Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ijNNE7-iHm9HkJOxrxEZ1w_ovD4.roa
File: ijNNE7-iHm9HkJOxrxEZ1w_ovD4.roa (raw, json)
Hash identifier: GSeYO4q3W3JVvZnPNY0nLSpxgHYejPkDtnHnoGtgpnU=
Subject key identifier: 8A:33:4D:13:BF:A2:1E:6F:47:90:93:B1:AF:11:19:D7:0F:E8:BC:3E
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 01A0D1DFD8B3C4AD77C9491AEEDFCF583B79
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ijNNE7-iHm9HkJOxrxEZ1w_ovD4.roa
Signing time: Thu 24 Sep 2026 05:25:03 +0000
ROA not before: Thu 24 Sep 2026 05:25:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
185.136.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:df:d8:b3:c4:ad:77:c9:49:1a:ee:df:cf:58:3b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Sep 24 05:25:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a334d13bfa21e6f479093b1af1119d70fe8bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:06:c6:57:e8:37:04:f8:3f:63:76:88:da:
2a:ad:cb:21:2a:ba:30:fc:98:a0:11:23:db:2a:69:
4e:36:a7:04:5a:66:5e:7b:3d:a3:ae:80:b6:45:b0:
13:6e:47:ca:2e:4f:30:4f:82:26:3e:71:9f:0e:73:
b6:6c:0e:cc:35:46:9b:a5:7f:17:c3:d8:31:dc:5d:
00:96:5a:c6:20:70:3d:20:0d:81:d6:1f:8a:37:af:
e3:de:db:8a:c9:56:a0:3f:60:7d:80:63:91:6a:72:
49:43:a2:ab:a3:2f:0d:20:fa:7f:11:3e:40:af:15:
3b:b8:f9:16:a9:ea:65:21:a8:aa:b4:76:7f:ae:94:
10:9d:3a:28:50:62:30:8e:69:d2:da:d6:ae:41:18:
73:76:6c:e2:66:84:70:85:f7:98:04:d7:7b:9b:a0:
fd:64:2d:2c:93:0f:73:73:6a:66:4d:09:f0:fe:ab:
85:18:fd:4e:55:f7:ea:f3:0e:f8:5f:4d:f2:15:d8:
99:e6:f4:91:47:b4:d7:62:0d:99:87:b9:3e:31:0e:
a4:8d:10:b2:ec:16:b6:68:63:bc:4c:a4:19:23:ed:
23:0e:ee:93:7c:ec:1a:19:51:99:79:23:d7:d8:09:
96:2a:cc:37:0d:98:bc:0e:a1:f4:7c:a6:d2:fe:5e:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:4D:13:BF:A2:1E:6F:47:90:93:B1:AF:11:19:D7:0F:E8:BC:3E
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ijNNE7-iHm9HkJOxrxEZ1w_ovD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.252.128.0-94.252.151.255
94.252.160.0/19
185.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
21:63:8f:79:17:d8:c5:09:1a:b4:48:bb:ba:f9:04:f1:83:53:
b1:3d:74:05:c9:42:c8:fa:2e:36:76:46:3e:00:2f:b7:40:78:
77:0f:10:0b:1b:09:54:28:09:ea:83:eb:c9:3e:5e:28:3b:7d:
46:39:2f:b9:b6:c3:61:7b:97:28:c4:88:4c:d4:ba:a1:95:2e:
2a:b4:e8:9a:63:f2:22:d3:54:c3:45:3a:ee:69:02:cc:69:75:
3e:27:ac:d3:9d:d5:60:47:b4:da:85:7f:a5:6d:ea:44:3e:6b:
24:d1:3f:e8:1a:76:55:4b:3f:01:bc:24:cd:bc:f5:3d:19:2c:
19:65:19:2e:a0:ce:8d:0a:19:3c:4b:8a:ed:0e:67:01:67:b1:
20:16:74:68:48:79:35:6d:99:68:92:ac:38:f0:3a:fb:44:b3:
aa:75:3d:26:6f:75:e0:ab:fd:8d:49:07:b7:c5:3f:8b:56:bb:
55:69:0e:1d:33:b5:26:8c:37:58:49:4f:6b:e8:db:a2:d7:a8:
97:1d:b4:e0:26:a5:83:02:77:38:6e:ed:11:3f:2a:28:6f:0f:
eb:b4:a2:94:09:6b:91:a4:3d:88:1f:13:1f:38:fa:7e:33:1e:
88:4d:bc:7d:1c:43:53:55:07:8b:ee:3c:7f:ab:c7:97:58:c4:
5c:2d:81:dd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaDR39izxK13yUka7t/PWDt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjYwOTI0MDUyNTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTMzNGQxM2JmYTIxZTZmNDc5MDkzYjFhZjExMTlkNzBmZThiYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8kGxlfoNwT4P2N2iNoqrcshKrow
/JigESPbKmlONqcEWmZeez2jroC2RbATbkfKLk8wT4ImPnGfDnO2bA7MNUabpX8X
w9gx3F0AllrGIHA9IA2B1h+KN6/j3tuKyVagP2B9gGORanJJQ6Kroy8NIPp/ET5A
rxU7uPkWqeplIaiqtHZ/rpQQnTooUGIwjmnS2tauQRhzdmziZoRwhfeYBNd7m6D9
ZC0skw9zc2pmTQnw/quFGP1OVffq8w74X03yFdiZ5vSRR7TXYg2Zh7k+MQ6kjRCy
7Ba2aGO8TKQZI+0jDu6TfOwaGVGZeSPX2AmWKsw3DZi8DqH0fKbS/l7NswIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIozTRO/oh5vR5CTsa8RGdcP6Lw+MB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvaWpOTkU3LWlIbTlIa0pPeHJ4RVoxd19vdkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAde/IAD
BANe/JADBAVe/KADBAK5iJAwDQYJKoZIhvcNAQELBQADggEBACFjj3kX2MUJGrRI
u7r5BPGDU7E9dAXJQsj6LjZ2Rj4AL7dAeHcPEAsbCVQoCeqD68k+Xig7fUY5L7m2
w2F7lyjEiEzUuqGVLiq06Jpj8iLTVMNFOu5pAsxpdT4nrNOd1WBHtNqFf6Vt6kQ+
ayTRP+gadlVLPwG8JM289T0ZLBllGS6gzo0KGTxLiu0OZwFnsSAWdGhIeTVtmWiS
rDjwOvtEs6p1PSZvdeCr/Y1JB7fFP4tWu1VpDh0ztSaMN1hJT2vo26LXqJcdtOAm
pYMCdzhu7RE/KihvD+u0opQJa5GkPYgfEx84+n4zHohNvH0cQ1NVB4vuPH+rx5dY
xFwtgd0=
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:44:49 2026 by rpki-client