Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa
File: Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa (raw, json)
Hash identifier: f53J/UsPl50nlO0PDJi0nDqUWowY7qlvBpfHPm2wNVo=
Subject key identifier: 26:DE:64:27:AC:E0:94:AB:87:4A:DD:8E:F4:AC:85:E3:16:F3:04:78
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019F526DA093455972339BB100AD79CE0397
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa
Signing time: Sat 11 Jul 2026 18:25:43 +0000
ROA not before: Sat 11 Jul 2026 18:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60148
IP address blocks: 2.178.254.0/24 maxlen: 24
2.179.168.0/24 maxlen: 24
2.180.254.0/24 maxlen: 24
2.180.255.0/24 maxlen: 24
2.181.222.0/24 maxlen: 24
2.181.223.0/24 maxlen: 24
2.182.255.0/24 maxlen: 24
2.183.254.0/24 maxlen: 24
2.183.255.0/24 maxlen: 24
2.184.254.0/24 maxlen: 24
2.184.255.0/24 maxlen: 24
2.185.254.0/24 maxlen: 24
2.185.255.0/24 maxlen: 24
2.187.253.0/24 maxlen: 24
2.187.254.0/24 maxlen: 24
2.187.255.0/24 maxlen: 24
78.38.237.0/24 maxlen: 24
78.38.238.0/24 maxlen: 24
78.38.239.0/24 maxlen: 24
78.39.152.0/24 maxlen: 24
78.39.157.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
195.146.37.0/24 maxlen: 24
195.146.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:6d:a0:93:45:59:72:33:9b:b1:00:ad:79:ce:03:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jul 11 18:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26de6427ace094ab874add8ef4ac85e316f30478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:45:05:ca:d4:c6:f5:8c:68:98:0e:6e:8e:
78:fa:ee:56:5c:e1:2b:ab:7d:a0:ef:60:46:b0:54:
82:93:26:e2:c1:a9:7d:22:f5:a8:73:b6:76:eb:52:
05:92:d8:07:0d:4b:08:75:70:ea:6c:9a:2c:e8:9c:
b5:60:b8:ff:53:17:89:70:b9:b6:e2:f3:9f:54:f9:
82:b1:72:98:1a:d3:84:d3:78:5f:3c:c0:92:61:fd:
aa:88:6b:8a:c8:12:ae:35:fe:dd:ae:54:fb:a4:15:
41:db:2b:51:73:c7:d0:2d:36:b6:3b:76:cf:61:56:
48:a2:78:c4:3a:37:bf:3e:43:1d:60:a5:d9:83:16:
4e:1f:11:29:77:f5:ea:ab:41:35:36:47:23:5b:f9:
7b:c9:cf:78:ec:84:4f:bd:72:96:c7:fd:75:57:4c:
42:74:3d:a5:27:42:b5:29:5d:2e:fe:dd:79:46:30:
16:91:b8:34:09:25:31:ff:c5:bc:b1:9f:5d:a0:27:
f3:57:88:f1:74:9d:f4:4f:2c:99:5f:68:d3:b8:0e:
da:37:54:ae:fe:d5:9d:14:e9:aa:15:40:92:41:57:
03:ce:d7:1c:f6:ad:49:8b:ec:6e:7d:6d:ed:91:c1:
63:78:7b:6e:09:af:1c:62:b8:c2:db:9b:22:82:83:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:64:27:AC:E0:94:AB:87:4A:DD:8E:F4:AC:85:E3:16:F3:04:78
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.178.254.0/24
2.179.168.0/24
2.180.254.0/23
2.181.222.0/23
2.182.255.0/24
2.183.254.0/23
2.184.254.0/23
2.185.254.0/23
2.187.253.0-2.187.255.255
78.38.237.0-78.38.239.255
78.39.152.0/24
78.39.157.0/24
80.191.56.0/24
195.146.37.0/24
195.146.59.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a5:ff:93:8b:7a:3f:85:92:af:52:f8:30:23:82:2a:57:5c:
ec:8b:d5:fe:4d:d2:87:35:ab:16:dd:2d:86:e5:9c:c7:18:1b:
d1:40:ca:9b:ad:38:d2:cd:78:6e:f1:ee:24:29:61:60:40:e4:
1a:60:15:29:a1:1c:6e:5c:b6:dd:2c:bb:7f:18:92:94:4f:dc:
d9:b2:73:09:cf:e7:ae:67:82:2e:76:54:df:25:c2:05:bc:80:
a6:fc:c5:ac:15:4f:f0:ce:05:a7:6b:26:40:ad:27:dc:d9:0a:
fb:ea:ed:af:14:fb:b3:ae:b3:dd:92:be:91:94:e0:82:ad:39:
02:28:68:3c:c2:43:b7:27:da:0f:a8:3d:61:51:8f:da:18:1e:
82:26:94:20:6f:50:80:8a:9d:cf:10:94:82:72:6f:ce:1b:10:
55:61:43:9b:50:38:10:a7:c7:0e:4b:dd:93:3c:bb:2e:01:39:
ba:cc:66:8e:37:20:64:a3:04:2c:c4:ae:21:d3:fa:43:d1:b8:
f0:c4:05:f1:4a:48:68:83:2a:90:d7:48:79:72:6b:e5:a1:54:
1a:2e:b7:e0:be:37:8b:76:e4:73:08:e0:01:90:d7:d1:20:34:
a5:f6:8e:8e:92:78:6c:71:54:c5:b0:01:18:69:6b:d9:8d:e3:
d3:c3:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:13 2026 by rpki-client