Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JuInzTOTm8X2FMF8mF2n0wYO9ms.roa
File: JuInzTOTm8X2FMF8mF2n0wYO9ms.roa (raw, json)
Hash identifier: iV9YYgBUnWCrn7VWyHgfBFo9W0m/UViZ/c7nJIh2rlU=
Subject key identifier: 26:E2:27:CD:33:93:9B:C5:F6:14:C1:7C:98:5D:A7:D3:06:0E:F6:6B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F89C322B1CC890001BC22F5DDB7A2CDDF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JuInzTOTm8X2FMF8mF2n0wYO9ms.roa
Signing time: Wed 22 Jul 2026 12:18:14 +0000
ROA not before: Wed 22 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.83.188.0/22 maxlen: 24
45.85.224.0/22 maxlen: 24
45.86.248.0/22 maxlen: 24
45.87.22.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
45.136.72.0/22 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
45.144.216.0/22 maxlen: 24
45.146.52.0/24 maxlen: 24
45.146.56.0/22 maxlen: 24
45.148.24.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.154.139.0/24 maxlen: 24
45.157.96.0/23 maxlen: 24
45.157.113.0/24 maxlen: 24
45.157.114.0/24 maxlen: 24
45.157.115.0/24 maxlen: 24
45.159.247.0/24 maxlen: 24
89.36.36.0/24 maxlen: 24
89.38.38.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.251.3.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.32.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
185.51.193.0/24 maxlen: 24
185.51.194.0/23 maxlen: 23
185.114.60.0/22 maxlen: 22
185.227.32.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.243.246.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:c3:22:b1:cc:89:00:01:bc:22:f5:dd:b7:a2:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e227cd33939bc5f614c17c985da7d3060ef66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:70:4b:56:e5:6d:0d:18:b9:f4:f6:f8:ec:
fd:5b:42:84:c1:1d:3c:c3:78:15:17:5f:01:b6:80:
bb:b0:51:72:c3:81:5f:14:71:55:b3:35:90:9c:2d:
48:41:80:6d:03:80:ee:66:97:ac:66:82:e1:d6:01:
16:9d:e6:e8:e9:f9:23:cd:46:47:f8:92:ed:46:67:
a0:bf:2a:f8:4a:ad:c7:bc:29:a3:ea:ee:a1:22:9f:
dc:8e:ed:a9:b1:97:5b:8c:43:6d:78:f6:47:2e:8c:
86:27:2d:98:cd:77:c5:06:74:a8:96:c9:41:78:49:
91:f9:1c:40:0e:2e:53:29:72:c2:91:38:e3:93:bb:
2d:99:8b:69:e2:5f:0f:c9:da:6d:73:2a:82:b6:b9:
83:f2:56:7a:bc:73:72:9e:9e:d3:3b:60:c3:0a:75:
a9:25:eb:ba:ea:f9:e9:c0:1d:e8:b1:20:f2:e4:94:
a3:cb:bb:ca:f9:4e:28:0c:db:5e:d8:53:78:a9:c3:
5b:19:ac:40:1f:2b:74:d8:e1:3b:0b:4d:77:99:33:
51:03:cc:b6:a8:d2:b2:2a:3c:f8:6d:fa:47:49:7f:
8a:87:4e:f1:52:f9:c6:f9:53:9a:9a:7e:ce:f5:bb:
92:19:93:c0:f1:be:19:43:7e:c5:72:aa:12:9e:30:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E2:27:CD:33:93:9B:C5:F6:14:C1:7C:98:5D:A7:D3:06:0E:F6:6B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JuInzTOTm8X2FMF8mF2n0wYO9ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.85.224.0/22
45.86.248.0/22
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.133.252.0/24
45.133.254.0/24
45.136.72.0/22
45.143.192.0/24
45.143.194.0/24
45.144.216.0/22
45.146.52.0/24
45.146.56.0/22
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/23
45.157.113.0-45.157.115.255
45.159.247.0/24
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:70:0f:9b:39:24:41:18:0a:ec:7f:d1:e0:5e:82:e6:12:84:
e4:c1:8a:8b:51:79:ff:5e:ae:e3:49:c5:37:32:c8:46:ee:67:
aa:86:f6:0c:5c:33:c5:92:4c:06:0b:cc:46:c7:a1:63:72:1b:
ff:f4:5a:eb:51:e9:8e:24:6e:04:85:fc:cb:bc:4e:d2:6d:ed:
0b:a4:8f:38:37:12:82:2b:3d:f4:c3:60:58:e9:e2:7d:6a:61:
e9:b6:ab:39:9c:e4:1e:16:77:9f:8f:5e:6d:a9:28:57:32:d4:
f2:17:06:f1:30:83:68:16:bc:e2:e6:f1:20:34:6d:06:e5:ab:
2e:1e:a0:a9:63:0e:4d:54:26:6d:d3:52:bf:a1:7f:ec:10:0e:
f9:bb:6b:43:8b:e1:ce:98:2b:17:72:07:66:25:61:79:3c:ec:
e3:f0:74:63:db:64:bc:59:a7:c8:92:c7:70:fc:24:6e:b5:45:
33:3a:47:17:db:b6:c7:31:2f:a5:6a:70:55:83:bc:e9:9e:dc:
93:45:76:74:3e:34:4d:f6:c6:34:03:d6:e6:0d:b9:07:02:85:
89:9d:54:04:72:94:d9:41:e1:3f:77:19:fb:0b:de:7b:6e:90:
2a:94:80:8c:73:c4:44:a9:24:c8:6d:fe:51:a2:be:b7:79:cd:
45:a9:3a:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:24 2026 by rpki-client