Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa
File: jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa (raw, json)
Hash identifier: cGm7WweVD+uApG+/ivyi4OOmekGxuRqlS+jllKuOX7s=
Subject key identifier: 8D:C4:86:54:84:A4:8D:93:81:F1:69:B7:70:C4:CF:75:8C:C8:EA:A8
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F23683986296E0A632A00C3B7C4907C31
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25393
IP address blocks: 5.149.120.0/22 maxlen: 24
5.149.124.0/22 maxlen: 24
77.87.192.0/21 maxlen: 21
78.27.224.0/19 maxlen: 24
89.184.68.0/22 maxlen: 24
89.184.72.0/21 maxlen: 21
89.184.88.0/21 maxlen: 21
193.178.144.0/23 maxlen: 23
195.39.197.0/24 maxlen: 24
195.177.116.0/22 maxlen: 22
2a02:2278:100::/44 maxlen: 56
2a02:2278:200::/40 maxlen: 56
2a02:2278:204::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2279::/32 maxlen: 32
2a02:2279::/40 maxlen: 56
2a02:2279:200::/40 maxlen: 56
2a02:2279:1200::/40 maxlen: 56
2a02:2279:1300::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:86:29:6e:0a:63:2a:00:c3:b7:c4:90:7c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dc4865484a48d9381f169b770c4cf758cc8eaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:a2:57:13:7b:62:30:0a:73:2e:46:23:7e:
25:d9:43:f6:02:7d:d5:f9:36:0c:52:92:d0:6f:73:
86:ae:be:da:ab:04:cc:13:c2:8e:fc:e6:21:16:17:
2f:da:ad:68:8f:81:5c:b6:35:85:3a:e8:30:c6:1f:
5d:15:de:b2:35:84:d6:e5:ca:8f:83:52:00:00:0a:
7e:ea:73:4e:0b:e7:06:3c:76:43:93:55:53:08:92:
be:e6:69:7e:82:9f:b9:7c:1a:c1:43:18:78:cf:04:
f9:32:e4:fe:7b:a4:33:8f:4b:f1:95:9c:36:04:a9:
e0:e4:62:73:42:40:8e:50:e6:1a:3d:80:f0:44:61:
dd:a8:1f:22:8f:06:f2:70:cd:87:04:59:21:ad:2c:
19:24:a4:26:a0:72:30:b1:79:b7:a1:cd:7b:9c:2c:
ae:39:82:27:f6:57:2b:07:95:02:45:e4:ca:6b:7f:
39:0c:44:db:a2:ff:c4:57:85:73:5e:7d:b0:b8:4f:
b3:8d:d1:6d:a5:72:8b:64:29:3f:3b:90:b5:e7:01:
59:2b:ba:01:f3:0f:63:3e:fc:a4:30:ac:07:9d:a7:
86:a7:6a:1c:16:3c:c5:c6:2b:9e:f3:84:c9:b1:67:
cd:ed:78:1b:a5:9b:c9:aa:5a:d7:63:10:2f:a9:d9:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:86:54:84:A4:8D:93:81:F1:69:B7:70:C4:CF:75:8C:C8:EA:A8
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/jcSGVISkjZOB8Wm3cMTPdYzI6qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.224.0/19
89.184.68.0-89.184.79.255
89.184.88.0/21
193.178.144.0/23
195.39.197.0/24
195.177.116.0/22
IPv6:
2a02:2278:100::/44
2a02:2278:200::/40
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
48:1f:81:bd:37:ef:00:22:d0:c3:67:6c:93:cb:dc:85:a5:d9:
7d:e1:84:6c:57:fc:15:3d:47:7b:71:b9:fb:3a:84:91:ac:2f:
8f:e8:c9:bc:22:70:60:c3:77:32:60:8c:de:99:5f:ba:54:19:
12:73:7c:fa:21:c6:9d:9c:0f:23:6a:15:76:56:04:85:9c:95:
17:c5:ec:58:72:af:13:2e:7f:0f:09:c9:c8:05:d9:c5:2f:09:
fe:3b:c7:da:0b:46:ac:06:33:b0:df:a7:ab:64:ad:76:6b:7d:
78:46:d7:78:0f:ba:1b:a2:2e:5e:98:dc:22:8e:3a:3e:90:62:
ed:71:6b:91:63:69:5c:0f:17:36:46:4d:3a:5d:2c:6a:41:50:
13:47:ec:3b:38:c9:f2:1e:17:a8:b1:ff:e0:23:ea:dc:4c:92:
cb:01:f7:96:17:ea:f1:18:15:47:a7:26:7c:21:86:7d:10:d9:
0d:e5:c8:74:9f:e5:e1:6e:d3:82:06:8a:81:39:ea:e5:3d:09:
b7:bd:44:ba:db:40:70:37:5a:0c:52:df:91:f7:a0:61:2d:a6:
de:9f:7b:e2:ee:8a:20:0d:05:a6:28:9e:80:0b:6f:31:cf:63:
bc:9c:45:3e:c7:de:f4:84:2c:37:92:c4:e3:38:aa:72:15:4b:
0d:e9:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:31 2026 by rpki-client