Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/JWU_Eybq_voKppgJUuEJOKd0rVU.roa
File: JWU_Eybq_voKppgJUuEJOKd0rVU.roa (raw, json)
Hash identifier: njhB/xlo+7JtkXiroETjNYgdxqkXiy6zH7cizTgQk+0=
Subject key identifier: 25:65:3F:13:26:EA:FE:FA:0A:A6:98:09:52:E1:09:38:A7:74:AD:55
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019F3B90A769E9D6080DEECB463805B4A1A6
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/JWU_Eybq_voKppgJUuEJOKd0rVU.roa
Signing time: Tue 07 Jul 2026 07:52:43 +0000
ROA not before: Tue 07 Jul 2026 07:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15817
IP address blocks: 31.220.120.0/21 maxlen: 21
37.202.0.0/21 maxlen: 21
45.144.184.0/22 maxlen: 22
46.30.56.0/21 maxlen: 21
153.92.192.0/20 maxlen: 20
156.67.232.0/21 maxlen: 21
157.97.32.0/20 maxlen: 20
176.52.240.0/21 maxlen: 21
178.16.56.0/21 maxlen: 21
185.15.192.0/22 maxlen: 22
185.166.20.0/22 maxlen: 22
185.181.132.0/22 maxlen: 22
185.215.156.0/22 maxlen: 22
185.221.104.0/22 maxlen: 22
185.224.152.0/22 maxlen: 22
185.227.112.0/22 maxlen: 22
185.227.112.0/24 maxlen: 24
185.227.113.0/24 maxlen: 24
185.227.114.0/24 maxlen: 24
185.227.115.0/24 maxlen: 24
185.233.52.0/22 maxlen: 22
185.237.64.0/22 maxlen: 22
185.243.132.0/22 maxlen: 22
185.247.148.0/24 maxlen: 24
185.247.149.0/24 maxlen: 24
185.247.151.0/24 maxlen: 24
188.94.248.0/21 maxlen: 21
193.53.246.0/23 maxlen: 23
193.53.250.0/23 maxlen: 23
2a03:2a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:90:a7:69:e9:d6:08:0d:ee:cb:46:38:05:b4:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Jul 7 07:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25653f1326eafefa0aa6980952e10938a774ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:62:e2:9b:b5:35:b1:bc:72:bc:30:f2:d5:
55:0f:ba:d3:5e:3c:7b:f8:37:76:21:90:a5:e2:80:
d2:21:91:21:c8:30:65:ec:60:99:ff:3e:72:33:07:
f0:fd:b0:c5:6a:36:fd:fd:b0:f0:ed:56:84:54:0d:
01:2e:7b:a7:ee:f9:94:26:e5:16:07:50:cf:a7:50:
59:b3:2d:e9:fa:0d:97:d6:94:30:c0:d8:18:39:cf:
2f:b6:aa:4f:ab:42:a6:12:d9:e0:60:57:87:b8:76:
d4:00:23:d0:b3:58:4c:41:ee:be:d3:dc:b5:63:0d:
16:35:58:9e:cd:af:aa:70:e9:00:86:41:99:ad:67:
54:e1:2a:e6:54:2e:2f:3f:16:35:8f:2c:56:c7:93:
dc:1d:e7:77:d4:df:08:47:0c:94:ec:23:7d:f8:b4:
0a:e5:4a:8d:51:69:b4:bd:b8:af:73:2f:3a:8c:89:
a1:86:77:62:9c:f5:b8:00:ff:23:ff:e6:d5:c2:9f:
eb:b8:ec:15:7a:c6:14:9c:35:e5:3c:82:ac:18:72:
5b:9e:34:85:08:49:7e:b7:76:41:01:32:9a:f5:28:
80:ed:92:80:2c:37:16:d0:45:6e:72:b8:e5:33:b5:
89:8a:b6:8c:37:c7:1e:d6:13:10:4b:98:28:ab:16:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:65:3F:13:26:EA:FE:FA:0A:A6:98:09:52:E1:09:38:A7:74:AD:55
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/JWU_Eybq_voKppgJUuEJOKd0rVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.120.0/21
37.202.0.0/21
45.144.184.0/22
46.30.56.0/21
153.92.192.0/20
156.67.232.0/21
157.97.32.0/20
176.52.240.0/21
178.16.56.0/21
185.15.192.0/22
185.166.20.0/22
185.181.132.0/22
185.215.156.0/22
185.221.104.0/22
185.224.152.0/22
185.227.112.0/22
185.233.52.0/22
185.237.64.0/22
185.243.132.0/22
185.247.148.0/23
185.247.151.0/24
188.94.248.0/21
193.53.246.0/23
193.53.250.0/23
IPv6:
2a03:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
ab:2d:e4:bb:9c:c9:28:eb:9b:ce:92:ae:4f:e0:b9:70:e2:fd:
31:1e:04:4c:ad:b2:e2:1b:67:fe:d7:62:98:9c:34:05:2a:d4:
af:92:6a:2a:ee:b3:3a:57:1f:40:60:26:e9:9a:3d:d3:6b:f6:
c6:65:cb:9a:28:ad:cd:3e:42:09:df:36:02:8b:73:a0:47:7e:
9e:c5:c5:68:1e:bb:a2:2a:34:ef:48:d2:d9:b8:51:21:ee:8d:
df:72:98:b2:f8:2b:7d:74:1c:d1:09:f9:34:d4:9b:04:14:6e:
67:f6:62:16:fb:69:98:33:db:86:19:f3:1e:30:32:28:b1:b7:
32:6b:83:42:4d:64:dc:fd:ff:04:fc:31:fa:a9:eb:d4:21:44:
f1:c2:52:96:ce:9b:7c:ff:27:15:22:94:84:a4:79:b2:fb:5e:
6a:be:b3:d2:dd:54:50:32:ed:98:8f:f6:8c:87:4f:dd:a9:c2:
60:4e:b1:b6:a8:4b:01:55:64:37:7a:e1:d1:6a:f5:46:8e:e1:
3d:9e:b5:26:b7:c5:69:3a:a1:cb:e6:18:ed:6f:05:8f:f1:14:
2a:ad:7e:dc:42:04:08:33:93:70:d2:0f:b9:35:29:0e:6f:cb:
88:c3:6e:c5:5a:e4:83:ca:45:6e:09:32:88:81:c4:78:40:98:
99:8b:00:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:36 2026 by rpki-client