148.0/23 maxlen: 23
37.156.150.0/23 maxlen: 23
37.156.168.0/22 maxlen: 24
37.156.168.0/23 maxlen: 23
37.156.170.0/23 maxlen: 23
37.156.208.0/22 maxlen: 24
37.156.208.0/23 maxlen: 23
37.156.210.0/23 maxlen: 23
46.255.80.0/21 maxlen: 24
46.255.80.0/22 maxlen: 22
46.255.80.0/24 maxlen: 24
46.255.83.0/24 maxlen: 24
46.255.84.0/22 maxlen: 22
46.255.85.0/24 maxlen: 24
86.104.6.0/24 maxlen: 24
86.104.229.0/24 maxlen: 24
86.105.8.0/24 maxlen: 24
86.105.179.0/24 maxlen: 24
89.33.232.0/24 maxlen: 24
89.34.6.0/24 maxlen: 24
89.39.92.0/24 maxlen: 24
89.39.224.0/20 maxlen: 21
89.39.224.0/21 maxlen: 21
89.39.232.0/21 maxlen: 21
89.42.230.0/24 maxlen: 24
89.44.206.0/24 maxlen: 24
89.45.24.0/21 maxlen: 24
89.45.24.0/24 maxlen: 24
89.45.25.0/24 maxlen: 24
89.45.26.0/24 maxlen: 24
89.45.27.0/24 maxlen: 24
89.45.95.0/24 maxlen: 24
89.45.216.0/22 maxlen: 23
89.47.32.0/23 maxlen: 24
93.113.89.0/24 maxlen: 24
93.115.170.0/23 maxlen: 24
93.118.37.0/24 maxlen: 24
94.177.18.0/23 maxlen: 23
94.177.151.0/24 maxlen: 24
176.223.164.0/24 maxlen: 24
185.82.168.0/22 maxlen: 23
185.82.168.0/23 maxlen: 23
185.82.169.0/24 maxlen: 24
185.82.170.0/23 maxlen: 23
185.82.170.0/24 maxlen: 24
185.82.171.0/24 maxlen: 24
188.209.80.0/20 maxlen: 24
188.209.80.0/21 maxlen: 21
188.209.80.0/24 maxlen: 24
188.209.81.0/24 maxlen: 24
188.209.82.0/24 maxlen: 24
188.209.83.0/24 maxlen: 24
188.209.86.0/24 maxlen: 24
188.209.87.0/24 maxlen: 24
188.209.88.0/21 maxlen: 21
188.209.88.0/24 maxlen: 24
188.209.89.0/24 maxlen: 24
188.210.239.0/24 maxlen: 24
188.212.153.0/24 maxlen: 24
188.215.44.0/22 maxlen: 24
188.215.45.0/24 maxlen: 24
188.215.65.0/24 maxlen: 24
188.215.247.0/24 maxlen: 24
188.215.248.0/24 maxlen: 24
188.241.4.0/23 maxlen: 24
188.241.190.0/23 maxlen: 24
195.62.160.0/19 maxlen: 20
195.62.160.0/20 maxlen: 20
195.62.176.0/20 maxlen: 20
2a02:20d8::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:a4:ea:05:22:4e:55:33:2c:c9:bb:1c:9b:b6:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Jul 22 11:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2643c25b7859ae0ab304e7442675bb7b644fd46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:37:61:2a:4a:a2:fa:bd:8a:0e:06:53:94:
55:a7:0a:6d:50:50:66:2f:d4:2f:4e:65:69:45:0a:
c6:84:3f:83:93:bb:be:1a:06:87:1b:b7:be:ee:8e:
2d:ea:6e:c4:61:f6:2b:b4:17:bc:45:13:4b:25:6c:
