Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/jenAviEaQmIbPMWtx5o0NZSX9oU.roa
File: jenAviEaQmIbPMWtx5o0NZSX9oU.roa (raw, json)
Hash identifier: ceLGOQlTo6t7tHbWcNV1MEtUJJ8tvpbbdLO95JOmpEM=
Subject key identifier: 8D:E9:C0:BE:21:1A:42:62:1B:3C:C5:AD:C7:9A:34:35:94:97:F6:85
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 01A1CB7E16AC02804688EDBB3625475C49D1
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/jenAviEaQmIbPMWtx5o0NZSX9oU.roa
Signing time: Wed 11 Nov 2026 16:43:20 +0000
ROA not before: Wed 11 Nov 2026 16:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.8.211.0/24 maxlen: 24
82.12.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
2a02:88fe::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:7e:16:ac:02:80:46:88:ed:bb:36:25:47:5c:49:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Nov 11 16:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8de9c0be211a42621b3cc5adc79a34359497f685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:0d:05:00:6c:cf:47:f0:2c:7d:3e:bf:bc:
28:f3:99:87:c4:fb:30:e4:64:a3:33:8c:ef:cb:30:
d3:23:dd:08:02:f4:9c:60:44:72:57:b2:00:d4:10:
0a:c2:1d:fe:36:d1:a7:92:18:84:a8:de:b5:84:f2:
10:f3:1f:33:d4:cd:15:e4:3d:f2:a3:0d:67:8b:0d:
00:ec:7d:b1:3b:91:06:57:fd:aa:21:fb:33:2a:9c:
97:46:e4:38:d7:17:b7:c8:6b:b4:ba:af:5b:e6:39:
d2:5b:5d:71:a0:48:7e:15:b3:b8:11:fe:23:3a:b4:
1c:9b:fc:8a:0e:33:86:70:27:39:e9:81:a3:e5:73:
d9:f9:70:3b:f3:57:26:f8:e1:19:ad:d7:da:f4:e2:
67:01:7c:c2:37:f0:ef:bd:82:72:c9:5f:2b:67:e5:
53:50:34:24:70:3e:ea:2f:64:2b:7b:96:9c:ae:bc:
41:bd:ed:b1:8c:18:e7:96:7b:90:da:c7:bf:cf:0e:
85:e9:42:6b:4b:ed:88:7a:f6:2d:8b:4e:16:0e:b1:
95:23:3c:55:92:6e:1b:e6:03:a0:ac:30:da:e4:ff:
37:89:af:d2:28:7a:dc:a0:48:c3:4b:d9:1d:b4:85:
87:c4:71:9d:81:ba:f3:da:27:0c:b1:9c:e1:cc:dc:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:C0:BE:21:1A:42:62:1B:3C:C5:AD:C7:9A:34:35:94:97:F6:85
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/jenAviEaQmIbPMWtx5o0NZSX9oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
81.96.0.0/12
82.0.0.0-82.20.255.255
82.28.0.0/16
82.30.0.0-82.37.255.255
82.42.0.0-82.45.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
a2:14:07:b4:15:02:9b:5f:3a:27:f9:92:c1:25:b6:0a:85:89:
fe:28:20:77:32:7c:0e:95:a1:9c:a1:32:a3:09:0a:fa:24:99:
87:85:f7:88:2e:33:91:11:57:17:9e:89:b1:29:5b:8c:e9:8b:
3b:7b:d7:d4:b8:0d:67:58:70:52:87:ce:0f:ef:b0:ac:aa:dd:
ff:8b:d3:d7:70:38:34:82:3c:28:85:80:24:f9:c7:c9:07:0d:
68:d6:40:28:2a:66:34:ac:e6:fd:06:9c:e6:02:31:68:cf:79:
9f:d4:10:17:c4:91:4f:05:04:3c:d1:9b:15:92:b1:9d:7d:4b:
b8:83:cd:b2:83:93:4b:a4:90:10:8c:73:73:19:39:d8:e9:1b:
86:54:ab:2d:4e:86:5e:c2:48:1f:26:e0:a2:ac:3c:b2:3f:ca:
c5:ef:90:e1:59:1a:94:61:7d:84:c2:64:ca:09:61:72:74:05:
cd:cf:78:ba:38:91:b3:03:67:b0:d1:52:a8:38:6e:1a:e3:6c:
7f:ba:9d:83:09:6b:09:2e:a3:66:f7:12:3f:ed:85:70:cc:ac:
80:78:88:da:d9:38:e5:2f:29:70:ff:ca:c0:13:c3:42:81:77:
93:1a:31:98:63:a1:31:ad:06:31:c0:2c:29:83:f7:10:c0:e6:
f9:de:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:49 2026 by rpki-client