Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JqbUTI-9JOv7gxixt9zvusy-I8E.roa
File: JqbUTI-9JOv7gxixt9zvusy-I8E.roa (raw, json)
Hash identifier: ilgqpehysLbcTHvBFar71+XxiSH0AXiI5J1P/8e+kwA=
Subject key identifier: 26:A6:D4:4C:8F:BD:24:EB:FB:83:18:B1:B7:DC:EF:BA:CC:BE:23:C1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019F6909A19783F1AB671A4FA4B72C1034D5
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JqbUTI-9JOv7gxixt9zvusy-I8E.roa
Signing time: Thu 16 Jul 2026 03:47:46 +0000
ROA not before: Thu 16 Jul 2026 03:47:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43357
IP address blocks: 45.66.219.0/24 maxlen: 32
45.82.76.0/24 maxlen: 32
45.82.77.0/24 maxlen: 32
45.130.20.0/22 maxlen: 32
45.131.155.0/24 maxlen: 32
45.147.50.0/24 maxlen: 32
45.147.51.0/24 maxlen: 32
80.66.197.0/24 maxlen: 32
80.66.198.0/24 maxlen: 32
88.214.21.0/24 maxlen: 32
88.218.193.0/24 maxlen: 32
92.60.40.0/24 maxlen: 32
147.78.240.0/24 maxlen: 32
147.78.241.0/24 maxlen: 32
176.113.68.0/24 maxlen: 32
176.113.69.0/24 maxlen: 32
176.119.150.0/24 maxlen: 32
185.184.220.0/24 maxlen: 32
185.184.222.0/24 maxlen: 32
185.194.52.0/22 maxlen: 32
185.248.85.0/24 maxlen: 32
185.254.75.0/24 maxlen: 32
194.36.25.0/24 maxlen: 32
194.36.27.0/24 maxlen: 32
213.232.112.0/24 maxlen: 32
2a03:d9c0:3000::/48 maxlen: 128
2a03:d9c0:3001::/48 maxlen: 128
2a07:fe00:1::/48 maxlen: 128
2a09:7:2007::/48 maxlen: 48
2a0b:89c1:3::/48 maxlen: 128
2a0c:59c0:18::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:09:a1:97:83:f1:ab:67:1a:4f:a4:b7:2c:10:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jul 16 03:47:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26a6d44c8fbd24ebfb8318b1b7dcefbaccbe23c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:c5:42:bb:62:d9:7a:08:0e:3e:89:5f:88:
73:42:2b:61:e0:42:2e:16:c7:61:2d:54:38:5b:00:
df:13:8c:82:47:87:2b:41:c9:c3:ca:dc:75:24:eb:
e0:19:06:d5:1c:0a:16:f1:e5:d2:96:97:6a:9f:9e:
c5:bc:d2:89:19:10:f3:9e:38:c6:65:56:23:d1:03:
53:18:d4:32:f2:5c:ea:8a:47:13:7b:77:24:99:da:
ed:74:17:e1:36:fe:f2:68:90:b0:e9:76:07:85:b7:
db:ed:49:b5:92:72:1e:01:21:69:2d:d3:61:e3:3c:
88:3a:bf:8f:38:07:c4:2b:0b:cb:e1:2d:1c:d1:c4:
dd:3e:f4:7c:38:cb:ec:80:93:d6:0c:7a:cf:40:2c:
c1:bc:fd:7b:a2:5b:99:ac:23:03:8b:be:e1:04:31:
4a:c7:9f:51:3a:42:a7:d2:29:8a:35:72:7d:7f:45:
4d:9d:d0:6c:b0:63:7c:b6:b1:9c:78:42:8a:bf:09:
c8:81:53:b6:fa:97:d6:16:d5:b4:4a:b8:a8:db:d1:
1e:9a:de:2b:72:e1:91:6d:bc:78:6d:62:b0:f1:21:
e0:4e:0f:31:c2:bc:1f:e9:61:40:8c:37:ec:1a:46:
fe:4f:9f:05:c4:d0:dd:22:ca:43:52:7c:e9:4f:63:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:D4:4C:8F:BD:24:EB:FB:83:18:B1:B7:DC:EF:BA:CC:BE:23:C1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JqbUTI-9JOv7gxixt9zvusy-I8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.219.0/24
45.82.76.0/23
45.130.20.0/22
