Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/JDXE9ys32CWN1r6HQe8JdDKGwHU.roa
File: JDXE9ys32CWN1r6HQe8JdDKGwHU.roa (raw, json)
Hash identifier: z0K+IpcIaetv0JVCV28tmSZWrPzlKK6+pwHmn80nszI=
Subject key identifier: 24:35:C4:F7:2B:37:D8:25:8D:D6:BE:87:41:EF:09:74:32:86:C0:75
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019F27AB939A52110B221EE3CE8FD7C3E7C9
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/JDXE9ys32CWN1r6HQe8JdDKGwHU.roa
Signing time: Fri 03 Jul 2026 11:09:43 +0000
ROA not before: Fri 03 Jul 2026 11:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.0.0/21 maxlen: 21
5.0.8.0/21 maxlen: 21
5.0.16.0/21 maxlen: 21
5.0.24.0/21 maxlen: 21
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.64.0/21 maxlen: 21
5.0.72.0/21 maxlen: 21
5.0.80.0/21 maxlen: 21
5.0.88.0/21 maxlen: 21
5.0.96.0/21 maxlen: 21
5.0.104.0/21 maxlen: 21
5.0.112.0/21 maxlen: 21
5.0.120.0/21 maxlen: 21
5.0.128.0/19 maxlen: 19
5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.32.0/21 maxlen: 21
5.155.40.0/21 maxlen: 21
5.155.48.0/21 maxlen: 21
5.155.56.0/21 maxlen: 21
5.155.64.0/19 maxlen: 19
5.155.64.0/21 maxlen: 21
5.155.72.0/21 maxlen: 21
5.155.80.0/21 maxlen: 21
5.155.88.0/21 maxlen: 21
5.155.96.0/19 maxlen: 19
5.155.96.0/21 maxlen: 21
5.155.104.0/21 maxlen: 21
5.155.112.0/21 maxlen: 21
5.155.120.0/21 maxlen: 21
5.155.128.0/19 maxlen: 19
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/19 maxlen: 19
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.0.0/19 maxlen: 19
31.9.32.0/20 maxlen: 20
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
91.144.48.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.64.0/21 maxlen: 21
94.47.72.0/21 maxlen: 21
94.47.80.0/21 maxlen: 21
94.47.88.0/21 maxlen: 21
94.47.96.0/19 maxlen: 19
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
193.124.208.0/20 maxlen: 20
194.58.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:ab:93:9a:52:11:0b:22:1e:e3:ce:8f:d7:c3:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jul 3 11:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2435c4f72b37d8258dd6be8741ef09743286c075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:9d:1c:c7:a7:71:d1:7b:69:b8:e9:40:b8:
d7:c4:2d:99:3e:0f:fb:51:75:24:0d:ef:7f:2d:fd:
d0:87:29:42:8f:2c:c6:82:2f:a6:3b:fa:c2:e3:56:
bc:c5:95:37:c2:46:7a:7a:a8:d2:8e:8d:6f:78:13:
f7:1a:14:0e:93:83:2f:9f:bf:15:3d:eb:ec:a6:8e:
2a:17:98:d4:3d:b5:cb:10:03:2f:ce:73:26:a0:af:
bc:c0:ed:4c:7d:87:31:ac:1b:f8:85:4b:a5:29:aa:
e6:76:62:cd:9f:20:1c:20:86:4e:b7:42:50:4f:7b:
20:e3:de:d9:25:40:e4:cb:97:e9:a3:b0:b2:b8:44:
da:60:7e:14:ab:67:2a:15:d4:18:7d:19:47:5a:f5:
d9:bb:ae:17:bd:31:06:47:f3:1b:8d:be:4b:44:aa:
1b:e4:88:7c:4b:ae:22:ca:65:3e:13:0e:ae:0f:71:
4e:0b:82:4c:6e:9f:32:9b:c2:9d:be:b8:e9:73:29:
4f:6d:6d:d4:0c:50:ea:ac:97:36:ec:6d:69:82:5a:
8d:2d:a9:10:31:e7:ed:8c:cf:e2:58:fe:99:6a:98:
1e:a7:a1:23:e7:02:34:ae:41:3d:08:67:2f:b1:8a:
18:1f:0a:57:1b:e7:2c:9a:91:c3:6f:6f:d3:14:8c:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:C4:F7:2B:37:D8:25:8D:D6:BE:87:41:EF:09:74:32:86:C0:75
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/JDXE9ys32CWN1r6HQe8JdDKGwHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.0.0-31.9.51.255
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0/18
94.47.0.0/17
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
193.124.208.0/20
194.58.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:f3:d7:23:7a:f5:d9:73:33:82:ea:31:e3:10:c5:95:52:29:
26:f0:26:24:e4:3d:64:d3:46:2f:ad:56:91:c0:f2:23:0f:95:
f6:6b:bc:71:ba:96:ef:0c:da:f2:47:f6:12:1c:2d:f0:51:ef:
6d:37:3d:e2:37:41:08:fd:fe:cd:1b:fc:b3:12:41:41:b7:17:
11:e6:97:86:b3:81:d5:c5:73:9b:48:b8:5f:eb:18:f7:10:25:
9b:c5:73:0b:7d:d8:09:67:b3:d2:b6:5b:9a:db:e9:f4:d8:b2:
d7:b2:e0:aa:32:be:b8:80:5c:4d:01:53:14:23:3b:93:7d:b3:
de:19:b2:54:2c:39:77:fb:c9:30:26:60:f4:04:23:57:6a:9d:
10:ab:57:87:e4:e9:6f:df:12:f0:27:77:bd:16:49:9b:9a:b2:
de:66:71:33:34:57:1b:36:3f:cb:d4:a8:21:89:ac:87:33:a2:
53:af:23:5c:95:87:0b:51:27:dd:09:b2:51:6c:68:b0:93:57:
da:5f:27:17:14:07:54:a0:8d:2c:c1:c4:a2:fc:b7:88:48:48:
cc:d9:aa:5f:0c:6b:e6:cb:ab:00:aa:22:f1:5c:4f:3d:86:18:
65:1d:6e:19:ee:f8:2d:85:48:9d:d7:83:1a:29:de:b6:0b:e8:
ab:b9:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:01 2026 by rpki-client