Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jvySsCRwHf663AnOlH_eMm3p3NI.roa
File: jvySsCRwHf663AnOlH_eMm3p3NI.roa (raw, json)
Hash identifier: n02tS4DDej55ND22Di+pvAtCvghqR/XXwEjDXngg374=
Subject key identifier: 8E:FC:92:B0:24:70:1D:FE:BA:DC:09:CE:94:7F:DE:32:6D:E9:DC:D2
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019CE457E31DDB617694ED4C04D9432A6D5E
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jvySsCRwHf663AnOlH_eMm3p3NI.roa
Signing time: Thu 12 Mar 2026 23:18:10 +0000
ROA not before: Thu 12 Mar 2026 23:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
135.132.0.0/19 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.152.0/21 maxlen: 21
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:57:e3:1d:db:61:76:94:ed:4c:04:d9:43:2a:6d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Mar 12 23:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8efc92b024701dfebadc09ce947fde326de9dcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:9b:6b:0b:4d:ce:b2:4d:25:fb:06:f1:99:
23:39:d5:b1:28:62:07:cd:ac:fa:40:c5:14:68:dd:
bc:1e:3a:d6:10:57:cd:41:f5:4e:49:8a:c7:10:dc:
bd:af:78:8e:05:dc:45:c8:4e:d6:5e:1c:9d:1f:12:
cd:73:d8:5f:44:c4:46:f5:09:f1:e8:60:00:6c:c2:
93:bc:8a:5b:44:ee:92:60:65:9a:83:14:ff:af:80:
0f:0e:99:d6:99:75:c1:bb:bd:02:33:1d:71:c9:39:
0e:9f:b8:be:c9:52:2e:7e:01:b5:bb:e4:ba:5c:83:
fc:ba:3d:a0:a7:06:9b:c6:0c:d3:e3:79:98:c7:d0:
96:50:e8:bc:b2:f5:40:b9:3b:2f:0c:f7:20:0f:71:
4b:02:55:5c:86:b2:de:39:85:0e:48:4a:27:95:62:
8f:3d:26:73:84:9a:17:29:e0:3c:6f:e7:fd:e5:d5:
b7:f8:15:ef:8d:18:42:ab:63:36:3e:f6:4e:83:ac:
61:ea:c1:cd:57:49:fa:67:3e:5f:a7:24:fa:0a:2e:
b0:ab:cb:05:68:23:03:43:ad:4d:91:23:da:f5:ea:
fb:f1:7c:a0:6f:c6:16:88:8b:e3:b5:9b:47:12:bc:
6a:40:08:e5:27:09:67:6a:b3:78:50:5d:b8:81:91:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:92:B0:24:70:1D:FE:BA:DC:09:CE:94:7F:DE:32:6D:E9:DC:D2
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jvySsCRwHf663AnOlH_eMm3p3NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
135.132.0.0/19
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
170.100.152.0/21
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
05:e4:5a:5a:0f:17:bf:97:aa:3f:a4:8a:92:99:8b:30:f7:58:
16:4e:7b:66:52:1c:24:88:55:80:2e:59:16:44:c9:f4:49:b4:
b7:fe:80:59:ec:14:d0:64:dc:6f:85:a2:33:7e:a0:13:38:f1:
c0:3b:00:43:a1:41:57:6d:a5:ac:c9:9b:58:38:ea:d7:ae:75:
a9:2c:8f:65:3e:07:0b:00:c2:57:9d:7b:00:de:54:48:fb:19:
f6:03:1a:f9:8c:64:23:2a:05:f7:10:65:c9:31:26:46:9e:2f:
74:52:d9:f4:9b:f0:dc:c5:77:38:75:4d:73:36:c7:2a:37:b6:
a8:cf:42:bb:a9:9d:e8:c3:e4:8e:85:a9:a6:36:d5:c4:70:62:
52:53:ea:aa:f1:a5:34:ae:80:1e:ee:9f:e5:cd:4b:09:f0:4e:
ea:aa:72:32:c2:f8:13:ee:99:f1:33:b4:77:3e:a5:7e:0a:1e:
a4:61:f1:e1:a5:31:08:36:43:c3:39:f9:c2:5c:91:5f:9f:f8:
b7:8e:39:7d:77:86:cb:c8:06:8f:be:c0:e1:79:67:65:84:da:
02:a9:dd:08:4a:15:f1:e4:3a:01:e2:56:37:66:88:29:b7:d2:
dc:d5:26:6b:14:f7:f1:32:b4:16:c7:d6:1a:50:25:12:1d:6e:
ad:e8:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:45 2026 by rpki-client