Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/P2J1nRzzQX1ckJSyajMxiE_aMP4.roa
File: P2J1nRzzQX1ckJSyajMxiE_aMP4.roa (raw, json)
Hash identifier: p7r4VtJbeTT6fBJB2r4iHlIyVAkJmdfB7fMidGSZSww=
Subject key identifier: 3F:62:75:9D:1C:F3:41:7D:5C:90:94:B2:6A:33:31:88:4F:DA:30:FE
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01A01A817A8590078A4A4B613E25BE08BC71
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/P2J1nRzzQX1ckJSyajMxiE_aMP4.roa
Signing time: Wed 19 Aug 2026 14:51:28 +0000
ROA not before: Wed 19 Aug 2026 14:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:7::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:127::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:197::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:227::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:247::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:857::/48 maxlen: 48
2a03:5000:858::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:81:7a:85:90:07:8a:4a:4b:61:3e:25:be:08:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 19 14:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f62759d1cf3417d5c9094b26a3331884fda30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:65:bf:5e:bc:01:88:98:4e:4d:44:92:9b:
77:32:4c:5d:2f:6e:54:03:41:53:16:10:d9:f6:00:
b9:79:b9:1c:6c:49:5b:c2:d0:ab:e2:8d:71:70:0f:
e3:db:5c:86:a4:17:14:9b:99:9b:7d:6b:50:f4:ed:
f4:e7:ff:c2:ce:1f:c8:c5:c6:25:04:f4:fc:79:f8:
c4:18:b3:c8:37:32:d0:9f:26:f3:73:8f:48:55:bc:
aa:35:4a:4f:52:61:5e:b6:2b:e3:7b:ad:8a:b0:e8:
8b:2a:ba:3b:e7:2e:0b:24:8a:58:5a:cd:d5:1e:8d:
1a:23:40:03:fa:51:b1:61:e0:6e:fe:2a:46:66:a9:
cd:fd:1c:75:72:47:25:36:a4:f8:3e:8a:c4:57:c2:
f9:05:c0:34:2a:8d:db:66:58:42:e8:2e:20:f9:7a:
f1:1d:ab:f2:d5:74:04:7a:23:49:84:48:1d:e6:1c:
01:62:e8:cf:f9:40:99:02:40:16:14:45:11:74:a1:
38:e9:e9:10:36:91:98:e2:67:c2:28:ac:95:61:39:
60:c8:48:94:a0:70:98:fa:66:62:e4:6d:a4:4c:4a:
0a:96:69:c0:26:2b:03:4a:31:75:79:73:5a:c3:98:
cf:e0:62:2b:fe:ce:f6:7a:73:52:c4:55:a1:f7:d7:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:75:9D:1C:F3:41:7D:5C:90:94:B2:6A:33:31:88:4F:DA:30:FE
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/P2J1nRzzQX1ckJSyajMxiE_aMP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:7::/48
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:127::/48
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:197::/48
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:227::/48
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:247::/48
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:857::-2a03:5000:858:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
85:02:07:94:81:a3:e9:82:1d:41:57:22:ab:81:07:a3:64:93:
97:25:18:21:e7:b0:20:d5:4d:5a:ec:79:df:00:ec:eb:4c:01:
da:91:6e:8f:ca:8a:50:bd:b5:cc:36:22:76:3c:9e:d2:27:67:
0e:d3:23:7b:57:cd:70:a5:c1:44:cd:73:15:3f:99:85:b3:83:
40:0f:40:68:20:a7:b8:85:5e:9a:76:27:c3:98:b2:7b:3a:c9:
7f:b0:ab:dc:7b:55:01:30:9b:77:10:9f:73:64:6a:ca:80:ea:
5a:4e:29:c4:e5:fd:6b:86:ca:73:f8:7d:4a:92:f5:c8:52:c1:
9a:8d:df:d2:d6:2a:38:94:7e:09:07:bf:2a:d7:c5:5d:39:2e:
ea:93:3d:d5:0d:2f:00:c4:75:c6:d7:c8:db:a5:09:49:1f:d4:
54:8b:e9:33:10:1f:02:f0:2b:c3:84:3e:4d:ff:f8:76:b6:37:
30:ed:0b:87:eb:7e:40:de:c1:e3:a0:eb:d4:c6:5d:84:16:b5:
bb:68:5f:fb:c4:12:7f:6d:0c:22:8d:a3:17:9d:d0:e3:e3:c4:
61:78:c6:cf:19:07:5c:3b:49:9d:dc:1b:56:6e:40:1a:2d:0b:
bb:27:49:ac:35:b9:83:4a:e9:d3:cf:ec:fd:fb:92:03:36:9e:
a7:34:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:45:55 2026 by rpki-client