Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/JW2H-k6inKAmiu_xO-pjW9SUDCM.roa
File: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (raw, json)
Hash identifier: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=
Subject key identifier: 25:6D:87:FA:4E:A2:9C:A0:26:8A:EF:F1:3B:EA:63:5B:D4:94:0C:23
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 019E8E3D1C7F48CC1155727CE0499960A866
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/JW2H-k6inKAmiu_xO-pjW9SUDCM.roa
Signing time: Wed 03 Jun 2026 16:07:09 +0000
ROA not before: Wed 03 Jun 2026 16:07:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31357
IP address blocks: 46.166.216.0/24 maxlen: 24
46.166.253.0/24 maxlen: 24
46.166.254.0/24 maxlen: 24
78.140.0.0/18 maxlen: 18
78.140.0.0/19 maxlen: 19
78.140.4.0/24 maxlen: 24
78.140.48.0/20 maxlen: 20
78.140.58.0/24 maxlen: 24
95.170.96.0/19 maxlen: 19
95.170.96.0/20 maxlen: 20
95.170.104.0/21 maxlen: 21
95.170.120.0/21 maxlen: 21
95.170.120.0/22 maxlen: 22
95.170.124.0/22 maxlen: 22
2a04:3800:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:3d:1c:7f:48:cc:11:55:72:7c:e0:49:99:60:a8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jun 3 16:07:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=256d87fa4ea29ca0268aeff13bea635bd4940c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:5b:83:66:32:c3:7e:49:99:6c:db:80:91:
b5:8e:07:9c:d6:36:a7:32:b4:12:a1:3b:97:d6:70:
6c:bd:c1:11:da:42:89:1e:60:d9:29:1d:47:39:e7:
2c:d3:bc:92:7c:ec:7a:22:ab:20:a5:51:68:b4:e4:
fe:92:07:4b:07:6f:5c:a9:6c:ff:d7:d5:24:0b:45:
3f:67:ae:d0:a2:a9:3d:b8:16:de:e1:af:12:5b:85:
da:a4:56:df:ba:0d:e5:b9:3e:b2:df:29:d6:5c:bd:
fb:0f:56:b4:32:b0:26:b1:61:5a:02:f4:77:4c:f5:
89:1c:a6:72:ea:39:0a:30:d8:96:17:e6:7f:bf:cc:
2c:da:45:7a:6f:0c:50:de:08:ad:88:97:8f:f3:63:
95:95:f0:5f:4f:dc:ee:07:0b:8b:02:1c:89:d3:b5:
af:c5:9a:05:b6:ca:6a:22:30:7d:1d:a3:12:8f:94:
26:19:da:f5:c9:ec:e2:eb:ea:03:01:89:56:d6:d0:
c6:36:1c:aa:82:0d:5c:57:f4:1d:80:f3:5e:ca:8a:
8a:f4:68:24:bf:dd:e5:92:1d:57:a6:5f:4d:b2:9c:
7a:3c:d7:8b:dd:f9:c2:30:9e:ee:2a:35:31:fb:89:
84:f6:ab:94:6b:ba:3b:6f:26:0c:78:83:c0:0e:1c:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:87:FA:4E:A2:9C:A0:26:8A:EF:F1:3B:EA:63:5B:D4:94:0C:23
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/JW2H-k6inKAmiu_xO-pjW9SUDCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.216.0/24
46.166.253.0-46.166.254.255
78.140.0.0/18
95.170.96.0/19
IPv6:
2a04:3800:2::/48
Signature Algorithm: sha256WithRSAEncryption
73:c4:bc:04:66:1f:8b:ea:d9:6a:2a:ee:8b:42:fd:6e:2f:d7:
49:73:42:cd:38:95:33:e0:d1:2d:22:71:c6:21:d7:6d:eb:36:
55:6b:07:2d:97:d6:f8:b4:75:ce:b9:e1:3d:94:79:09:bc:b9:
8a:43:14:e0:ca:81:c5:34:64:c1:4d:17:3b:07:e7:5b:af:88:
43:2a:83:7d:2d:c0:6f:d5:5f:ee:88:93:dc:5a:64:95:a6:e3:
9c:0a:49:a0:c0:22:87:2e:5c:d4:1b:75:64:43:80:3c:7c:9f:
0f:8c:de:b0:1c:b2:b8:f3:06:b3:d9:c4:d1:40:fb:f0:9c:d3:
f8:1f:66:e5:61:6e:cb:72:23:f5:be:91:7b:51:de:01:4b:95:
d2:d3:42:5e:60:c6:ac:86:1e:c9:e0:45:cd:14:83:2b:54:30:
b8:9b:ab:25:3d:a8:0c:b5:ad:e9:bd:d5:59:5e:d4:0e:d5:6b:
13:61:42:4e:ce:80:cc:b6:46:c1:0b:46:13:91:7f:b2:a4:59:
c4:bb:49:4d:43:a7:97:af:42:0e:cf:43:4c:5e:6a:fa:c2:b9:
3a:28:0e:9d:af:2e:2a:1f:bc:18:5c:51:db:8a:4f:41:e2:60:
83:6f:df:07:9c:9a:e0:45:71:61:ce:23:ca:9b:dc:c4:64:b6:
67:64:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:29 2026 by rpki-client