Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/JFKsJ81EE5IntvacpLswwWGFsTM.roa
File: JFKsJ81EE5IntvacpLswwWGFsTM.roa (raw, json)
Hash identifier: LHjq7NdJ7WIHgdVnj15fjVJfqra4lVivu4YVbUPdLsQ=
Subject key identifier: 24:52:AC:27:CD:44:13:92:27:B6:F6:9C:A4:BB:30:C1:61:85:B1:33
Certificate issuer: /CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Certificate serial: 019F2368573BBA77CD10E75C7E803AA73064
Authority key identifier: AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/JFKsJ81EE5IntvacpLswwWGFsTM.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208905
IP address blocks: 147.235.25.0/24 maxlen: 24
147.235.26.0/23 maxlen: 24
147.235.36.0/24 maxlen: 24
147.235.40.0/24 maxlen: 24
147.235.45.0/24 maxlen: 24
147.235.46.0/23 maxlen: 24
147.235.49.0/24 maxlen: 24
147.235.50.0/23 maxlen: 24
147.235.60.0/22 maxlen: 22
147.235.60.0/23 maxlen: 23
147.235.60.0/24 maxlen: 24
147.235.61.0/24 maxlen: 24
147.235.62.0/23 maxlen: 23
147.235.62.0/24 maxlen: 24
147.235.63.0/24 maxlen: 24
147.235.72.0/22 maxlen: 22
147.235.72.0/23 maxlen: 23
147.235.72.0/24 maxlen: 24
147.235.73.0/24 maxlen: 24
147.235.74.0/23 maxlen: 23
147.235.74.0/24 maxlen: 24
147.235.75.0/24 maxlen: 24
147.235.76.0/22 maxlen: 22
147.235.76.0/23 maxlen: 23
147.235.76.0/24 maxlen: 24
147.235.77.0/24 maxlen: 24
147.235.78.0/23 maxlen: 23
147.235.78.0/24 maxlen: 24
147.235.79.0/24 maxlen: 24
147.235.80.0/24 maxlen: 24
147.235.93.0/24 maxlen: 24
147.235.94.0/23 maxlen: 23
147.235.94.0/24 maxlen: 24
147.235.95.0/24 maxlen: 24
147.235.152.0/23 maxlen: 24
147.235.154.0/24 maxlen: 24
147.235.180.0/23 maxlen: 24
147.235.224.0/23 maxlen: 24
147.235.232.0/23 maxlen: 24
147.235.234.0/24 maxlen: 24
147.235.240.0/23 maxlen: 24
147.235.248.0/23 maxlen: 24
147.235.254.0/23 maxlen: 24
185.130.84.0/22 maxlen: 22
2a06:c702::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:3b:ba:77:cd:10:e7:5c:7e:80:3a:a7:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2452ac27cd44139227b6f69ca4bb30c16185b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:45:11:f6:f6:ae:fe:e2:63:06:87:ef:5c:
4d:b8:2c:0f:80:7d:0d:54:1a:80:ab:b9:34:d5:94:
eb:e2:4f:11:40:f2:62:30:8a:a3:a3:0b:3e:af:a2:
e1:d3:78:61:00:f7:31:bd:00:41:67:f1:13:70:c3:
b9:31:41:6f:08:f9:f1:e5:06:1e:13:71:b0:56:21:
da:5c:f9:ea:08:db:18:50:4a:79:d4:1b:cc:bf:b3:
19:21:9e:04:70:2e:d6:a6:e6:d3:07:66:39:7d:d3:
ff:a6:4f:7d:74:16:8f:68:dd:2d:41:aa:d3:59:f8:
0a:2b:d6:fc:a5:6a:29:a8:28:f6:d4:ff:bd:2e:e3:
2b:19:8f:49:f2:a0:1f:d0:3f:c6:65:c4:84:25:cb:
1c:e9:3a:55:25:7b:85:3c:c6:90:b6:c5:36:a1:0b:
d1:9d:02:89:54:83:7f:6a:36:9b:1b:0e:a9:9f:f7:
d5:5a:4f:61:d3:8e:2b:94:41:ac:c4:4c:cc:01:3b:
e8:8d:9f:e2:5c:74:42:2a:53:7c:6c:1e:3a:08:2e:
fb:6b:ff:b1:77:a2:90:97:9b:3d:e9:01:4f:13:b3:
61:a8:15:f9:c7:2e:67:12:01:bf:3b:7a:62:53:5b:
25:d2:5f:ed:e7:12:ba:0b:03:b9:8d:97:fb:b2:a4:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:AC:27:CD:44:13:92:27:B6:F6:9C:A4:BB:30:C1:61:85:B1:33
X509v3 Authority Key Identifier:
keyid:AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/JFKsJ81EE5IntvacpLswwWGFsTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.25.0-147.235.27.255
147.235.36.0/24
147.235.40.0/24
147.235.45.0-147.235.47.255
147.235.49.0-147.235.51.255
147.235.60.0/22
147.235.72.0-147.235.80.255
147.235.93.0-147.235.95.255
147.235.152.0-147.235.154.255
147.235.180.0/23
147.235.224.0/23
147.235.232.0-147.235.234.255
147.235.240.0/23
147.235.248.0/23
147.235.254.0/23
185.130.84.0/22
IPv6:
2a06:c702::/48
Signature Algorithm: sha256WithRSAEncryption
0f:2c:26:a8:99:b6:14:18:00:15:a8:19:1e:71:1f:21:53:bf:
6a:5e:b3:99:5d:60:cd:66:42:37:4d:dd:5b:1f:0d:a2:c9:7e:
e1:35:0b:57:04:be:57:98:a8:f8:34:c8:50:16:10:77:68:36:
37:27:fe:55:07:fd:be:82:72:39:f7:98:29:b1:46:6b:ba:a1:
7e:1d:77:c7:73:ac:b5:a2:aa:87:1a:9b:f4:3a:7b:8d:51:df:
7e:9a:cc:bf:f5:84:ef:a9:16:6d:01:9a:aa:ad:31:81:68:b2:
ad:8e:71:c3:e5:5e:4f:b2:e8:1f:21:fb:da:72:ba:24:24:1f:
d2:8b:35:2b:03:c6:3e:c6:48:32:eb:e9:04:58:44:3a:a3:70:
4c:e7:d8:32:32:f4:92:44:0d:2f:53:ee:38:db:53:75:5b:e2:
95:f3:b6:e8:12:52:b9:4d:3c:43:4a:7c:36:7c:e4:23:21:46:
b5:88:c9:14:c4:1b:83:29:0b:36:23:1b:75:dc:d6:62:de:a5:
2b:d7:96:ba:f6:6e:f9:4b:9d:8e:5e:5a:7b:8e:7d:bc:83:aa:
66:55:11:61:67:da:46:e3:a5:08:91:14:ab:5b:3d:c5:f0:0c:
93:84:97:18:64:98:74:54:c5:fe:58:9d:a6:10:da:58:6c:ed:
6c:04:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client