Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JI9bs8k9M85PQ4q9EqClUVhtlYc.roa
File: JI9bs8k9M85PQ4q9EqClUVhtlYc.roa (raw, json)
Hash identifier: 9jsMY7Rl8a+IUbOTX2wq2HpRxQL9wA+A7XYpN0NhaXQ=
Subject key identifier: 24:8F:5B:B3:C9:3D:33:CE:4F:43:8A:BD:12:A0:A5:51:58:6D:95:87
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E72A754EDAF0CB88A078375AF62A26E42
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JI9bs8k9M85PQ4q9EqClUVhtlYc.roa
Signing time: Fri 29 May 2026 07:33:49 +0000
ROA not before: Fri 29 May 2026 07:33:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 72.35.242.0/24 maxlen: 24
78.17.92.0/22 maxlen: 22
78.17.236.0/24 maxlen: 24
78.17.237.0/24 maxlen: 24
78.17.238.0/24 maxlen: 24
78.17.239.0/24 maxlen: 24
140.225.212.0/24 maxlen: 24
140.225.213.0/24 maxlen: 24
140.225.214.0/24 maxlen: 24
140.225.215.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:a7:54:ed:af:0c:b8:8a:07:83:75:af:62:a2:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 29 07:33:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=248f5bb3c93d33ce4f438abd12a0a551586d9587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:d2:51:07:18:53:5c:ad:ca:5d:07:bb:3f:
98:fc:22:b1:ee:71:f2:6c:45:1b:bb:ca:c2:a4:2e:
ba:98:1c:93:14:19:a8:55:57:ce:f1:40:41:44:cd:
3b:43:d6:7f:c3:8b:8e:fd:d1:9a:df:65:4a:6a:df:
69:61:59:e5:af:76:50:af:6b:5b:5e:fb:ec:41:dc:
80:d1:a3:30:1f:73:cf:9b:7d:a9:3f:9e:11:cd:85:
13:fe:3c:5a:f8:6f:0b:86:28:bd:4b:f8:69:94:79:
90:07:a6:d1:d4:f0:ca:61:f8:14:e8:49:02:cf:7f:
ca:cf:90:9a:eb:58:2e:1d:fe:1f:3c:8a:76:3e:a8:
e2:89:28:e9:d2:99:cb:50:69:05:56:f6:50:35:5e:
81:24:70:a4:61:68:fc:30:90:71:8c:f0:c8:e1:8f:
1f:60:9f:7f:50:75:58:24:96:c5:97:99:f4:8c:f5:
d7:03:fa:56:33:44:c0:9e:61:5d:88:e8:c3:a2:7e:
99:3e:33:38:aa:84:8c:05:88:ad:07:3d:d6:c8:1f:
fb:ca:89:e0:2a:f4:c0:fa:17:b2:ea:27:e2:7d:42:
bf:a2:12:96:94:2d:d7:66:87:e0:e8:2b:d4:31:e7:
bd:4e:61:2f:42:a7:d5:b8:5e:d7:60:25:9e:71:a9:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:5B:B3:C9:3D:33:CE:4F:43:8A:BD:12:A0:A5:51:58:6D:95:87
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JI9bs8k9M85PQ4q9EqClUVhtlYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.35.242.0/24
78.17.92.0/22
78.17.236.0/22
140.225.212.0/22
167.17.59.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ce:c3:53:d4:1f:d3:7e:65:50:ae:fa:e9:d0:d1:36:b1:f3:
d7:c1:5b:7e:3f:93:57:39:12:9e:e5:43:64:6b:56:d2:bc:8f:
5f:4b:1d:93:ab:d6:62:ea:ac:8a:c2:d0:b7:7c:1d:ab:11:bb:
fe:22:0f:5e:27:c9:2e:d2:71:31:43:a9:22:ff:3a:7a:66:01:
6f:c7:16:cb:e3:17:f2:02:3b:1c:71:f2:18:af:4c:3e:51:2b:
8c:20:3c:8b:8d:49:4e:6c:76:a0:25:eb:63:a0:83:aa:95:09:
41:4d:42:08:9e:fb:34:40:9a:f6:0f:60:de:ee:2f:ba:b8:42:
06:d5:ac:d7:b7:bc:65:00:ff:c3:30:2d:c3:67:74:d2:32:ca:
11:f0:e1:40:35:ce:cc:80:48:68:35:9e:44:d9:0e:5f:97:5e:
86:3f:03:45:e7:fc:de:8a:6d:80:da:c5:ff:54:dc:a7:08:e2:
40:f8:a4:16:14:00:b1:ce:74:7b:d2:91:08:58:86:a7:e9:93:
a8:70:3a:22:bf:0e:e1:ca:56:0a:0d:2f:e0:d3:1c:b2:f9:e1:
b9:e5:c9:9c:f9:21:66:e9:a2:cb:37:2a:cf:8d:03:38:27:f7:
9d:ea:fc:e2:5d:8d:79:73:7f:47:bf:57:9d:da:a8:0b:7f:0c:
0a:a1:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:20:38 2026 by rpki-client