Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/JwMa_OKFEJkfBud_nRF4Yr1EBcI.roa
File: JwMa_OKFEJkfBud_nRF4Yr1EBcI.roa (raw, json)
Hash identifier: /VsHsI3B3+4j22i8JBP8N6Qag2/UqB/6t7N5JIn6DXQ=
Subject key identifier: 27:03:1A:FC:E2:85:10:99:1F:06:E7:7F:9D:11:78:62:BD:44:05:C2
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019DFC2C90949BA0C0AF900EBDB51C2FE550
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/JwMa_OKFEJkfBud_nRF4Yr1EBcI.roa
Signing time: Wed 06 May 2026 07:24:32 +0000
ROA not before: Wed 06 May 2026 07:24:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16202
IP address blocks: 77.64.128.0/17 maxlen: 20
77.64.128.0/18 maxlen: 18
77.64.128.0/19 maxlen: 19
77.64.146.0/23 maxlen: 23
77.64.160.0/19 maxlen: 19
77.64.192.0/19 maxlen: 19
77.64.192.0/20 maxlen: 20
77.64.208.0/20 maxlen: 20
77.64.224.0/20 maxlen: 20
77.64.240.0/20 maxlen: 20
77.64.252.0/23 maxlen: 23
77.64.254.0/23 maxlen: 23
83.221.64.0/19 maxlen: 23
83.221.64.0/20 maxlen: 23
83.221.64.0/21 maxlen: 21
83.221.72.0/21 maxlen: 21
83.221.80.0/20 maxlen: 20
83.221.80.0/21 maxlen: 21
83.221.88.0/21 maxlen: 21
89.186.128.0/19 maxlen: 24
89.186.128.0/20 maxlen: 20
89.186.128.0/21 maxlen: 21
89.186.136.0/21 maxlen: 21
89.186.144.0/20 maxlen: 20
89.186.144.0/21 maxlen: 21
89.186.152.0/21 maxlen: 21
92.206.0.0/16 maxlen: 16
92.206.0.0/17 maxlen: 17
92.206.0.0/18 maxlen: 18
92.206.64.0/18 maxlen: 23
92.206.128.0/18 maxlen: 23
92.206.160.0/19 maxlen: 19
92.206.190.0/23 maxlen: 23
92.206.192.0/18 maxlen: 23
92.206.224.0/19 maxlen: 19
95.168.128.0/19 maxlen: 19
95.168.128.0/20 maxlen: 20
95.168.144.0/20 maxlen: 20
185.44.148.0/22 maxlen: 22
185.44.150.0/23 maxlen: 23
217.68.160.0/19 maxlen: 19
217.68.160.0/20 maxlen: 20
217.68.176.0/20 maxlen: 20
2a00:c1a0::/32 maxlen: 32
2a00:c1a0::/34 maxlen: 34
2a00:c1a0:4000::/34 maxlen: 34
2a00:c1a0:8000::/34 maxlen: 34
2a00:c1a0:c000::/34 maxlen: 34
2a02:2454:8000::/33 maxlen: 36
2a02:2457:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:2c:90:94:9b:a0:c0:af:90:0e:bd:b5:1c:2f:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: May 6 07:24:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27031afce28510991f06e77f9d117862bd4405c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:38:c9:93:d7:2b:3e:6e:e4:14:11:1a:16:
bf:73:d1:38:1b:d3:49:85:b4:92:ce:a7:ac:e6:b9:
5d:5e:ef:5a:7c:1b:85:21:a3:90:43:9c:31:c3:2c:
3d:71:3b:e1:ae:8b:55:4e:fc:26:45:a1:0d:d9:f7:
3d:04:d3:5d:82:fc:7b:b9:f1:0a:38:ea:d2:42:78:
3a:de:32:0a:54:0d:89:db:9c:fd:89:b0:80:2d:fa:
1f:50:53:3e:a4:00:c2:d4:37:1f:26:7e:ef:4d:0f:
fe:b6:29:f3:98:e7:d0:0a:b1:89:84:27:ff:23:1d:
63:f0:99:de:87:a1:4c:83:55:2e:f4:14:e3:fc:3d:
28:6f:83:5b:82:57:04:bb:48:0b:fb:74:da:33:30:
0d:5d:6b:2f:71:16:c9:a6:64:b2:bb:97:9c:38:c9:
d8:da:38:24:12:d7:c8:84:0a:15:d9:60:32:99:2f:
c1:a0:73:fd:ac:e7:2d:14:48:a5:54:fc:6a:eb:44:
cd:14:0b:14:f3:e9:9b:81:b5:8c:bd:58:f4:ed:90:
e9:69:23:97:ff:3d:01:59:a1:20:90:92:e9:ce:32:
62:e2:aa:8f:5f:f2:c3:7e:4d:ba:5a:7e:af:a0:c9:
2f:f2:e5:03:8b:89:9b:f2:35:d5:2b:83:9a:c3:2b:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:1A:FC:E2:85:10:99:1F:06:E7:7F:9D:11:78:62:BD:44:05:C2
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/JwMa_OKFEJkfBud_nRF4Yr1EBcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.128.0/17
83.221.64.0/19
89.186.128.0/19
92.206.0.0/16
95.168.128.0/19
185.44.148.0/22
217.68.160.0/19
IPv6:
2a00:c1a0::/32
2a02:2454:8000::/33
2a02:2457:100::/40
Signature Algorithm: sha256WithRSAEncryption
08:92:aa:c6:c9:8e:94:4e:d0:c9:fb:4f:89:6c:cc:84:f1:a3:
f7:61:4a:12:03:34:f9:11:82:a9:e8:80:f8:75:0d:f1:cb:9c:
81:10:4b:b7:ae:6c:04:cc:10:fa:23:e1:ce:f5:8b:a9:a4:52:
86:8a:d1:e4:1a:c0:b6:02:f4:21:a8:31:b5:3f:42:a2:12:44:
8d:00:60:47:1c:51:ff:f9:85:31:10:98:65:52:76:57:84:0d:
41:9c:84:0f:c9:df:db:48:5e:95:2f:8e:d5:ab:4b:c5:8f:fc:
16:47:fd:cb:7b:50:1b:60:29:c1:79:f1:8d:f4:b4:e4:c7:6e:
da:4b:1d:30:1b:94:67:51:ea:e8:07:2a:54:e9:e2:df:fa:f5:
7d:f8:a4:96:9f:ff:99:ef:03:69:64:c6:14:a4:40:81:29:17:
17:a4:13:3e:fb:36:1b:91:5b:e6:79:bf:22:d6:a6:5f:99:86:
3a:81:3a:d3:4e:c1:f7:4d:61:43:f5:cb:a2:22:6f:e0:7a:11:
1c:43:01:97:fb:24:84:1b:ba:3f:cf:84:ae:6f:0a:41:82:ac:
df:78:18:76:92:e6:0d:44:85:1a:30:b3:2a:4c:3c:b8:da:3e:
df:9d:68:46:63:4a:97:93:13:12:e7:e6:47:92:29:46:df:c9:
b8:fd:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:40 2026 by rpki-client