Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/jbJBliYDM3UvIaJHtKsVlQyW3bE.roa
File: jbJBliYDM3UvIaJHtKsVlQyW3bE.roa (raw, json)
Hash identifier: EtjBJER2ebVjlQ5H+B13YfK3a+i1J8TjPonfmC+1FGw=
Subject key identifier: 8D:B2:41:96:26:03:33:75:2F:21:A2:47:B4:AB:15:95:0C:96:DD:B1
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019E079AA9F30F5634D4B9F461FF8420F4AF
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/jbJBliYDM3UvIaJHtKsVlQyW3bE.roa
Signing time: Fri 08 May 2026 12:40:37 +0000
ROA not before: Fri 08 May 2026 12:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.59.219.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
46.16.34.0/24 maxlen: 24
78.40.116.0/24 maxlen: 24
78.40.117.0/24 maxlen: 24
81.177.212.0/24 maxlen: 24
81.177.213.0/24 maxlen: 24
93.157.106.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
176.125.240.0/24 maxlen: 24
176.125.241.0/24 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
185.103.164.0/24 maxlen: 24
185.139.214.0/24 maxlen: 24
185.139.215.0/24 maxlen: 24
185.212.117.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:9a:a9:f3:0f:56:34:d4:b9:f4:61:ff:84:20:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: May 8 12:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db24196260333752f21a247b4ab15950c96ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:bf:ba:81:16:a0:b3:72:04:4a:80:28:9b:
8a:c0:4a:26:e0:e4:5e:7e:53:c3:9a:f8:5c:0e:59:
ab:7d:91:fb:ce:a6:91:0b:48:7b:82:97:78:c6:06:
e0:e9:a4:f9:39:dc:9b:ff:a2:c4:e1:71:40:66:ca:
cd:19:a2:6f:0e:db:04:d4:5e:20:e1:81:b9:05:fb:
04:e1:58:3f:79:79:b3:24:6e:4b:c9:44:a0:e4:3b:
46:2d:67:8f:a5:63:6b:61:b2:84:1b:8f:dd:56:79:
5e:77:7f:9b:36:6d:da:06:8b:3d:40:7f:6c:d2:23:
7f:bd:9e:14:6b:4e:9c:b1:f9:5b:33:17:f5:f8:7f:
9a:d4:b7:ed:3d:55:14:2e:6c:96:63:04:df:f6:07:
03:8e:7a:51:b7:77:47:d5:12:d2:69:36:8b:8a:16:
85:6e:12:18:e8:35:9b:93:7a:c6:c6:08:22:de:09:
4f:25:06:0e:88:9c:fc:f6:80:c2:bb:eb:d9:67:1e:
4a:85:ec:15:f5:65:22:be:46:3f:28:c5:c2:ad:ff:
be:da:94:d8:a2:b8:cc:c1:30:b0:be:ee:d6:77:d6:
07:aa:ea:1b:2d:69:38:14:6c:82:16:63:c1:b7:16:
73:b1:da:97:f4:f8:a0:72:bf:e5:6c:c2:60:24:cd:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:41:96:26:03:33:75:2F:21:A2:47:B4:AB:15:95:0C:96:DD:B1
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/jbJBliYDM3UvIaJHtKsVlQyW3bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.219.0/24
45.93.8.0/23
45.148.244.0/24
46.16.34.0/24
78.40.116.0/23
81.177.212.0/23
93.157.106.0/24
