Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/JwJC0UfVx2yP-mSQUmaeE6489fo.roa
File: JwJC0UfVx2yP-mSQUmaeE6489fo.roa (raw, json)
Hash identifier: o+FCpnH2YPzRgIVDWsXsTK09syhlSv7w2Eljzdddi4E=
Subject key identifier: 27:02:42:D1:47:D5:C7:6C:8F:FA:64:90:52:66:9E:13:AE:3C:F5:FA
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019FD7040BFF513067D8A4EBEAD15FC30AF0
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/JwJC0UfVx2yP-mSQUmaeE6489fo.roa
Signing time: Thu 06 Aug 2026 12:19:54 +0000
ROA not before: Thu 06 Aug 2026 12:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 45.151.112.0/22 maxlen: 23
45.157.32.0/23 maxlen: 23
45.159.192.0/23 maxlen: 23
213.185.88.0/22 maxlen: 24
2a0b:3c41:2::/48 maxlen: 48
2a0c:9e02::/32 maxlen: 40
2a0e:cbc4::/32 maxlen: 32
2a0e:cbc5::/32 maxlen: 32
2a0e:cbc6::/32 maxlen: 32
2a0e:cbc7::/32 maxlen: 32
2a0e:eb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:04:0b:ff:51:30:67:d8:a4:eb:ea:d1:5f:c3:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 6 12:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=270242d147d5c76c8ffa649052669e13ae3cf5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:10:ed:7d:e9:eb:c5:15:76:72:76:0f:f1:
43:69:9c:ee:93:d7:28:4c:d7:62:b7:42:96:e9:fa:
bb:86:6f:7b:ef:11:0e:70:1c:e8:23:a8:a0:3b:b1:
7f:5d:c1:20:7e:ac:8d:1b:35:c8:c0:15:83:39:80:
b9:b4:9f:b4:f1:22:fc:75:73:5b:12:c7:91:52:2f:
cc:9e:d7:a9:77:c0:8b:da:44:d9:1c:49:cc:ee:0e:
d3:74:39:f0:e3:09:7c:19:2c:0c:2c:af:07:45:8e:
dd:9d:24:fd:4e:71:47:ec:e1:55:27:c9:3c:32:09:
78:73:0f:ad:a1:84:12:11:18:93:d3:8c:58:f6:40:
ff:cb:09:8d:5d:72:4c:a9:82:8b:b5:76:e9:69:cb:
21:93:86:e9:56:77:50:58:42:2f:db:5c:ff:d1:1b:
35:92:39:0d:e4:7e:fd:ef:67:ac:51:cf:cb:10:18:
ed:46:cf:e4:31:d7:5a:ff:ab:57:ec:b5:06:ec:d7:
01:09:67:0c:ee:01:34:47:e1:a9:1e:c6:c2:5c:94:
e0:b9:c6:a7:af:6a:a4:4c:96:91:70:d0:38:35:7f:
c2:c8:9f:e4:05:9d:71:23:8b:42:0b:bf:7b:0a:72:
d8:cd:e8:ff:6b:cb:b9:85:87:ef:e0:76:d7:8a:4e:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:42:D1:47:D5:C7:6C:8F:FA:64:90:52:66:9E:13:AE:3C:F5:FA
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/JwJC0UfVx2yP-mSQUmaeE6489fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.112.0/22
45.157.32.0/23
45.159.192.0/23
213.185.88.0/22
IPv6:
2a0b:3c41:2::/48
2a0c:9e02::/32
2a0e:cbc4::/30
2a0e:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
86:a7:4b:8a:b7:73:57:db:1b:a5:0c:9d:0d:36:2f:08:5d:42:
68:e7:61:4d:a7:20:20:dd:54:6d:18:05:70:75:6a:b0:cb:3e:
78:3d:b4:50:f5:1b:a1:6c:df:e8:27:37:9e:5a:f2:31:16:b6:
8d:a1:25:32:1d:9a:15:32:4a:0e:e7:51:32:34:5e:cc:28:54:
d3:1c:00:53:8c:6e:88:93:fa:d7:e3:a6:62:a2:b6:ee:aa:99:
cd:fb:15:4d:35:21:64:8b:9c:d5:90:a1:6a:a8:9a:b4:02:a0:
4c:c4:a5:40:22:73:dc:73:55:2b:de:b4:b1:70:6f:c5:c6:7b:
9f:0a:28:da:38:79:2e:99:42:7d:f5:f0:8b:d9:ed:f9:bf:bd:
7e:1b:c7:58:2b:6b:e6:05:8e:4d:71:54:c4:85:de:de:4e:00:
31:ca:d0:21:f1:1e:18:4f:31:14:45:aa:c2:e8:36:3e:d8:70:
fa:0f:ec:a4:1e:f0:ef:a4:51:4a:39:9e:9b:9f:db:a3:b8:3f:
45:c9:78:55:a1:a9:ae:09:99:40:9a:14:92:18:e3:f6:5c:3b:
e4:1e:a5:77:cf:f8:87:0b:d4:d9:92:3b:66:ba:ed:d0:bc:68:
eb:4c:13:02:0e:00:ff:9e:67:08:94:87:1c:a0:f3:64:bb:b7:
42:e4:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:38 2026 by rpki-client