45.131.155.0/24
45.147.50.0/23
80.66.197.0-80.66.198.255
88.214.21.0/24
88.218.193.0/24
92.60.40.0/24
147.78.240.0/23
176.113.68.0/23
176.119.150.0/24
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.248.85.0/24
185.254.75.0/24
194.36.25.0/24
194.36.27.0/24
213.232.112.0/24
IPv6:
2a03:d9c0:3000::/47
2a07:fe00:1::/48
2a09:7:2007::/48
2a0b:89c1:3::/48
2a0c:59c0:18::/48
Signature Algorithm: sha256WithRSAEncryption
89:26:b4:26:bc:56:34:2a:e3:99:2a:b3:0f:ed:6d:c7:1c:59:
fb:90:e7:40:c6:58:4e:01:61:cb:c2:36:1d:72:8f:18:ec:97:
2c:d3:d9:ea:1f:c1:dd:3e:5f:9f:a1:67:6e:ee:40:ea:0f:5b:
69:bb:06:07:5d:53:06:1e:37:24:36:9a:74:38:26:96:a8:1a:
45:10:41:1c:36:bc:e2:fd:35:3b:ff:5b:31:0d:9d:38:aa:e1:
b7:2d:e7:db:a0:bf:f6:ae:c4:db:00:a0:fb:c3:4a:27:91:8b:
5c:2e:a3:30:b0:18:aa:72:cb:b0:c3:56:00:51:9d:c3:a1:23:
56:b7:c4:23:47:77:dc:f5:40:79:08:69:ec:ae:bf:6b:6c:e7:
b0:51:d6:2f:e4:1c:42:58:c8:a2:28:70:b0:45:0a:61:13:9c:
60:db:2c:ba:5a:63:98:2f:72:6b:4a:28:3e:97:cf:98:3f:48:
f1:b0:76:ce:1c:1d:3f:04:f3:1c:36:2f:ff:49:64:bf:49:5f:
29:a8:84:d9:a2:e7:b2:d2:99:67:b9:26:32:bd:a1:31:05:8f:
84:54:6c:54:69:27:f9:7f:17:d2:b1:54:d9:d0:00:7f:d3:92:
41:dd:a0:47:45:f8:c8:d5:a6:3a:74:9b:79:a6:f6:da:4c:90:
8a:26:c4:45
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAZ9pCaGXg/GrZxpPpLcsEDTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjYwNzE2MDM0NzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE2ZDQ0YzhmYmQyNGViZmI4MzE4YjFiN2RjZWZiYWNjYmUyM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27LFQrti2XoIDj6JX4hzQith4EIu
FsdhLVQ4WwDfE4yCR4crQcnDytx1JOvgGQbVHAoW8eXSlpdqn57FvNKJGRDznjjG
ZVYj0QNTGNQy8lzqikcTe3ckmdrtdBfhNv7yaJCw6XYHhbfb7Um1knIeASFpLdNh
4zyIOr+POAfEKwvL4S0c0cTdPvR8OMvsgJPWDHrPQCzBvP17oluZrCMDi77hBDFK
x59ROkKn0imKNXJ9f0VNndBssGN8trGceEKKvwnIgVO2+pfWFtW0Srio29Eemt4r
cuGRbbx4bWKw8SHgTg8xwrwf6WFAjDfsGkb+T58FxNDdIspDUnzpT2O6tQIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFCam1EyPvSTr+4MYsbfc77rMviPBMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvSnFiVVRJLTlKT3Y3Z3hpeHQ5enZ1c3ktSThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHSBggrBgEFBQcBBwEB/wSBwjCBvzCBhwQCAAEwgYADBAAt
QtsDBAEtUkwDBAItghQDBAAtg5sDBAEtkzIwDAMEAFBCxQMEAFBCxgMEAFjWFQME
AFjawQMEAFw8KAMEAZNO8AMEAbBxRAMEALB3lgMEALm43AMEALm43gMEArnCNAME
ALn4VQMEALn+SwMEAMIkGQMEAMIkGwMEANXocDAzBAIAAjAtAwcBKgPZwDAAAwcA
Kgf+AAABAwcAKgkAByAHAwcAKguJwQADAwcAKgxZwAAYMA0GCSqGSIb3DQEBCwUA
A4IBAQCJJrQmvFY0KuOZKrMP7W3HHFn7kOdAxlhOAWHLwjYdco8Y7Jcs09nqH8Hd
Pl+foWdu7kDqD1tpuwYHXVMGHjckNpp0OCaWqBpFEEEcNrzi/TU7/1sxDZ04quG3
LefboL/2rsTbAKD7w0onkYtcLqMwsBiqcsuww1YAUZ3DoSNWt8QjR3fc9UB5CGns
rr9rbOewUdYv5BxCWMiiKHCwRQphE5xg2yy6WmOYL3JrSig+l8+YP0jxsHbOHB0/
BPMcNi//SWS/SV8pqITZouey0plnuSYyvaExBY+EVGxUaSf5fxfSsVTZ0AB/05JB
3aBHRfjI1aY6dJt5pvbaTJCKJsRF
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:07 2026 by rpki-client