Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/JVXvmmMy_3Rgxee3gGFNj3BkDCc.roa
File: JVXvmmMy_3Rgxee3gGFNj3BkDCc.roa (raw, json)
Hash identifier: i3LWc7bQKIWKO8s04pc6lrHhw6NXYJ3YLnt1YQyB8kc=
Subject key identifier: 25:55:EF:9A:63:32:FF:74:60:C5:E7:B7:80:61:4D:8F:70:64:0C:27
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019FD72E2800DB9AA1F35EEE5D3676D53382
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/JVXvmmMy_3Rgxee3gGFNj3BkDCc.roa
Signing time: Thu 06 Aug 2026 13:05:54 +0000
ROA not before: Thu 06 Aug 2026 13:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211381
IP address blocks: 145.63.128.0/24 maxlen: 24
145.63.129.0/24 maxlen: 24
145.63.130.0/24 maxlen: 24
145.63.131.0/24 maxlen: 24
145.63.132.0/24 maxlen: 24
145.63.133.0/24 maxlen: 24
145.63.135.0/24 maxlen: 24
145.63.136.0/24 maxlen: 24
145.63.137.0/24 maxlen: 24
145.63.138.0/24 maxlen: 24
145.63.139.0/24 maxlen: 24
145.63.140.0/24 maxlen: 24
145.63.141.0/24 maxlen: 24
188.137.176.0/24 maxlen: 24
188.137.177.0/24 maxlen: 24
188.137.179.0/24 maxlen: 24
188.137.180.0/24 maxlen: 24
188.137.181.0/24 maxlen: 24
188.137.182.0/24 maxlen: 24
188.137.183.0/24 maxlen: 24
188.137.224.0/24 maxlen: 24
188.137.225.0/24 maxlen: 24
188.137.227.0/24 maxlen: 24
188.137.228.0/24 maxlen: 24
188.137.229.0/24 maxlen: 24
188.137.230.0/24 maxlen: 24
188.137.231.0/24 maxlen: 24
188.137.232.0/24 maxlen: 24
188.137.233.0/24 maxlen: 24
188.137.234.0/24 maxlen: 24
188.137.235.0/24 maxlen: 24
188.137.236.0/24 maxlen: 24
188.137.237.0/24 maxlen: 24
188.137.238.0/24 maxlen: 24
188.137.239.0/24 maxlen: 24
188.137.240.0/24 maxlen: 24
188.137.241.0/24 maxlen: 24
188.137.242.0/24 maxlen: 24
188.137.243.0/24 maxlen: 24
188.137.245.0/24 maxlen: 24
188.137.246.0/24 maxlen: 24
188.137.247.0/24 maxlen: 24
188.137.248.0/24 maxlen: 24
188.137.249.0/24 maxlen: 24
188.137.250.0/24 maxlen: 24
188.137.251.0/24 maxlen: 24
188.137.252.0/24 maxlen: 24
188.137.253.0/24 maxlen: 24
188.137.254.0/24 maxlen: 24
188.137.255.0/24 maxlen: 24
212.43.144.0/24 maxlen: 24
212.43.145.0/24 maxlen: 24
212.43.146.0/24 maxlen: 24
212.43.147.0/24 maxlen: 24
212.43.148.0/24 maxlen: 24
212.43.149.0/24 maxlen: 24
212.43.150.0/24 maxlen: 24
212.43.151.0/24 maxlen: 24
212.43.152.0/24 maxlen: 24
212.43.153.0/24 maxlen: 24
212.43.154.0/24 maxlen: 24
212.43.155.0/24 maxlen: 24
212.43.156.0/24 maxlen: 24
212.43.157.0/24 maxlen: 24
212.43.158.0/24 maxlen: 24
212.43.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:2e:28:00:db:9a:a1:f3:5e:ee:5d:36:76:d5:33:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Aug 6 13:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2555ef9a6332ff7460c5e7b780614d8f70640c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:d5:45:0b:07:55:55:8b:87:00:0b:4e:0d:
a4:48:c5:39:7b:c5:82:8b:f6:b2:5b:cc:23:13:ff:
de:db:69:45:e9:d6:88:7a:d5:95:3c:d2:df:1e:74:
90:45:d1:bd:75:bd:78:46:11:47:4d:12:2f:26:10:
b5:e2:b5:e8:bb:f4:75:34:62:93:dd:bb:38:2a:74:
50:e3:b5:87:a7:d7:d6:af:d3:ba:52:c2:2e:30:12:
c4:aa:02:ef:da:fd:21:87:7e:4c:8e:5f:1d:75:6e:
bb:58:f0:e7:d8:9c:39:2c:e7:88:25:e7:89:d2:37:
d5:1a:53:7f:ca:0b:4c:e0:1e:1a:d0:3c:5b:a6:54:
93:3e:50:64:a7:0d:d1:a7:9f:ee:fe:a1:28:d1:09:
