Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa
File: jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa (raw, json)
Hash identifier: cNkIwV71ok/w0KC8pKnGuUP130XxoF34h2rE4wB3M+0=
Subject key identifier: 8C:48:CC:BE:54:B4:13:7F:89:6B:16:D9:AE:D4:A1:84:23:CB:08:9F
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019F6B93A7ACA406A5BEF04C36FF09D81027
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa
Signing time: Thu 16 Jul 2026 15:37:46 +0000
ROA not before: Thu 16 Jul 2026 15:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48716
IP address blocks: 46.247.40.0/23 maxlen: 24
77.240.38.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
78.40.108.0/23 maxlen: 24
82.115.40.0/22 maxlen: 24
85.202.194.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.92.0/24 maxlen: 24
91.147.93.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.104.0/22 maxlen: 24
91.201.214.0/23 maxlen: 24
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.139.0/24 maxlen: 32
94.247.128.0/21 maxlen: 24
109.233.108.0/22 maxlen: 32
185.4.180.0/22 maxlen: 24
185.22.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
185.102.72.0/22 maxlen: 24
185.146.0.0/22 maxlen: 24
194.32.140.0/22 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.66.0/24 maxlen: 24
194.39.67.0/24 maxlen: 24
194.110.54.0/23 maxlen: 24
194.110.54.0/24 maxlen: 24
194.110.55.0/24 maxlen: 24
194.238.40.0/23 maxlen: 23
194.238.40.0/24 maxlen: 24
194.238.41.0/24 maxlen: 24
195.49.208.0/21 maxlen: 21
195.49.209.0/24 maxlen: 24
195.49.210.0/23 maxlen: 23
195.49.210.0/24 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/22 maxlen: 22
195.49.212.0/24 maxlen: 24
195.49.213.0/24 maxlen: 24
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.93.152.0/24 maxlen: 24
195.93.153.0/24 maxlen: 24
195.210.46.0/23 maxlen: 24
195.210.46.0/24 maxlen: 24
195.210.47.0/24 maxlen: 24
213.155.20.0/23 maxlen: 23
213.155.20.0/24 maxlen: 24
213.155.21.0/24 maxlen: 24
2a00:5da0::/36 maxlen: 48
2a00:5da0:1000::/36 maxlen: 48
2a00:5da0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:93:a7:ac:a4:06:a5:be:f0:4c:36:ff:09:d8:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jul 16 15:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c48ccbe54b4137f896b16d9aed4a18423cb089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:3b:ba:09:37:e2:28:da:86:72:2b:1d:31:
7f:02:87:ee:bd:a9:64:cf:f0:71:13:6e:7a:02:ef:
6d:31:2e:58:5e:88:29:91:46:6a:7b:5a:e7:e2:7b:
dd:6a:85:1a:60:dc:a6:a1:73:03:29:09:74:8b:cc:
af:12:00:b9:5d:e5:c9:80:47:92:e6:56:eb:41:9e:
cb:75:e6:a4:04:9d:ec:31:d0:29:3e:a6:0b:4e:c8:
80:2e:e7:80:52:81:fb:70:a1:97:f2:ee:af:41:b6:
f9:5b:75:7d:91:30:39:91:ad:35:a8:13:7d:cb:a0:
5b:7a:af:03:ec:44:43:2d:80:2c:86:7e:40:23:a5:
33:dd:08:bc:6c:52:13:2a:53:8c:0f:0b:ee:89:6d:
46:f2:c4:9a:3d:07:61:88:71:ee:38:45:d3:af:48:
8e:da:e0:94:52:69:a8:f2:04:5e:68:a1:f8:2f:ee:
a1:52:1c:43:a2:45:8b:cc:a2:d6:db:ee:03:c7:21:
78:17:32:3b:df:61:c9:35:b6:37:5a:2a:8d:7c:48:
82:bb:13:d6:89:db:04:e9:82:14:6e:45:16:aa:d0:
dc:e1:db:16:e0:9f:29:f3:55:a8:63:2f:76:a6:1d:
98:38:5c:29:06:0c:61:97:83:af:d0:0d:21:4a:d5:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:CC:BE:54:B4:13:7F:89:6B:16:D9:AE:D4:A1:84:23:CB:08:9F
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.40.0/23
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
82.115.40.0/22
85.202.194.0/23
89.219.32.0/22
91.147.92.0/22
91.147.104.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.32.140.0/22
194.39.64.0/22
194.110.54.0/23
194.238.40.0/23
195.49.208.0/21
195.93.152.0/23
195.210.46.0/23
213.155.20.0/23
IPv6:
2a00:5da0::/35
Signature Algorithm: sha256WithRSAEncryption
65:79:d0:e6:b0:c7:01:f9:a6:c6:3b:25:43:f7:63:76:11:64:
de:13:4b:7e:64:a9:fd:09:d0:2f:a3:2f:52:55:db:bf:dc:ef:
40:66:33:b1:65:73:65:fc:65:72:a9:ca:ab:a5:d5:66:e1:1c:
1b:67:ce:9f:17:7e:32:ce:63:10:17:49:7a:25:3c:0f:d8:ab:
56:78:94:fe:b7:1b:5a:74:1a:2e:d3:78:51:f8:a5:99:ac:e3:
eb:5e:20:0b:c2:78:a3:e0:30:b3:7b:5a:06:97:ef:4f:e3:90:
81:54:f6:44:f7:06:a3:25:0b:0b:f6:62:97:c6:70:d2:7c:aa:
08:dc:70:0b:d2:fd:b5:d4:8e:d1:88:4e:f6:c4:c8:d7:41:59:
0c:d2:c2:07:dc:a0:87:01:e0:35:44:04:18:e6:7a:bd:9b:26:
c4:ae:04:d1:34:08:66:17:b6:37:e8:8c:21:1b:e7:ba:30:0e:
0d:8f:5a:1f:ba:83:9e:f4:b4:77:52:08:09:bb:d9:68:d2:7f:
bd:11:23:5c:f9:99:a6:b5:65:e4:eb:60:51:85:62:fe:d2:23:
a9:2c:4d:b6:10:9a:32:3b:28:34:52:61:92:b5:e2:d8:55:07:
f9:a6:61:59:e6:65:ac:6c:fc:9e:eb:9e:8b:56:b5:fd:ac:38:
d2:39:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:44 2026 by rpki-client