Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ja9leRTamtjjwDLzd9dpQURfH4g.roa
File: ja9leRTamtjjwDLzd9dpQURfH4g.roa (raw, json)
Hash identifier: HjWVqeyqIQfIvulmXZNtorxg/3EwHfhlq/Dc1BKiODI=
Subject key identifier: 8D:AF:65:79:14:DA:9A:D8:E3:C0:32:F3:77:D7:69:41:44:5F:1F:88
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A10BF4361600DF53718ACC715B233F35F6
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ja9leRTamtjjwDLzd9dpQURfH4g.roa
Signing time: Mon 05 Oct 2026 12:05:16 +0000
ROA not before: Mon 05 Oct 2026 12:05:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
85.8.156.0/24 maxlen: 24
85.8.157.0/24 maxlen: 24
85.8.158.0/24 maxlen: 24
85.8.159.0/24 maxlen: 24
85.8.160.0/24 maxlen: 24
85.8.161.0/24 maxlen: 24
85.8.162.0/24 maxlen: 24
85.8.163.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
139.28.32.0/24 maxlen: 24
139.28.33.0/24 maxlen: 24
139.28.34.0/24 maxlen: 24
139.28.35.0/24 maxlen: 24
141.98.112.0/24 maxlen: 24
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
2a02:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f4:36:16:00:df:53:71:8a:cc:71:5b:23:3f:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 5 12:05:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8daf657914da9ad8e3c032f377d76941445f1f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:82:05:7b:b8:b8:fd:57:06:a8:f8:ef:fe:
89:bc:11:1a:54:72:02:c2:28:78:d2:42:ec:b6:b4:
a2:c1:ea:c8:e4:9c:3e:5e:e9:7a:2b:31:97:a7:a4:
ce:f4:2a:5c:40:15:9c:d6:bb:3b:dd:bf:7f:19:88:
14:21:04:a0:e2:f8:c0:aa:bd:8f:43:5c:df:d8:99:
cb:e4:47:37:f9:5a:94:91:c4:9a:37:95:41:30:c1:
86:57:81:a0:07:43:9b:38:c6:24:be:86:36:5a:5b:
8e:4c:98:e8:9e:60:d2:5e:69:ac:ca:26:4f:f5:ee:
bc:f9:fb:8a:c8:85:07:5d:cf:9d:96:61:e4:16:2f:
e3:33:46:93:6f:83:9c:52:b8:0f:48:c2:c8:fc:74:
bc:d8:0c:13:6d:53:b6:2e:41:a2:be:02:be:c2:77:
ee:ec:e8:58:92:b7:15:4f:65:30:31:68:bd:7e:8e:
3b:13:e8:fb:4d:c2:00:de:02:e3:80:1e:43:7a:fe:
97:07:65:f9:ab:bb:f2:f2:67:4d:1c:ab:49:e6:ff:
7f:af:f4:50:1b:ba:5d:5c:77:d7:40:fc:2e:7f:59:
30:fd:73:1f:cd:da:51:78:c4:29:08:f5:fe:ed:f3:
1c:54:dd:2c:94:b4:16:38:29:f7:9a:44:8a:dd:1c:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:65:79:14:DA:9A:D8:E3:C0:32:F3:77:D7:69:41:44:5F:1F:88
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ja9leRTamtjjwDLzd9dpQURfH4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
77.241.75.0/24
