Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jwx3-8eR2Ws0eoySkvUFa2wUMsU.roa
File: jwx3-8eR2Ws0eoySkvUFa2wUMsU.roa (raw, json)
Hash identifier: CrdjCfZLS/jAnoNzNw2iYz/JJByNHGUZ/MPb88wbGMg=
Subject key identifier: 8F:0C:77:FB:C7:91:D9:6B:34:7A:8C:92:92:F5:05:6B:6C:14:32:C5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019FC6BF551E4015429DCB3616ADB9EE958A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jwx3-8eR2Ws0eoySkvUFa2wUMsU.roa
Signing time: Mon 03 Aug 2026 08:30:55 +0000
ROA not before: Mon 03 Aug 2026 08:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.135.71.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
188.132.141.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.163.0/24 maxlen: 24
188.132.171.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.203.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 12:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:bf:55:1e:40:15:42:9d:cb:36:16:ad:b9:ee:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 3 08:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f0c77fbc791d96b347a8c9292f5056b6c1432c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:31:30:b5:16:9f:30:04:b5:df:db:af:d4:
bc:e7:aa:96:1e:7a:f0:f5:2e:0a:60:ef:98:d4:5d:
04:32:a0:6b:4d:13:37:cc:c0:8e:1c:94:75:dd:92:
7f:19:bf:0f:50:8e:7e:4a:c7:ed:dd:1d:b2:5f:3f:
e1:64:8b:54:40:d4:a3:4d:10:27:58:1f:13:cb:55:
bb:1d:c2:0d:25:fe:ed:2b:73:0e:0d:22:d5:f3:ab:
74:77:51:48:79:62:af:62:26:6a:91:0e:f0:13:3e:
ec:47:1b:59:ad:20:4c:d8:a1:da:11:dc:67:1d:7e:
40:a2:fa:6e:2e:39:7b:bd:a7:79:69:f7:a9:72:7a:
b1:87:eb:0a:07:54:2a:bf:a5:c2:91:c5:04:5b:11:
ad:fb:69:2a:b3:38:1f:3e:71:e7:18:ef:b7:0e:2b:
11:3f:94:fd:f2:cf:24:ae:9f:1a:49:3c:64:2d:81:
88:58:ab:35:7a:0c:bf:25:21:55:f1:3b:4a:ed:cf:
12:d1:83:30:4f:93:9e:0f:e6:82:62:44:20:1c:74:
cb:a1:92:f9:f4:55:34:ea:0b:1e:4b:4e:b7:fe:4f:
f7:28:4c:be:18:fc:d3:24:ab:b3:54:a0:79:df:91:
3c:f8:b9:de:a4:c1:22:4b:91:50:6e:96:08:9f:d1:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:77:FB:C7:91:D9:6B:34:7A:8C:92:92:F5:05:6B:6C:14:32:C5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jwx3-8eR2Ws0eoySkvUFa2wUMsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.71.0-78.135.72.255
78.135.74.0/24
78.135.78.0/24
78.135.81.0/24
78.135.88.0/24
188.132.141.0/24
188.132.146.0/24
188.132.152.0/24
188.132.163.0/24
188.132.171.0/24
188.132.189.0/24
188.132.191.0/24
188.132.203.0/24
188.132.212.0/23
188.132.216.0/23
188.132.229.0/24
188.132.236.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
3f:8c:0e:fa:02:2a:26:dd:2e:c6:16:8d:38:c9:6d:e6:5b:ec:
f8:64:02:4a:89:82:76:07:93:32:10:96:01:d7:fa:dc:65:77:
1a:4f:bf:94:2d:58:31:1a:57:da:8f:06:ea:82:e0:c9:88:77:
47:25:19:be:70:d4:05:99:e3:07:1f:c4:38:e8:ad:32:e8:dd:
b5:21:59:c1:48:9b:4c:3f:dd:8b:81:71:4b:ef:fd:7b:bf:25:
f8:25:8e:c9:c9:04:ee:9d:66:9e:76:75:6c:77:a6:f0:61:7a:
d1:ea:f6:9e:63:7a:2d:c4:c1:e6:0c:dd:20:25:83:c5:49:7e:
5d:9e:72:01:42:1e:d9:ee:2c:85:5a:3c:37:99:73:66:fe:ad:
09:39:9b:1c:0b:52:fa:d5:f5:70:07:2e:44:f4:8f:45:05:e2:
8f:e3:d6:ca:5b:d9:10:c2:dd:9a:bc:ba:4f:26:23:28:8b:ac:
f4:3f:21:83:64:a0:8b:1b:8d:84:81:4f:ef:91:ef:30:87:1a:
fc:f0:f3:54:ad:cb:f5:ae:ff:11:47:e9:74:38:c3:11:06:35:
00:38:91:4a:78:c8:ac:0c:22:cc:b3:d5:c5:fa:af:a0:45:a5:
b7:7f:3b:1d:04:60:7e:f2:ac:b7:8e:28:bb:36:a9:22:00:2f:
07:76:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:56 2026 by rpki-client