Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J_1kijtmDrjQLMH7Zj1I36wOpsI.roa
File: J_1kijtmDrjQLMH7Zj1I36wOpsI.roa (raw, json)
Hash identifier: Px/rIih/PymQTwJQ4oENJjf+1hi240/3cLM0VBPMpzE=
Subject key identifier: 27:FD:64:8A:3B:66:0E:B8:D0:2C:C1:FB:66:3D:48:DF:AC:0E:A6:C2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8D1B278C5053532BC5BA0DD1A6558469
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J_1kijtmDrjQLMH7Zj1I36wOpsI.roa
Signing time: Thu 23 Jul 2026 03:53:14 +0000
ROA not before: Thu 23 Jul 2026 03:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 78.154.122.0/24 maxlen: 24
80.68.209.0/24 maxlen: 24
195.72.172.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:1b:27:8c:50:53:53:2b:c5:ba:0d:d1:a6:55:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 03:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27fd648a3b660eb8d02cc1fb663d48dfac0ea6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:8e:87:a4:ab:4b:f9:4f:09:c0:22:f4:ea:
f1:a5:7d:52:61:da:8a:7a:ef:5b:1d:ac:28:72:d8:
5a:c5:12:0e:06:c5:44:62:80:eb:0c:d0:9a:ab:0a:
f5:26:01:e6:ba:90:85:c0:ff:aa:17:40:76:e8:b1:
ef:a0:47:01:6d:c8:54:02:25:df:08:fb:1b:c2:3a:
fb:2c:d4:94:fb:4b:1b:6f:45:25:31:80:a8:37:f6:
c7:f6:62:3b:32:67:2f:37:73:1e:41:3f:70:01:d3:
45:4e:7f:b0:66:97:b4:f8:50:e9:46:b2:ce:d3:9e:
7e:43:9a:1d:ab:16:db:c0:a6:a0:c4:18:a1:12:ec:
28:00:9e:39:48:96:18:22:b3:d9:0e:14:05:f8:4e:
8c:96:62:36:47:3a:b3:31:5d:26:0e:56:45:35:4c:
23:3b:05:3c:a1:9d:01:56:c2:95:7b:4a:3e:a0:f0:
7f:1d:c4:f8:0d:35:e6:07:f9:ea:e3:a9:b5:36:67:
aa:5f:c6:fe:e7:b4:de:f5:45:3a:e4:13:4e:be:32:
52:5e:72:95:f7:2e:b2:0f:fb:6a:c0:2e:02:2a:0e:
67:81:a9:15:26:b0:65:26:ae:e4:61:15:df:25:ef:
9e:ae:1b:60:36:9e:f2:1c:13:8e:de:07:a0:29:20:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:64:8A:3B:66:0E:B8:D0:2C:C1:FB:66:3D:48:DF:AC:0E:A6:C2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J_1kijtmDrjQLMH7Zj1I36wOpsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.122.0/24
80.68.209.0/24
195.72.172.0/24
212.134.148.0/22
Signature Algorithm: sha256WithRSAEncryption
96:72:9c:ce:7c:d1:f5:4e:72:16:9a:eb:da:2d:1d:cf:ba:ae:
4f:ac:29:75:c5:df:6c:d8:50:a8:a7:0f:64:43:e7:d4:96:89:
16:8e:e4:8c:55:f6:01:fc:dc:e5:50:06:32:87:61:c9:79:7b:
45:a5:e5:e4:64:ac:1c:94:4c:9c:b1:ab:36:a1:ed:8f:7c:d9:
7b:3c:85:bd:c8:89:31:cd:7c:e0:da:89:c6:1c:8b:ef:04:09:
84:c8:b3:77:42:04:da:06:49:79:c8:ef:de:32:29:69:e5:b5:
2b:72:8f:b9:c4:b8:72:ea:20:2b:f4:1a:6f:98:42:19:07:1c:
f8:96:1c:2b:98:a4:ac:fa:21:18:a4:94:1e:bd:40:f2:c2:a7:
4f:21:d0:a4:86:27:74:df:1e:2d:53:70:5e:f3:f2:97:c6:91:
3e:0a:aa:46:12:6a:60:f1:17:f2:f8:75:40:d2:e9:86:6d:5e:
bc:52:16:2b:14:e6:1a:37:f9:90:26:2f:57:83:16:6a:d5:28:
1a:5d:19:1c:05:f2:93:11:52:96:11:25:6b:c9:3d:b0:d3:45:
de:15:72:47:29:f7:76:b5:95:a9:31:fb:39:56:de:14:7d:bf:
bf:f5:5d:a9:12:db:9c:a2:8b:b2:74:aa:33:d1:81:e2:21:61:
ce:8e:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:30 2026 by rpki-client