d1:75:91:32:b7:4e:10:8a:2b:80:0d:32:0d:08:05:
1d:a8:51:e9:40:db:8b:28:d6:2a:3c:e8:0a:13:04:
5f:3a:d6:4d:4a:d5:06:bb:ce:08:5c:c3:e9:e5:66:
87:4f:19:42:52:5f:20:a8:31:b3:96:a1:21:72:65:
ca:f4:6c:f0:17:d2:95:44:bb:73:b1:75:6f:52:41:
da:c2:e7:78:f5:ae:ac:44:08:fb:9e:49:28:af:42:
c3:73:ef:d7:f7:ed:00:b6:1d:5f:ef:5c:cd:79:84:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:EF:9A:63:32:FF:74:60:C5:E7:B7:80:61:4D:8F:70:64:0C:27
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/JVXvmmMy_3Rgxee3gGFNj3BkDCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.63.128.0-145.63.133.255
145.63.135.0-145.63.141.255
188.137.176.0/23
188.137.179.0-188.137.183.255
188.137.224.0/23
188.137.227.0-188.137.243.255
188.137.245.0-188.137.255.255
212.43.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:08:5f:c4:f2:24:59:6a:ae:2f:8e:2e:4b:a3:91:c9:24:3a:
f3:c6:fd:47:35:5e:a6:d8:36:7b:81:fe:ad:eb:06:91:c4:cd:
77:92:f4:b7:31:c0:f7:65:46:20:83:0e:2d:96:de:1b:c8:a3:
cd:c5:61:2b:2b:79:c7:25:b9:52:7b:3a:bf:b3:cc:14:74:d1:
37:97:f1:78:b8:76:cf:ee:4e:c0:d0:be:25:cd:32:05:b7:5c:
b0:3a:f7:dd:ef:e3:11:71:77:22:70:3f:32:4d:f0:ff:e6:c4:
6f:55:d6:29:58:f6:72:79:13:7e:25:38:62:e5:8f:37:57:3f:
76:f7:ff:65:e0:44:97:5b:5f:b8:94:f4:4f:92:5f:01:73:25:
7a:d5:df:27:72:12:7e:1e:11:89:af:6f:06:6a:c8:dc:a5:47:
a8:bb:1c:a2:5b:95:f1:d4:c0:89:9b:fa:75:d7:af:e5:51:25:
e3:f3:3e:be:a5:af:0c:df:18:25:95:b9:f7:49:ae:e4:94:d3:
bd:38:a1:d7:37:38:f1:b1:51:ed:2b:cd:76:a7:bf:ad:20:92:
d7:bc:61:d7:ab:2c:ea:08:dc:5b:6a:3f:ee:73:71:94:78:2f:
06:80:1c:42:e9:04:31:fb:83:cf:a2:e6:1f:80:8f:9e:81:be:
95:ba:e2:b5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZ/XLigA25qh817uXTZ21TOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1
NDQ5N2UwHhcNMjYwODA2MTMwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTU1ZWY5YTYzMzJmZjc0NjBjNWU3Yjc4MDYxNGQ4ZjcwNjQwYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7zVRQsHVVWLhwALTg2kSMU5e8WC
i/ayW8wjE//e22lF6daIetWVPNLfHnSQRdG9db14RhFHTRIvJhC14rXou/R1NGKT
3bs4KnRQ47WHp9fWr9O6UsIuMBLEqgLv2v0hh35Mjl8ddW67WPDn2Jw5LOeIJeeJ
0jfVGlN/ygtM4B4a0DxbplSTPlBkpw3Rp5/u/qEo0QnRdZEyt04QiiuADTINCAUd
qFHpQNuLKNYqPOgKEwRfOtZNStUGu84IXMPp5WaHTxlCUl8gqDGzlqEhcmXK9Gzw
F9KVRLtzsXVvUkHawud49a6sRAj7nkkor0LDc+/X9+0Ath1f71zNeYRY5QIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFCVV75pjMv90YMXnt4BhTY9wZAwnMB8GA1UdIwQY
MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt
MDJkZTAxMjQyMjhlLzEvSlZYdm1tTXlfM1JneGVlM2dHRk5qM0JrRENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl
LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBdBAIAATBXMAwDBAeRP4AD
BAGRP4QwDAMEAJE/hwMEAZE/jAMEAbyJsDAMAwQAvImzAwQDvImwAwQBvIngMAwD
BAC8ieMDBAK8ifAwCwMEALyJ9QMDAbyIAwQE1CuQMA0GCSqGSIb3DQEBCwUAA4IB
AQB8CF/E8iRZaq4vji5Lo5HJJDrzxv1HNV6m2DZ7gf6t6waRxM13kvS3McD3ZUYg
gw4tlt4byKPNxWErK3nHJblSezq/s8wUdNE3l/F4uHbP7k7A0L4lzTIFt1ywOvfd
7+MRcXcicD8yTfD/5sRvVdYpWPZyeRN+JThi5Y83Vz929/9l4ESXW1+4lPRPkl8B
cyV61d8nchJ+HhGJr28GasjcpUeouxyiW5Xx1MCJm/p116/lUSXj8z6+pa8M3xgl
lbn3Sa7klNO9OKHXNzjxsVHtK812p7+tIJLXvGHXqyzqCNxbaj/uc3GUeC8GgBxC
6QQx+4PPouYfgI+egb6VuuK1
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:46 2026 by rpki-client