Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa
File: jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa (raw, json)
Hash identifier: qSVicAoSlx92lOm4hijWey1zcFGYeV01I7K4wDaTK40=
Subject key identifier: 8E:FB:31:36:C8:59:94:D4:CC:B1:F1:96:B3:64:A1:D7:14:5B:4B:8A
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 019DD2D6D12BC04F2FBCC7862833CDDEFFD2
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa
Signing time: Tue 28 Apr 2026 06:46:26 +0000
ROA not before: Tue 28 Apr 2026 06:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.148.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.151.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
109.69.164.0/22 maxlen: 22
109.69.164.0/24 maxlen: 24
109.69.165.0/24 maxlen: 24
109.69.166.0/24 maxlen: 24
109.69.167.0/24 maxlen: 24
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
2a03:8480::/33 maxlen: 33
2a03:8480:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:d6:d1:2b:c0:4f:2f:bc:c7:86:28:33:cd:de:ff:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Apr 28 06:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8efb3136c85994d4ccb1f196b364a1d7145b4b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:07:a6:35:e3:a1:d5:59:33:e7:63:a2:94:
5d:a0:da:db:69:c8:7b:4c:7b:82:f9:50:22:37:fd:
f4:52:f2:4b:bc:20:3b:65:27:d4:62:3e:3d:e3:67:
9e:6e:03:96:b8:da:91:fd:e4:d8:53:b4:af:ee:78:
1d:64:92:40:8a:b8:a8:ee:8b:33:71:b4:a5:0e:72:
99:0e:16:bf:04:a7:95:10:70:ee:d1:26:7a:d7:7f:
da:c4:bc:75:4e:e3:e8:95:aa:fa:26:4a:2d:ab:8c:
85:ba:d2:0f:b8:55:23:81:e1:a6:4c:51:1a:23:10:
95:49:00:44:67:cd:9b:b8:70:4f:f6:89:0d:53:0c:
da:2b:f7:01:78:f7:44:3c:dc:56:09:c0:d2:06:29:
86:ae:bc:4b:3f:47:ea:71:3f:b7:ba:71:b2:6d:30:
2c:35:2b:fe:03:a1:ba:d5:16:3f:3a:dc:3c:21:ba:
26:88:b7:1e:87:65:58:b9:11:d1:7a:a2:0c:c4:4e:
a9:8e:5a:ef:f7:78:0d:c5:45:7f:92:51:84:a1:75:
c3:e6:e6:2e:dd:0c:8f:b7:9d:48:09:c0:c3:55:19:
a6:0e:45:1f:9b:72:6b:21:a5:b9:8b:01:e4:f7:d8:
9d:94:5f:69:21:e1:b2:23:11:de:18:6b:6c:94:c3:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FB:31:36:C8:59:94:D4:CC:B1:F1:96:B3:64:A1:D7:14:5B:4B:8A
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.148.255
95.107.150.0/23
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
109.69.164.0/22
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
85:b8:73:cc:78:61:a2:b3:9c:f8:53:99:2e:ec:53:5e:03:e6:
19:73:04:2f:92:45:93:ef:f8:4c:7d:c7:36:e0:aa:6c:a9:85:
44:c6:e3:0a:33:59:ba:a2:81:3c:17:66:85:48:46:19:55:2e:
78:48:49:6d:ee:56:75:35:c2:70:dc:8c:99:ab:e4:8c:d0:0f:
24:89:40:4b:7c:4c:3b:82:0b:b4:f9:69:4b:f3:1a:98:4d:64:
7b:50:9e:31:18:68:b5:76:ec:ea:fa:5b:c2:a8:3d:fc:44:0b:
98:4f:2d:8e:e7:fc:41:63:b5:62:da:95:89:df:df:ad:fe:84:
bc:21:00:03:48:74:a4:43:ca:30:18:48:e4:0b:44:17:72:68:
ab:17:80:17:a2:59:8d:19:c1:45:76:30:00:3c:a9:80:37:1d:
5c:a1:32:8e:74:09:cf:b4:f0:07:d7:ce:57:94:e3:73:20:45:
20:59:26:a2:5b:e0:13:a2:47:a0:92:ad:a8:07:45:2c:c9:b3:
25:54:37:03:71:78:c0:6f:59:46:0d:5e:21:66:55:2d:66:36:
54:36:26:ec:5d:b7:5d:c5:8c:9f:0c:c5:ad:ec:38:31:06:e7:
ae:ef:25:fb:b1:cc:5e:f9:91:40:4b:99:fd:da:5d:23:41:bf:
1e:13:60:fb
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZ3S1tErwE8vvMeGKDPN3v/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4
MjA4NzMwHhcNMjYwNDI4MDY0NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWZiMzEzNmM4NTk5NGQ0Y2NiMWYxOTZiMzY0YTFkNzE0NWI0YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQHpjXjodVZM+djopRdoNrbach7
THuC+VAiN/30UvJLvCA7ZSfUYj4942eebgOWuNqR/eTYU7Sv7ngdZJJAirio7osz
cbSlDnKZDha/BKeVEHDu0SZ613/axLx1TuPolar6Jkotq4yFutIPuFUjgeGmTFEa
IxCVSQBEZ82buHBP9okNUwzaK/cBePdEPNxWCcDSBimGrrxLP0fqcT+3unGybTAs
NSv+A6G61RY/Otw8IbomiLceh2VYuRHReqIMxE6pjlrv93gNxUV/klGEoXXD5uYu
3QyPt51ICcDDVRmmDkUfm3JrIaW5iwHk99idlF9pIeGyIxHeGGtslMONNwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFI77MTbIWZTUzLHxlrNkodcUW0uKMB8GA1UdIwQY
MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt
ZDY3YTYxZDU0MTZkLzEvanZzeE5zaFpsTlRNc2ZHV3MyU2gxeFJiUzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk
LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBZBAIAATBTAwQDLv+QMAwD
BAdfa4ADBABfa5QDBAFfa5YDBAFfa5wwDAMEAF9rnwMEAF9rrjALAwQEX2uwAwMC
X2gDBAJtRaQDBAONCMgDBAK5dpQDBAK5euQwDQQCAAIwBwMFACoDhIAwDQYJKoZI
hvcNAQELBQADggEBAIW4c8x4YaKznPhTmS7sU14D5hlzBC+SRZPv+Ex9xzbgqmyp
hUTG4wozWbqigTwXZoVIRhlVLnhISW3uVnU1wnDcjJmr5IzQDySJQEt8TDuCC7T5
aUvzGphNZHtQnjEYaLV27Or6W8KoPfxEC5hPLY7n/EFjtWLalYnf363+hLwhAANI
dKRDyjAYSOQLRBdyaKsXgBeiWY0ZwUV2MAA8qYA3HVyhMo50Cc+08AfXzleU43Mg
RSBZJqJb4BOiR6CSragHRSzJsyVUNwNxeMBvWUYNXiFmVS1mNlQ2Juxdt13FjJ8M
xa3sODEG567vJfuxzF75kUBLmf3aXSNBvx4TYPs=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:52 2026 by rpki-client