85.8.156.0-85.8.163.255
93.190.10.0/23
139.28.32.0/22
141.98.112.0/24
194.169.92.0/22
IPv6:
2a02:f240::/29
Signature Algorithm: sha256WithRSAEncryption
47:36:0d:f1:19:ae:21:8f:a3:75:33:75:78:a8:65:28:6c:4f:
a4:47:12:dd:fc:2b:47:eb:35:db:e7:d6:54:41:ae:13:0f:d5:
c8:85:1f:2e:f6:6f:0a:54:a2:ec:6f:32:ea:18:09:2e:12:46:
97:47:c2:72:35:93:7c:9d:ec:ee:a3:ca:4c:f2:a9:aa:2d:a5:
c1:13:6d:94:d4:d1:21:8d:c3:b6:a8:8b:91:96:c0:7f:35:17:
a2:bf:01:01:f1:70:69:85:c4:82:e9:e1:ba:93:fd:58:e0:44:
37:22:99:5a:de:0c:1b:16:53:f6:7a:6c:9e:59:5b:04:e6:2d:
f7:2e:78:33:03:aa:29:78:7e:ea:87:48:0a:ac:4d:1c:1a:fa:
8c:fe:48:a7:b1:78:c4:71:6b:b4:1d:71:ef:55:16:36:f4:13:
fd:f8:08:f5:a2:4a:72:9e:f5:af:45:92:a4:bc:a4:38:ce:62:
f8:7c:97:76:01:7e:b6:ed:51:f7:ab:11:f0:a8:d5:58:44:42:
75:ed:87:5f:14:ae:43:3b:4d:56:8f:7e:ed:e9:4a:f3:37:87:
07:0a:20:58:09:d3:b7:8f:d6:76:65:77:e3:a9:0a:9e:1a:d8:
d2:b4:1a:a2:c7:33:d9:ad:ac:83:d6:b3:08:fd:39:fc:4d:62:
b5:b5:88:0a
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAaEL9DYWAN9TcYrMcVsjPzX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYxMDA1MTIwNTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGFmNjU3OTE0ZGE5YWQ4ZTNjMDMyZjM3N2Q3Njk0MTQ0NWYxZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbWCBXu4uP1XBqj47/6JvBEaVHIC
wih40kLstrSiwerI5Jw+Xul6KzGXp6TO9CpcQBWc1rs73b9/GYgUIQSg4vjAqr2P
Q1zf2JnL5Ec3+VqUkcSaN5VBMMGGV4GgB0ObOMYkvoY2WluOTJjonmDSXmmsyiZP
9e68+fuKyIUHXc+dlmHkFi/jM0aTb4OcUrgPSMLI/HS82AwTbVO2LkGivgK+wnfu
7OhYkrcVT2UwMWi9fo47E+j7TcIA3gLjgB5Dev6XB2X5q7vy8mdNHKtJ5v9/r/RQ
G7pdXHfXQPwuf1kw/XMfzdpReMQpCPX+7fMcVN0slLQWOCn3mkSK3Ry+8QIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFI2vZXkU2prY48Ay83fXaUFEXx+IMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvamE5bGVSVGFtdGpqd0RMemQ5ZHBRVVJmSDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQCPrYgAwQA
TfFLMAwDBAJVCJwDBAJVCKADBAFdvgoDBAKLHCADBACNYnADBALCqVwwDQQCAAIw
BwMFAyoC8kAwDQYJKoZIhvcNAQELBQADggEBAEc2DfEZriGPo3UzdXioZShsT6RH
Et38K0frNdvn1lRBrhMP1ciFHy72bwpUouxvMuoYCS4SRpdHwnI1k3yd7O6jykzy
qaotpcETbZTU0SGNw7aoi5GWwH81F6K/AQHxcGmFxILp4bqT/VjgRDcimVreDBsW
U/Z6bJ5ZWwTmLfcueDMDqil4fuqHSAqsTRwa+oz+SKexeMRxa7Qdce9VFjb0E/34
CPWiSnKe9a9FkqS8pDjOYvh8l3YBfrbtUferEfCo1VhEQnXth18UrkM7TVaPfu3p
SvM3hwcKIFgJ07eP1nZld+OpCp4a2NK0GqLHM9mtrIPWswj9OfxNYrW1iAo=
-----END CERTIFICATE-----
Generated at Tue Oct 13 02:23:29 2026 by rpki-client