Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jnyP4Iz3HEFKDH0UzjuKCsfPw1E.roa
File: jnyP4Iz3HEFKDH0UzjuKCsfPw1E.roa (raw, json)
Hash identifier: bOXeRBuLmZ+KvblnM9owmOJo3fgmSgOsh51kzF4o4+w=
Subject key identifier: 8E:7C:8F:E0:8C:F7:1C:41:4A:0C:7D:14:CE:3B:8A:0A:C7:CF:C3:51
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019D03160D1079D4C67C1DB96B2F956BC42A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jnyP4Iz3HEFKDH0UzjuKCsfPw1E.roa
Signing time: Wed 18 Mar 2026 22:34:29 +0000
ROA not before: Wed 18 Mar 2026 22:34:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:16:0d:10:79:d4:c6:7c:1d:b9:6b:2f:95:6b:c4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 18 22:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e7c8fe08cf71c414a0c7d14ce3b8a0ac7cfc351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:70:50:78:58:dc:1c:5e:cf:54:7d:af:f5:
8d:5f:83:fc:f1:b6:7f:62:16:4d:dd:8c:02:22:a4:
d4:42:db:3b:7a:29:e2:e1:15:cb:71:ee:23:1d:30:
16:4b:a1:b4:6d:66:d5:e1:14:d7:90:35:5a:75:ed:
80:00:48:54:66:f3:96:86:27:0a:42:c9:dc:4e:0b:
51:72:96:7c:af:9d:90:93:97:77:fe:e9:18:b3:5b:
cd:91:e1:87:89:d0:80:88:ab:dc:af:bb:b5:fa:5e:
df:82:b8:31:ab:7a:a6:a1:ed:00:56:2b:25:2c:2a:
5c:2d:fa:d0:a9:d7:1f:05:50:37:b7:52:82:df:f3:
16:bf:bc:e8:5f:a9:90:98:1b:23:50:5a:b4:d6:24:
75:73:e9:88:6a:96:89:5a:d5:59:43:9a:bd:a2:ab:
4c:a5:ee:93:9c:0a:55:cc:80:93:aa:a8:c0:a6:31:
b2:1b:0d:d7:9a:b1:1b:be:a0:b0:ba:35:d3:61:d3:
70:5e:91:f2:5b:4c:5d:99:6b:3b:8d:5f:3e:34:89:
55:bf:86:08:8b:70:c0:16:c0:a4:74:4b:55:e9:7f:
56:8d:7c:79:85:d5:97:00:cb:b2:5d:54:52:52:b4:
4c:c8:d6:e2:53:1e:a3:5f:d2:17:2d:98:ba:a6:14:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:8F:E0:8C:F7:1C:41:4A:0C:7D:14:CE:3B:8A:0A:C7:CF:C3:51
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jnyP4Iz3HEFKDH0UzjuKCsfPw1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
45.136.2.0/23
128.0.119.0/24
185.117.21.0/24
185.117.23.0/24
185.144.101.0/24
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.209.0-193.201.211.255
194.36.102.0/23
194.124.66.0/23
195.85.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:56:60:da:19:87:17:bf:9d:46:f8:b6:bc:64:d5:44:0a:1b:
8b:61:00:77:55:65:fc:1a:cd:48:47:0f:0d:e6:12:ee:f9:b0:
2e:bd:65:5d:c4:7b:eb:a6:40:ec:35:75:76:fd:92:82:a2:30:
ce:7f:4b:48:24:c3:3c:f9:5a:d6:62:f4:74:16:75:43:8c:4a:
45:e9:f8:e0:b0:df:73:14:bd:d3:19:e8:0f:95:19:f4:48:82:
2a:fd:4e:56:d9:b4:4f:47:0a:f0:f7:66:a4:81:18:56:56:db:
41:01:05:da:2a:e6:a9:1e:ab:74:76:fa:fe:87:d2:54:dc:3c:
62:44:9a:2b:ac:4f:e8:db:cd:8f:31:99:1a:ca:14:fb:68:ff:
14:15:13:d1:f7:48:88:9d:25:7f:a3:cb:bd:ae:75:d4:1c:c5:
c0:c3:d4:bb:4b:8b:09:bd:93:16:d9:ce:ef:7f:95:e4:a5:92:
0d:b9:70:25:93:1c:82:ae:4e:b0:60:72:ea:c3:1b:0d:a6:99:
c5:55:dd:8d:76:c6:e9:d5:d4:06:d5:d1:b7:80:1e:83:7d:a1:
51:7e:b0:75:26:fa:d9:d9:0b:9f:71:b2:e7:5b:9f:cd:1e:c6:
21:17:e0:b0:01:5b:7c:30:fe:85:d8:35:cc:5b:72:77:6b:ef:
0c:18:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:11 2026 by rpki-client