Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/JX9TtuwLkgqw7sG54SbhhV3TGs8.roa
File: JX9TtuwLkgqw7sG54SbhhV3TGs8.roa (raw, json)
Hash identifier: /gVraOwfvW9I8AC7MNv4oymRdtuKJdPXSNG+v0NFcHM=
Subject key identifier: 25:7F:53:B6:EC:0B:92:0A:B0:EE:C1:B9:E1:26:E1:85:5D:D3:1A:CF
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01A0FC988B0BA60C96DEBB84AE522472C143
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/JX9TtuwLkgqw7sG54SbhhV3TGs8.roa
Signing time: Fri 02 Oct 2026 12:30:50 +0000
ROA not before: Fri 02 Oct 2026 12:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 45.149.76.0/24 maxlen: 24
45.149.77.0/24 maxlen: 24
45.149.78.0/24 maxlen: 24
45.149.79.0/24 maxlen: 24
130.185.72.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.78.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
158.255.74.0/24 maxlen: 24
171.22.24.0/24 maxlen: 24
171.22.25.0/24 maxlen: 24
171.22.26.0/24 maxlen: 24
171.22.27.0/24 maxlen: 24
176.97.218.0/24 maxlen: 24
178.211.145.0/24 maxlen: 24
178.236.32.0/24 maxlen: 24
185.7.212.0/24 maxlen: 24
185.8.172.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
185.49.104.0/24 maxlen: 24
185.190.39.0/24 maxlen: 24
185.204.197.0/24 maxlen: 24
185.208.174.0/24 maxlen: 24
185.208.175.0/24 maxlen: 24
185.252.86.0/24 maxlen: 24
193.105.234.0/24 maxlen: 24
193.242.125.0/24 maxlen: 24
194.5.175.0/24 maxlen: 24
194.5.188.0/24 maxlen: 24
194.5.195.0/24 maxlen: 24
194.5.205.0/24 maxlen: 24
194.62.43.0/24 maxlen: 24
195.88.208.0/24 maxlen: 24
195.177.255.0/24 maxlen: 24
212.23.201.0/24 maxlen: 24
2a03:2dc0::/36 maxlen: 36
2a03:2dc0:1000::/36 maxlen: 36
2a03:2dc0:2000::/36 maxlen: 36
2a0e:b080::/32 maxlen: 32
2a0e:b081::/32 maxlen: 32
2a0e:b082::/32 maxlen: 32
2a0e:b083::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:98:8b:0b:a6:0c:96:de:bb:84:ae:52:24:72:c1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Oct 2 12:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=257f53b6ec0b920ab0eec1b9e126e1855dd31acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:15:51:03:87:fe:a1:a5:99:85:3a:1c:60:
f2:2d:c8:1e:e5:00:e8:96:13:d7:e3:74:24:8a:87:
70:67:4f:59:5e:e5:64:82:81:f1:c1:41:3f:1f:e9:
f4:1b:ba:2e:12:9f:8c:9b:67:79:e2:50:8a:44:74:
cf:89:43:b2:ee:bf:16:98:c3:92:98:2d:80:aa:8d:
bc:07:77:2b:99:96:1c:31:68:32:61:fa:a6:65:c2:
08:47:ca:19:6f:9a:7f:e3:4d:f4:28:ba:fa:0b:82:
be:ff:13:e6:3f:3b:e0:72:c3:18:bf:42:0d:5b:b5:
df:6b:82:e4:06:dc:6e:b9:28:d4:51:11:79:7c:42:
54:cb:6b:e4:5d:bf:4f:66:97:ab:9e:61:1d:8b:e4:
07:8a:08:12:5c:9c:6a:da:d1:19:ad:25:08:f8:91:
ad:ad:0c:f9:79:b0:25:98:39:f5:07:75:6a:d9:f9:
7c:b4:0f:ba:21:1a:93:d8:03:a4:85:8e:af:3f:7e:
34:26:bc:7d:a1:a1:f8:f4:75:22:aa:38:3f:1d:71:
25:62:7c:30:48:60:f9:4b:5a:4e:d4:51:be:32:ca:
b6:98:2e:87:76:d4:ed:28:a9:af:f6:2a:81:ba:b6:
4e:5c:cd:96:3e:71:a2:44:79:43:34:bb:f3:da:28:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:53:B6:EC:0B:92:0A:B0:EE:C1:B9:E1:26:E1:85:5D:D3:1A:CF
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/JX9TtuwLkgqw7sG54SbhhV3TGs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.76.0/22