07:46:d5:98:4d:32:a2:bd:28:9a:63:16:0a:ad:8e:
cd:da:f1:00:3a:86:77:ca:36:73:38:04:a6:02:90:
75:60:82:f3:4a:91:34:96:fd:01:cd:70:cd:7e:29:
eb:86:21:f3:3d:a1:f7:81:39:1b:e1:05:17:37:e8:
9b:b3:6d:7a:7e:f9:9d:a5:6f:77:be:8e:8d:78:76:
28:ec:22:d0:c7:43:46:33:18:58:fc:cb:57:5b:f7:
7e:58:83:8f:19:00:3b:b6:b1:65:28:36:c0:45:6a:
c6:d3:69:17:42:d5:2e:92:12:13:04:75:18:11:65:
36:41:0b:95:4a:a0:94:7e:04:2d:a6:8d:e3:a1:41:
08:73:95:40:de:60:47:8c:ef:fe:d5:36:6b:71:ed:
47:ee:71:be:d1:bb:c2:c0:69:cd:66:65:56:e0:d6:
84:c0:f6:6c:10:f2:ad:fc:e8:e2:d4:8b:2e:f5:67:
26:6a:49:39:bd:f7:35:91:86:de:98:dd:21:81:54:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:C2:5B:78:59:AE:0A:B3:04:E7:44:26:75:BB:7B:64:4F:D4:6F
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JkPCW3hZrgqzBOdEJnW7e2RP1G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.184.0/21
37.156.96.0/22
37.156.148.0/22
37.156.168.0/22
37.156.208.0/22
46.255.80.0/21
86.104.6.0/24
86.104.229.0/24
86.105.8.0/24
86.105.179.0/24
89.33.232.0/24
89.34.6.0/24
89.39.92.0/24
89.39.224.0/20
89.42.230.0/24
89.44.206.0/24
89.45.24.0/21
89.45.95.0/24
89.45.216.0/22
89.47.32.0/23
93.113.89.0/24
93.115.170.0/23
93.118.37.0/24
94.177.18.0/23
94.177.151.0/24
176.223.164.0/24
185.82.168.0/22
188.209.80.0/20
188.210.239.0/24
188.212.153.0/24
188.215.44.0/22
188.215.65.0/24
188.215.247.0-188.215.248.255
188.241.4.0/23
188.241.190.0/23
195.62.160.0/19
IPv6:
2a02:20d8::/29
Signature Algorithm: sha256WithRSAEncryption
a6:53:ff:0d:66:ce:f5:92:11:21:ca:07:b6:43:18:24:1b:a4:
44:55:73:2c:2b:fc:2a:35:37:4f:57:ce:31:35:df:5e:4d:03:
d6:43:0d:cb:3f:26:7c:39:4b:41:8d:71:39:d9:78:ac:63:b1:
51:c6:cd:b0:6d:f8:a5:c0:b3:47:a8:ff:1d:33:4b:4d:b2:06:
3d:a2:0c:25:81:98:1e:3f:a8:35:15:cb:ba:49:22:d2:1e:80:
ec:d6:a8:bc:42:57:af:98:ba:bd:8b:15:1f:30:8e:8b:66:ca:
61:d7:78:90:18:c2:65:ea:ad:1f:b9:c4:0a:8f:f5:4c:e7:d5:
f1:5e:18:63:ce:41:9b:08:16:20:66:5f:c4:38:38:c9:4c:1b:
f3:83:5f:93:ad:21:29:d2:2d:07:e7:51:27:b9:13:8b:8b:e1:
10:d8:36:04:0b:c5:9f:cd:57:36:b4:b7:d9:32:31:ef:56:98:
56:13:65:22:f0:28:a1:43:be:56:7d:26:6a:af:80:fd:5e:a1:
a8:e2:0e:2a:84:81:0e:61:84:d0:e2:36:d2:31:be:69:3d:56:
ed:1c:d2:8c:fb:33:55:a2:52:04:71:2f:88:bc:eb:09:a4:cb:
47:d8:83:48:e3:a8:04:62:88:1c:dc:10:1c:19:d9:a0:57:56:
4f:6c:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:35 2026 by rpki-client