Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/PJPI8dqancVYeHub_wTff2YCz7U.roa
File: PJPI8dqancVYeHub_wTff2YCz7U.roa (raw, json)
Hash identifier: 6JsU9AVsn611AjZ3w5VJs2Vx0tmeqzipi6fXppDyfIg=
Subject key identifier: 3C:93:C8:F1:DA:9A:9D:C5:58:78:7B:9B:FF:04:DF:7F:66:02:CF:B5
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A19C0CC54B02DCFB034E0E263880EEF7B2
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/PJPI8dqancVYeHub_wTff2YCz7U.roa
Signing time: Mon 02 Nov 2026 11:37:24 +0000
ROA not before: Mon 02 Nov 2026 11:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.20.109.0/24 maxlen: 24
2.20.110.0/24 maxlen: 24
2.20.112.0/22 maxlen: 22
2.20.242.0/24 maxlen: 24
2.20.252.0/24 maxlen: 24
2.21.2.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.22.216.0/22 maxlen: 22
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.78.0/24 maxlen: 24
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:0c:c5:4b:02:dc:fb:03:4e:0e:26:38:80:ee:f7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Nov 2 11:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c93c8f1da9a9dc558787b9bff04df7f6602cfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:bc:d2:41:98:05:0f:fa:3f:80:8a:d2:b4:
d9:a4:d3:58:f6:84:d4:86:1c:fd:94:19:15:76:6e:
aa:42:4f:48:51:4a:61:dc:b0:5d:2a:1a:92:59:3f:
c3:68:7e:cd:30:28:79:73:c1:25:b2:41:a3:d5:d0:
e3:a8:8b:13:70:05:91:48:e5:0f:7b:1f:2e:28:f5:
e3:21:1e:89:d0:e0:17:26:bb:56:45:59:80:b5:f0:
aa:0e:0e:bc:66:58:40:d6:51:47:be:6a:17:48:b8:
85:f3:c9:1f:9c:eb:5d:ee:14:3a:37:9a:b6:f6:14:
9e:18:d5:dd:26:eb:5b:7b:2e:ef:cd:5c:1e:a2:5b:
f9:3d:9b:0b:a9:b3:3c:5c:c3:8f:1a:ac:9e:c2:1b:
0b:fa:07:7d:ce:87:13:b8:3b:58:5b:bb:06:42:d2:
35:51:4c:6d:85:f1:4a:f0:08:cc:ad:6f:ff:18:64:
34:d3:e3:5f:84:a8:ca:57:a6:f9:55:b5:73:cb:58:
bc:f4:d7:fc:1b:9c:ad:7b:21:e0:80:56:29:26:f9:
18:ac:49:70:bd:14:3c:86:66:ff:3a:f2:82:c3:b6:
36:e9:f9:3f:b3:9e:05:db:6a:d6:7a:ff:45:a6:72:
d0:74:a6:e4:6a:d7:2f:97:dc:2e:8b:da:fd:ef:c2:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:C8:F1:DA:9A:9D:C5:58:78:7B:9B:FF:04:DF:7F:66:02:CF:B5
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/PJPI8dqancVYeHub_wTff2YCz7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.20.109.0-2.20.110.255
2.20.112.0/22
2.20.242.0/24
2.20.252.0/24
2.21.2.0/24
2.21.14.0/24
2.22.216.0/22
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.78.0/24
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
21:0e:67:36:58:e4:a7:48:4b:32:30:9d:6f:67:ab:d8:4a:2b:
f0:aa:fd:08:15:9f:8a:a2:c9:ae:2c:94:36:0f:fb:27:72:59:
5d:4b:d6:55:ba:70:e4:eb:21:78:af:da:ec:68:05:04:fa:cd:
14:36:69:95:f8:1f:ed:5f:e4:5b:88:24:1e:e5:d1:25:aa:85:
4b:0e:14:26:9d:ac:06:fa:3d:d6:7d:ad:bc:29:95:c5:2e:9c:
ae:7a:0f:8f:f0:f2:c9:87:b0:73:dd:25:12:f0:8c:a7:e2:71:
a8:f1:34:1f:2e:2e:9f:bc:5b:6b:53:87:74:22:77:d7:63:14:
31:13:37:ac:3a:c2:30:44:6f:3c:0d:33:e3:11:62:00:1a:bb:
e5:37:97:2e:2e:07:15:ff:fc:78:93:7a:66:dc:5d:67:3e:1b:
d7:12:73:0e:72:eb:f9:ef:f2:7e:79:4e:a2:2c:86:c0:4f:e0:
95:bb:71:3d:3e:a1:02:af:9c:69:72:bb:db:09:b3:6c:06:10:
12:64:11:e5:03:92:e3:e7:e4:8d:72:f2:71:94:dd:03:9e:cf:
55:96:b3:35:21:be:52:30:42:e1:8c:7c:e4:de:c1:a3:23:02:
42:38:9e:8d:0c:46:a2:fe:8c:64:5b:de:ff:8c:ac:84:5f:fd:
15:dd:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:55 2026 by rpki-client