Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/Jkp9Zd26L_A1ZIR1VUq4tXYD330.roa
File: Jkp9Zd26L_A1ZIR1VUq4tXYD330.roa (raw, json)
Hash identifier: T7Gs4XIXZkJFeMoCVwkPW3PWWFtLrEdzuDaxySqJtw8=
Subject key identifier: 26:4A:7D:65:DD:BA:2F:F0:35:64:84:75:55:4A:B8:B5:76:03:DF:7D
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 019FDB36DEC91DD7B770B233A0E05DC1EBC1
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/Jkp9Zd26L_A1ZIR1VUq4tXYD330.roa
Signing time: Fri 07 Aug 2026 07:53:54 +0000
ROA not before: Fri 07 Aug 2026 07:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1140
IP address blocks: 94.198.152.0/21 maxlen: 21
94.198.152.0/24 maxlen: 24
94.198.153.0/24 maxlen: 24
94.198.154.0/24 maxlen: 24
94.198.155.0/24 maxlen: 24
94.198.156.0/24 maxlen: 24
94.198.157.0/24 maxlen: 24
94.198.158.0/24 maxlen: 24
94.198.159.0/24 maxlen: 24
185.76.132.0/22 maxlen: 22
185.76.132.0/24 maxlen: 24
185.76.133.0/24 maxlen: 24
185.76.134.0/24 maxlen: 24
185.76.135.0/24 maxlen: 24
193.176.144.0/24 maxlen: 24
2a00:d78::/32 maxlen: 32
2a00:d78::/48 maxlen: 48
2a00:d78:147::/48 maxlen: 48
2a00:d78:153::/48 maxlen: 48
2a00:d78:155::/48 maxlen: 48
2a00:d78:157::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:36:de:c9:1d:d7:b7:70:b2:33:a0:e0:5d:c1:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Aug 7 07:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264a7d65ddba2ff035648475554ab8b57603df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:5b:ef:75:b3:49:c3:85:0c:08:7b:b0:62:
e0:e8:a9:33:ce:c4:49:79:fa:4f:f3:10:b5:81:96:
62:5d:75:58:8c:c8:b6:8f:c3:61:d9:30:b0:75:7f:
4d:e7:ea:3c:3b:07:a2:29:d3:ea:b3:50:d7:04:5d:
a3:9d:ae:85:16:8b:31:97:d0:34:bc:2d:b0:65:ca:
bf:e1:d0:3f:c9:ef:f5:44:b6:68:e9:2a:b7:c5:7a:
1a:74:12:f2:a1:c7:54:e5:fc:f8:41:58:9c:6c:e1:
51:44:2a:78:dd:6f:8f:81:3c:9b:22:f5:e6:30:b2:
60:43:c8:a7:25:2d:66:cb:6b:42:26:72:6b:b1:cc:
19:18:52:81:fb:cf:b5:ee:cb:99:7b:a2:51:65:c0:
d2:18:9f:cb:dd:e2:22:84:59:be:d2:75:ce:96:6a:
35:09:dc:10:d1:81:c2:6a:81:10:d5:a0:e4:19:48:
bb:56:5d:5d:74:6e:cc:24:fd:ea:92:4d:f0:c6:c3:
ae:cb:b7:cf:da:9b:b3:df:c6:6a:58:24:0f:03:a7:
aa:7b:48:8d:9f:f2:1c:2a:6e:a8:c0:69:64:77:63:
70:46:60:27:6f:a4:3b:df:4c:88:c4:5a:a8:50:b3:
cd:2e:3b:0b:95:cd:d6:24:49:2d:da:ea:6a:6d:c2:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:7D:65:DD:BA:2F:F0:35:64:84:75:55:4A:B8:B5:76:03:DF:7D
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/Jkp9Zd26L_A1ZIR1VUq4tXYD330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.152.0/21
185.76.132.0/22
193.176.144.0/24
IPv6:
2a00:d78::/32
Signature Algorithm: sha256WithRSAEncryption
0c:45:7c:71:c5:39:97:22:6d:b4:8c:f9:38:55:01:d0:7b:3c:
bb:ed:63:95:b6:49:09:c8:cc:3a:cc:75:ee:43:1e:8d:97:d0:
85:0b:9b:ed:a7:f9:27:fd:75:dd:6e:a0:a9:ce:de:f4:a6:75:
62:a7:d1:9e:00:69:9d:7c:da:32:2b:a7:3c:27:5a:69:c3:68:
6f:f8:88:92:13:95:34:d4:be:bd:16:6a:dd:1c:10:f9:bf:cd:
b8:24:97:22:d5:37:c6:74:04:08:b1:ec:29:f1:f0:60:10:4a:
c8:76:5a:2b:10:4e:ed:8a:92:92:f7:45:c9:04:56:cc:72:6a:
b0:0d:37:7a:d4:72:ae:64:c5:b5:57:85:99:47:78:d9:25:35:
2c:61:67:84:ca:c7:af:0c:4e:81:ba:47:74:fd:39:f0:59:5c:
9c:f8:af:4a:ab:d3:e9:32:bb:99:d3:e4:85:3f:9d:12:d5:6d:
01:7c:73:53:f3:3d:d6:93:41:94:0c:12:4a:21:76:57:40:1e:
ba:a0:2c:d0:9c:35:55:0c:e4:23:29:ad:e8:c8:f5:7c:a6:8a:
28:50:ff:0f:17:1d:02:ab:e7:db:c2:48:c9:93:f1:94:39:c8:
f0:e7:a0:93:15:e6:86:50:fc:87:ec:c7:e5:18:85:ea:14:b6:
6b:03:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:10 2026 by rpki-client