93.185.167.0/24
94.103.188.0/24
94.231.223.0/24
171.22.181.0/24
176.116.0.0/24
176.125.240.0/22
185.103.164.0/24
185.139.214.0/23
185.212.117.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
98:87:a0:c1:6d:54:cd:63:a3:10:e9:68:7c:31:ab:cb:4c:ab:
4e:71:73:bc:b4:af:4c:34:d4:eb:31:28:e0:37:5b:f0:03:12:
31:38:90:cb:5d:32:3d:eb:d4:f0:98:95:fd:48:4d:32:8a:c0:
86:e5:3f:a8:39:45:a9:7c:d5:dc:e2:5e:d0:4b:25:44:7c:16:
16:ab:ea:bc:76:6c:1f:70:a1:a1:85:9c:39:f2:0f:84:70:16:
0c:7d:be:46:7a:8d:93:e4:8c:12:8a:a8:54:41:ca:79:c6:93:
36:ec:4f:1a:ef:99:43:74:7c:27:c0:22:ed:cb:ea:1c:60:cd:
41:8d:5e:58:0a:9f:95:54:b6:6b:c7:16:b9:39:11:b1:a5:19:
96:c4:cd:b5:16:6e:f2:a4:86:73:d3:96:59:2c:35:b4:81:c0:
4e:ca:9e:71:9e:b3:ee:e6:0b:81:d8:79:57:5b:70:18:01:28:
49:ea:92:a2:17:10:32:dc:24:a6:b6:cf:b6:af:46:a8:06:8d:
f1:ce:62:9a:f9:0c:5d:65:59:62:99:25:ef:8b:ec:da:80:53:
cd:29:6e:96:8f:17:a1:07:6e:07:b2:42:bc:e6:d3:bf:c8:1e:
99:6b:45:20:73:41:62:8d:b3:b6:fe:f1:f2:e8:85:8e:b4:9e:
de:ef:6f:d7
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZ4HmqnzD1Y01Ln0Yf+EIPSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjYwNTA4MTI0MDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGIyNDE5NjI2MDMzMzc1MmYyMWEyNDdiNGFiMTU5NTBjOTZkZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA262/uoEWoLNyBEqAKJuKwEom4ORe
flPDmvhcDlmrfZH7zqaRC0h7gpd4xgbg6aT5Odyb/6LE4XFAZsrNGaJvDtsE1F4g
4YG5BfsE4Vg/eXmzJG5LyUSg5DtGLWePpWNrYbKEG4/dVnled3+bNm3aBos9QH9s
0iN/vZ4Ua06csflbMxf1+H+a1LftPVUULmyWYwTf9gcDjnpRt3dH1RLSaTaLihaF
bhIY6DWbk3rGxggi3glPJQYOiJz89oDCu+vZZx5KhewV9WUivkY/KMXCrf++2pTY
orjMwTCwvu7Wd9YHquobLWk4FGyCFmPBtxZzsdqX9Pigcr/lbMJgJM36VQIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFI2yQZYmAzN1LyGiR7SrFZUMlt2xMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvamJKQmxpWURNM1V2SWFKSHRLc1ZsUXlXM2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAAI72wME
AS1dCAMEAC2U9AMEAC4QIgMEAU4odAMEAVGx1AMEAF2dagMEAF25pwMEAF5nvAME
AF7n3wMEAKsWtQMEALB0AAMEArB98AMEALlnpAMEAbmL1gMEALnUdQMEALnqCQME
AMEbWgMEANXo6zANBgkqhkiG9w0BAQsFAAOCAQEAmIegwW1UzWOjEOlofDGry0yr
TnFzvLSvTDTU6zEo4Ddb8AMSMTiQy10yPevU8JiV/UhNMorAhuU/qDlFqXzV3OJe
0EslRHwWFqvqvHZsH3ChoYWcOfIPhHAWDH2+RnqNk+SMEoqoVEHKecaTNuxPGu+Z
Q3R8J8Ai7cvqHGDNQY1eWAqflVS2a8cWuTkRsaUZlsTNtRZu8qSGc9OWWSw1tIHA
TsqecZ6z7uYLgdh5V1twGAEoSeqSohcQMtwkprbPtq9GqAaN8c5imvkMXWVZYpkl
74vs2oBTzSlulo8XoQduB7JCvObTv8gemWtFIHNBYo2ztv7x8uiFjrSe3u9v1w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:19 2026 by rpki-client