Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/jr89Dc3sRrScs4NCmeb0VDbbeqQ.roa
File: jr89Dc3sRrScs4NCmeb0VDbbeqQ.roa (raw, json)
Hash identifier: oVC10N3FGYQBVz3nCUeZO5+LbCLsY0m1S40FwBcsJPE=
Subject key identifier: 8E:BF:3D:0D:CD:EC:46:B4:9C:B3:83:42:99:E6:F4:54:36:DB:7A:A4
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A13046A7096A0C5CBE52AFC3912CE99733
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/jr89Dc3sRrScs4NCmeb0VDbbeqQ.roa
Signing time: Mon 12 Oct 2026 13:21:39 +0000
ROA not before: Mon 12 Oct 2026 13:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.102.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:46:a7:09:6a:0c:5c:be:52:af:c3:91:2c:e9:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 12 13:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ebf3d0dcdec46b49cb3834299e6f45436db7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:62:7e:96:ff:ca:2a:26:1b:02:3c:ca:9b:
45:2e:4a:f2:3f:93:8b:68:c1:a7:f4:e2:87:ec:4a:
3d:fa:07:39:24:4f:f5:2b:63:40:f4:31:0d:0c:85:
85:8b:a3:d9:3a:5a:17:4c:65:aa:4f:54:ed:01:2d:
ad:af:95:08:05:0c:d8:f6:37:84:4b:cf:9e:82:0b:
41:39:65:94:96:5f:80:9c:89:98:7b:d0:01:3e:a1:
90:fa:18:5d:bf:79:ed:21:b9:73:24:e4:08:6f:72:
86:e6:7f:c1:24:81:7e:f8:e5:ac:3c:0c:f0:58:8a:
c8:bd:82:2d:73:d2:fa:6b:78:60:ed:7e:8d:e0:05:
e7:c8:55:ff:50:f9:88:03:af:d4:f5:4d:a8:bd:5f:
c5:de:9b:39:ff:13:7c:1b:c7:cd:b5:92:5b:fe:24:
5a:46:34:22:1d:a6:a3:ec:84:8c:b9:42:34:d9:2b:
e0:f3:7a:2d:69:6d:bb:d5:a0:6c:3f:ae:7c:6f:fc:
eb:80:f5:f6:27:a6:b9:27:b8:18:9c:01:02:e5:0b:
53:a7:a1:e9:a1:d7:c4:7a:28:4b:40:c8:a1:ad:8e:
14:e3:e3:82:33:0e:12:6a:4b:99:46:e2:29:01:c7:
20:8c:80:e9:f0:65:e1:2d:82:3c:47:5d:d0:d4:1b:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:3D:0D:CD:EC:46:B4:9C:B3:83:42:99:E6:F4:54:36:DB:7A:A4
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/jr89Dc3sRrScs4NCmeb0VDbbeqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.102.0/24
46.20.111.0/24
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
1b:72:a7:b4:27:d4:54:80:8f:7b:5d:38:b5:f5:e4:da:3f:fe:
a1:49:6a:6e:72:d3:8e:eb:a6:61:e8:2b:eb:73:e8:0e:3d:96:
7b:b7:f1:c3:12:d9:c4:9f:c1:f5:1e:c4:5e:c5:df:a0:b8:27:
db:7f:d4:fc:10:32:ee:f2:69:d9:4e:e6:7b:50:bb:01:97:00:
38:a2:54:75:e3:c9:f2:de:8d:00:31:ee:92:78:e0:3d:a2:96:
f3:95:d8:df:c3:57:90:d2:5e:37:cc:0d:e3:4e:61:54:40:c9:
f8:f6:3f:b5:8f:88:59:34:05:a0:c4:6b:ec:14:9a:57:50:4d:
4d:9d:d7:0b:5f:57:02:ca:a2:b3:df:50:06:e4:cf:81:49:9e:
f6:7a:8c:6a:d4:c1:4d:c3:39:8d:ce:d3:6e:1e:96:e8:2e:3f:
49:9e:ea:7e:7b:c3:e0:9a:2c:45:ed:0d:1c:95:4d:0e:18:d5:
2b:63:ec:89:cc:45:f4:74:ba:f9:f5:fd:fb:20:9c:32:61:6c:
14:2d:8c:c0:c3:d3:89:be:ec:36:72:75:c4:b1:27:25:c8:50:
1c:24:ed:15:0f:6a:e7:77:f9:a4:92:1b:af:56:d0:98:a8:3b:
02:4f:46:6d:15:e3:f4:db:9a:f3:f2:77:8c:1c:b3:e7:92:c2:
f1:65:8a:30
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAaEwRqcJagxcvlKvw5Es6ZczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYxMDEyMTMyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWJmM2QwZGNkZWM0NmI0OWNiMzgzNDI5OWU2ZjQ1NDM2ZGI3YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/tifpb/yiomGwI8yptFLkryP5OL
aMGn9OKH7Eo9+gc5JE/1K2NA9DENDIWFi6PZOloXTGWqT1TtAS2tr5UIBQzY9jeE
S8+eggtBOWWUll+AnImYe9ABPqGQ+hhdv3ntIblzJOQIb3KG5n/BJIF++OWsPAzw
WIrIvYItc9L6a3hg7X6N4AXnyFX/UPmIA6/U9U2ovV/F3ps5/xN8G8fNtZJb/iRa
RjQiHaaj7ISMuUI02Svg83otaW271aBsP658b/zrgPX2J6a5J7gYnAEC5QtTp6Hp
odfEeihLQMihrY4U4+OCMw4SakuZRuIpAccgjIDp8GXhLYI8R13Q1BvQswIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFI6/PQ3N7Ea0nLODQpnm9FQ223qkMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvanI4OURjM3NSclNjczROQ21lYjBWRGJiZXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAuBAIAATAoAwQALhRmAwQA
LhRvMAwDBAC5oMEDBAK5oMAwDAMEALmp3QMEBbmpwDAPBAIAAjAJAwcAKhQAgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAbcqe0J9RUgI97XTi19eTaP/6hSWpuctOO66Zh
6Cvrc+gOPZZ7t/HDEtnEn8H1HsRexd+guCfbf9T8EDLu8mnZTuZ7ULsBlwA4olR1
48ny3o0AMe6SeOA9opbzldjfw1eQ0l43zA3jTmFUQMn49j+1j4hZNAWgxGvsFJpX
UE1NndcLX1cCyqKz31AG5M+BSZ72eoxq1MFNwzmNztNuHpboLj9Jnup+e8PgmixF
7Q0clU0OGNUrY+yJzEX0dLr59f37IJwyYWwULYzAw9OJvuw2cnXEsSclyFAcJO0V
D2rnd/mkkhuvVtCYqDsCT0ZtFeP025rz8neMHLPnksLxZYow
-----END CERTIFICATE-----
Generated at Wed Oct 14 05:00:59 2026 by rpki-client