Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/q8SJpLXKAHXaFMNj32h3gHAkuhI.roa
File: q8SJpLXKAHXaFMNj32h3gHAkuhI.roa (raw, json)
Hash identifier: pnGsg6QVulEcKBptf5RFCwNqFUz6hr2u8dhV7GIOEe8=
Subject key identifier: AB:C4:89:A4:B5:CA:00:75:DA:14:C3:63:DF:68:77:80:70:24:BA:12
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019F1921F506B5A8812F43D8AFEC2419AC47
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/q8SJpLXKAHXaFMNj32h3gHAkuhI.roa
Signing time: Tue 30 Jun 2026 15:24:43 +0000
ROA not before: Tue 30 Jun 2026 15:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 85.198.34.0/24 maxlen: 24
85.198.35.0/24 maxlen: 24
85.198.38.0/24 maxlen: 24
85.198.39.0/24 maxlen: 24
85.198.42.0/24 maxlen: 24
85.198.43.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.174.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
206.195.137.0/24 maxlen: 24
206.195.138.0/24 maxlen: 24
206.195.139.0/24 maxlen: 24
206.195.140.0/24 maxlen: 24
206.195.141.0/24 maxlen: 24
206.195.142.0/24 maxlen: 24
206.195.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:21:f5:06:b5:a8:81:2f:43:d8:af:ec:24:19:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jun 30 15:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abc489a4b5ca0075da14c363df6877807024ba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:8d:80:1e:ff:c1:b3:5e:58:3c:3f:6f:00:
18:01:66:c0:4d:04:55:3a:7b:e3:06:c1:45:21:b8:
47:83:a8:4d:bb:1d:6f:a2:73:be:bb:a5:60:c8:82:
ee:e4:eb:d7:d5:85:58:27:69:bf:b6:fa:38:88:0b:
1d:10:55:5b:1a:b9:e5:55:68:26:b2:33:b5:46:f1:
dd:91:8b:bc:74:78:c1:88:83:63:66:3a:7f:79:43:
d1:4b:94:e8:c6:07:9e:bb:fb:02:de:be:d5:0e:ce:
1b:f1:1d:f4:a7:5e:1f:66:c9:7d:55:24:ce:7b:90:
13:49:9b:f7:bf:d0:ac:30:93:2d:4b:83:17:89:7e:
28:57:4f:da:3b:c2:ce:59:0f:79:54:6f:d9:6a:de:
4a:52:bd:c0:23:a1:d0:dc:99:52:e6:bd:61:3f:7c:
fd:38:6e:01:f6:73:32:d7:ed:d9:de:f7:e6:79:6e:
5d:a1:6f:10:49:fb:32:fa:fc:2f:61:b4:a8:6e:9c:
79:f3:4f:78:3f:62:c7:10:68:57:66:c5:39:24:67:
1f:94:4e:f2:49:55:39:05:39:da:59:d5:af:71:5d:
47:45:31:a0:f2:d8:91:24:f4:30:05:99:d1:d8:67:
d9:92:f9:a0:65:15:55:eb:fe:84:28:ca:cb:ed:87:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:89:A4:B5:CA:00:75:DA:14:C3:63:DF:68:77:80:70:24:BA:12
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/q8SJpLXKAHXaFMNj32h3gHAkuhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.34.0/23
85.198.38.0/23
85.198.42.0/23
91.123.12.0/22
190.106.174.0/24
190.106.177.0-190.106.182.255
190.106.184.0/24
206.195.137.0-206.195.143.255
Signature Algorithm: sha256WithRSAEncryption
72:3f:52:c2:7b:50:0b:4b:12:a6:86:f3:11:21:5a:27:a1:52:
c3:d8:07:e0:04:1a:37:52:fe:0a:48:13:25:38:c3:16:32:87:
de:3a:94:bf:6c:e5:34:0c:42:99:92:8e:f0:89:01:34:37:e5:
14:d4:61:1a:10:9b:78:90:0b:e1:58:41:bf:02:b3:c4:45:24:
4d:3e:b3:c5:42:59:a0:23:2f:5a:8a:f9:f5:20:fd:4e:94:40:
7b:35:12:45:18:04:ff:c5:42:44:87:e0:67:dc:ee:6d:a0:6a:
c0:eb:79:73:c6:ae:a3:29:6a:cb:de:65:10:48:17:7a:b6:a5:
33:4d:32:8e:49:89:52:10:48:71:55:38:d4:bc:d8:b7:76:a9:
06:40:66:f0:aa:b6:f2:90:6a:d2:1a:f4:44:01:87:d7:5f:49:
c5:e7:be:dd:9b:e8:1d:39:39:1c:ef:59:19:67:85:d0:5e:d9:
78:55:eb:a0:47:30:7d:a2:51:9c:1a:4e:c6:e2:19:4f:93:0b:
4f:2a:8c:35:73:d0:d4:02:b5:89:48:46:f1:ec:cf:ad:d9:3a:
6f:25:17:f9:04:b8:2e:dc:2a:3c:85:e9:96:85:f2:53:c7:46:
91:d7:cd:73:21:b7:f8:ce:df:d1:ca:1b:cd:21:86:ed:07:54:
ea:2e:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:07 2026 by rpki-client