Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/kJEm8FnSW7mVLY5IWWP6qEWfx9E.roa
File: kJEm8FnSW7mVLY5IWWP6qEWfx9E.roa (raw, json)
Hash identifier: Ej+aimb9neSZBoIZ2FZPgurRvFvkfzoPExucJgSd/L4=
Subject key identifier: 90:91:26:F0:59:D2:5B:B9:95:2D:8E:48:59:63:FA:A8:45:9F:C7:D1
Certificate issuer: /CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Certificate serial: 019F23684A201663B1165AC179CA46189B33
Authority key identifier: 27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/kJEm8FnSW7mVLY5IWWP6qEWfx9E.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
45.95.211.0/24 maxlen: 24
85.155.156.0/22 maxlen: 24
91.218.77.0/24 maxlen: 24
109.202.224.0/23 maxlen: 24
134.255.242.0/24 maxlen: 24
178.16.230.0/23 maxlen: 24
185.53.33.0/24 maxlen: 24
185.231.228.0/22 maxlen: 24
185.234.101.0/24 maxlen: 24
185.253.62.0/23 maxlen: 24
194.156.132.0/23 maxlen: 24
194.156.150.0/23 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:20:16:63:b1:16:5a:c1:79:ca:46:18:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=909126f059d25bb9952d8e485963faa8459fc7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:dc:76:5b:02:15:44:ce:fb:c6:26:02:15:
86:85:1c:43:db:3a:99:53:d0:24:d8:26:b2:a8:c9:
09:d9:11:49:57:12:8e:14:d7:ac:c7:67:1d:d9:9a:
c5:80:a4:03:62:64:5a:73:bc:e3:e9:5a:dc:5a:0b:
7a:1a:dd:73:e6:cf:80:e3:d1:ef:2e:24:14:fb:24:
55:23:1b:d3:ac:cc:a0:00:90:01:65:b2:04:51:d5:
7b:07:09:1d:55:26:96:fc:e2:19:97:0c:0f:1d:24:
80:dd:ad:3d:66:d3:6c:69:48:a6:f8:73:6f:95:02:
6e:c5:0e:70:a3:9b:a7:57:31:80:fa:1c:88:b2:03:
4e:5f:e9:dd:f4:fa:10:8a:45:89:95:28:bb:36:81:
b2:02:f7:1d:2a:2a:e7:f3:ef:83:39:70:6b:f8:b2:
e1:c5:b2:2d:0d:82:88:a5:6b:05:5e:ca:8f:09:7b:
50:a2:33:8d:ab:14:8f:d2:40:f4:c9:0a:d8:6a:78:
20:ec:2e:53:49:b8:9a:fd:3b:35:9e:05:f7:42:75:
f0:da:bb:8e:cf:35:b9:7d:aa:6b:1a:c1:0f:28:0c:
af:75:ca:26:46:da:ac:1d:46:d1:45:86:16:54:d1:
d0:84:95:2b:17:6d:cf:e5:07:92:c9:98:f8:68:8b:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:26:F0:59:D2:5B:B9:95:2D:8E:48:59:63:FA:A8:45:9F:C7:D1
X509v3 Authority Key Identifier:
keyid:27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/kJEm8FnSW7mVLY5IWWP6qEWfx9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
85.155.156.0/22
91.218.77.0/24
109.202.224.0/23
134.255.242.0/24
178.16.230.0/23
185.53.33.0/24
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
194.156.132.0/23
194.156.150.0/23
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
54:c6:10:01:fa:39:a8:3c:32:9a:45:c1:f4:1e:a0:72:0b:ed:
64:7e:ab:de:87:5f:0d:86:69:22:dc:0d:53:56:ba:ba:77:fc:
a9:aa:37:f4:73:8d:a0:d2:7f:71:60:78:19:f8:75:93:07:fa:
d2:db:00:7e:6d:8f:94:4c:b2:e7:56:8e:7c:a4:eb:49:5e:96:
f9:58:7d:bb:13:25:74:0d:f9:b3:3b:8f:bf:30:88:d9:39:ba:
ed:98:e1:9b:a2:a2:3a:7b:07:94:51:c6:10:76:d2:43:cb:4e:
39:9e:57:a9:97:05:22:9a:87:81:c3:be:50:34:47:f8:c1:d5:
c1:17:c1:f5:af:f8:07:78:9f:91:79:c9:e0:29:af:c9:a4:96:
55:c8:5d:a7:8b:0e:2d:f0:47:ac:d6:92:8e:fa:49:55:e0:5d:
b9:d1:a4:8b:00:d3:b5:5b:c0:29:13:2b:ce:3f:b4:ad:1c:20:
06:6a:19:c0:8a:19:5a:85:49:c0:c0:dc:6d:56:69:18:df:54:
6c:c8:ce:af:53:31:4a:97:09:9c:17:20:a7:ed:d7:12:a5:ed:
70:b1:bc:eb:6c:8f:2e:76:99:aa:8c:a7:69:ad:08:79:d6:03:
53:52:ce:1a:7c:ee:32:42:4b:fa:d8:b1:27:5c:c7:2f:67:ba:
2b:a7:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:39 2026 by rpki-client