Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JFbIUCVE5PZk2IPjaObFSMj_npw.roa
File: JFbIUCVE5PZk2IPjaObFSMj_npw.roa (raw, json)
Hash identifier: TTF1djCvIeno1DNibWpMp05VadTRi01XaluZAekAnw0=
Subject key identifier: 24:56:C8:50:25:44:E4:F6:64:D8:83:E3:68:E6:C5:48:C8:FF:9E:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A032359C277D66CAB97E5DBEED167BE473
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JFbIUCVE5PZk2IPjaObFSMj_npw.roa
Signing time: Mon 24 Aug 2026 05:19:29 +0000
ROA not before: Mon 24 Aug 2026 05:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.240.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:35:9c:27:7d:66:ca:b9:7e:5d:be:ed:16:7b:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 05:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2456c8502544e4f664d883e368e6c548c8ff9e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:54:76:c4:46:1b:a4:07:97:1b:12:e5:91:
c2:ca:46:b2:23:00:56:85:6e:99:e1:91:86:be:4e:
19:4a:74:93:f9:9c:de:e7:b1:82:5f:3e:ae:6a:f4:
8e:9e:4f:dd:6f:2c:b5:fa:80:a4:20:80:6d:4b:f9:
fd:04:1e:53:db:fd:bc:5d:3e:eb:9d:86:8d:08:76:
85:57:a9:67:8b:eb:8b:2f:ca:cf:3c:d0:30:dc:4a:
66:22:d7:c6:a5:78:12:b7:a4:cb:b9:00:3d:3f:da:
8f:db:2d:f6:a0:14:07:c8:c7:2a:2a:56:5d:a4:e5:
c3:9d:0c:99:b1:11:18:02:94:f6:12:05:48:fb:ec:
36:77:53:05:b5:ee:4a:e4:e3:a1:c9:1a:ad:a3:9d:
0f:d5:55:87:c5:62:c9:4d:30:64:19:2b:b8:ec:3f:
95:bc:61:67:ec:ba:e8:b3:12:3e:af:f8:90:05:16:
6b:6f:11:b4:3e:70:20:35:54:a5:c8:7a:86:08:66:
83:2b:22:12:ae:80:e2:77:13:d1:e8:b2:3a:b0:ae:
a7:a2:32:e9:bf:7a:6b:93:d6:3e:69:3d:56:93:7a:
24:f2:00:0f:97:94:7d:1e:ce:f5:7a:ed:10:9c:8c:
82:76:75:76:14:07:92:19:8b:22:02:56:b3:02:29:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:56:C8:50:25:44:E4:F6:64:D8:83:E3:68:E6:C5:48:C8:FF:9E:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JFbIUCVE5PZk2IPjaObFSMj_npw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.121.46.0/24
93.123.116.0/24
94.156.14.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c6:47:93:a3:05:cc:7c:25:bb:87:0d:43:cf:bf:58:85:35:
93:62:db:4e:2d:4c:a6:12:a1:06:99:f8:4f:83:82:b0:34:47:
56:51:43:50:1f:03:af:69:75:12:67:e8:c5:d2:32:f3:4d:4b:
7a:81:09:12:b8:d6:5b:af:d5:e6:e4:25:ef:45:87:d2:9d:a8:
29:15:a3:c1:69:02:a3:6b:f8:58:2e:75:e4:4f:ad:e5:ef:ba:
01:19:d6:82:31:a5:33:da:fc:ce:3f:62:ab:e9:a2:02:c4:e2:
aa:57:f2:dd:d4:9b:0b:36:a7:52:14:f6:6e:c4:16:a0:ef:79:
de:ca:17:ef:2e:6b:77:07:6f:20:72:07:e4:4e:8b:82:ad:d2:
f6:25:29:37:8c:58:11:c2:c3:97:bf:ba:67:d7:a8:db:ef:a6:
3f:70:e4:0e:ff:4b:a7:a8:71:63:e3:89:73:be:4f:8a:5a:56:
ef:79:b3:08:b8:3e:29:87:ff:e5:44:db:44:6c:8c:70:a1:9c:
8c:03:fa:e7:c4:9f:05:66:8c:c4:43:41:6c:bb:a9:3c:48:37:
75:90:32:6e:34:9e:72:eb:5e:71:a6:a9:3f:4c:3c:c9:52:b9:
8a:5f:45:41:87:52:29:aa:24:20:57:dd:6e:13:59:d1:bf:21:
97:bf:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:50:37 2026 by rpki-client