130.185.72.0/21
158.255.74.0/24
171.22.24.0/22
176.97.218.0/24
178.211.145.0/24
178.236.32.0/24
185.7.212.0/24
185.8.172.0/22
185.49.104.0/24
185.190.39.0/24
185.204.197.0/24
185.208.174.0/23
185.252.86.0/24
193.105.234.0/24
193.242.125.0/24
194.5.175.0/24
194.5.188.0/24
194.5.195.0/24
194.5.205.0/24
194.62.43.0/24
195.88.208.0/24
195.177.255.0/24
212.23.201.0/24
IPv6:
2a03:2dc0::-2a03:2dc0:2fff:ffff:ffff:ffff:ffff:ffff
2a0e:b080::/30
Signature Algorithm: sha256WithRSAEncryption
7f:db:ba:0a:88:2e:ea:8d:c6:b7:98:a5:6e:f0:fb:8b:8d:96:
43:cb:f5:9f:58:bd:31:93:cc:c7:6a:0e:b3:9f:90:1c:a9:10:
8b:c1:94:a1:15:bc:fa:cb:6b:b9:19:2b:63:4d:7e:77:90:be:
31:7e:58:1c:f7:81:ad:d8:04:66:a1:77:03:91:de:59:d3:08:
38:67:c3:62:9a:a9:e5:d8:46:ee:71:14:5a:e3:06:f6:40:97:
38:81:77:0b:51:cd:1d:a5:dc:2d:21:7c:1a:3c:99:b9:1b:af:
af:94:97:30:cc:2e:1e:b3:2d:25:df:a1:d0:8c:a6:a3:c8:46:
6e:be:ad:f1:56:79:db:b9:6c:14:62:f0:37:f2:a0:b0:de:b4:
09:87:3b:81:0e:33:f2:52:44:40:2d:0f:60:27:79:94:b5:a3:
e9:89:0f:c9:5a:3c:f6:bd:8a:4a:06:65:55:13:06:74:0a:57:
9f:ea:9f:d6:af:d7:86:8b:97:ac:39:f3:fa:45:30:ad:be:c2:
92:5b:8d:a5:a9:f1:8c:6d:9c:fe:d1:f0:bd:e3:88:a4:ca:05:
9d:2c:4f:a0:56:5a:c4:e7:9c:29:78:d4:fb:cc:0f:79:42:a7:
54:b7:d8:4c:7f:63:e4:98:74:89:e7:bb:11:79:99:0f:bd:66:
c2:b6:f6:06
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAaD8mIsLpgyW3ruErlIkcsFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk
ZDE2ZWIwHhcNMjYxMDAyMTIzMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTdmNTNiNmVjMGI5MjBhYjBlZWMxYjllMTI2ZTE4NTVkZDMxYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjskVUQOH/qGlmYU6HGDyLcge5QDo
lhPX43QkiodwZ09ZXuVkgoHxwUE/H+n0G7ouEp+Mm2d54lCKRHTPiUOy7r8WmMOS
mC2Aqo28B3crmZYcMWgyYfqmZcIIR8oZb5p/4030KLr6C4K+/xPmPzvgcsMYv0IN
W7Xfa4LkBtxuuSjUURF5fEJUy2vkXb9PZpernmEdi+QHiggSXJxq2tEZrSUI+JGt
rQz5ebAlmDn1B3Vq2fl8tA+6IRqT2AOkhY6vP340Jrx9oaH49HUiqjg/HXElYnww
SGD5S1pO1FG+Msq2mC6HdtTtKKmv9iqBurZOXM2WPnGiRHlDNLvz2ig6iQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFCV/U7bsC5IKsO7BueEm4YVd0xrPMB8GA1UdIwQY
MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt
YzdhYzI2YmNjMmRhLzEvSlg5VHR1d0xrZ3F3N3NHNTRTYmhoVjNUR3M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh
LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBlwQCAAEwgZADBAIt
lUwDBAOCuUgDBACe/0oDBAKrFhgDBACwYdoDBACy05EDBACy7CADBAC5B9QDBAK5
CKwDBAC5MWgDBAC5vicDBAC5zMUDBAG50K4DBAC5/FYDBADBaeoDBADB8n0DBADC
Ba8DBADCBbwDBADCBcMDBADCBc0DBADCPisDBADDWNADBADDsf8DBADUF8kwHgQC
AAIwGDAPAwUGKgMtwAMGBCoDLcAgAwUCKg6wgDANBgkqhkiG9w0BAQsFAAOCAQEA
f9u6Cogu6o3Gt5ilbvD7i42WQ8v1n1i9MZPMx2oOs5+QHKkQi8GUoRW8+struRkr
Y01+d5C+MX5YHPeBrdgEZqF3A5HeWdMIOGfDYpqp5dhG7nEUWuMG9kCXOIF3C1HN
HaXcLSF8GjyZuRuvr5SXMMwuHrMtJd+h0Iymo8hGbr6t8VZ527lsFGLwN/KgsN60
CYc7gQ4z8lJEQC0PYCd5lLWj6YkPyVo89r2KSgZlVRMGdApXn+qf1q/XhouXrDnz
+kUwrb7CkluNpanxjG2c/tHwveOIpMoFnSxPoFZaxOecKXjU+8wPeUKnVLfYTH9j
5Jh0iee7EXmZD71mwrb2Bg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:48 2026 by rpki-client