Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JB25RfS4RJbJ3b43yQEnUH5D9Ts.roa
File: JB25RfS4RJbJ3b43yQEnUH5D9Ts.roa (raw, json)
Hash identifier: wLCuNfExsjURzX5FqtVIWMNPFXt/LyB9cXJeIju0Eq8=
Subject key identifier: 24:1D:B9:45:F4:B8:44:96:C9:DD:BE:37:C9:01:27:50:7E:43:F5:3B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0DE966E27532A5F2A6B6BBC0BB059D06D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JB25RfS4RJbJ3b43yQEnUH5D9Ts.roa
Signing time: Sat 26 Sep 2026 16:39:55 +0000
ROA not before: Sat 26 Sep 2026 16:39:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 83.148.150.0/24 maxlen: 24
83.148.153.0/24 maxlen: 24
83.148.154.0/23 maxlen: 23
83.148.184.0/22 maxlen: 22
85.189.216.0/22 maxlen: 22
87.85.228.0/24 maxlen: 24
87.85.229.0/24 maxlen: 24
87.85.247.0/24 maxlen: 24
109.204.102.0/24 maxlen: 24
109.204.104.0/21 maxlen: 21
109.204.114.0/24 maxlen: 24
109.204.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:96:6e:27:53:2a:5f:2a:6b:6b:bc:0b:b0:59:d0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 26 16:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=241db945f4b84496c9ddbe37c90127507e43f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:45:6c:03:09:ac:2e:9b:5d:98:99:fa:3a:
86:f4:b4:cd:71:86:1e:ca:fb:48:f7:80:b0:e6:85:
24:77:85:26:27:6d:4e:f5:ab:4c:9c:e8:43:6a:85:
17:8b:53:8c:06:69:7e:80:58:d1:5e:9c:af:48:b7:
e7:19:b8:f6:b5:c6:a8:99:ed:ec:2a:7c:6d:34:3a:
26:25:52:98:f8:1d:50:df:e1:18:64:83:fb:27:f2:
9d:e6:a5:c9:eb:47:61:b7:6b:a1:55:a2:dd:a3:51:
ce:77:6b:3c:b3:dd:74:c4:9e:f9:b1:78:b0:21:6d:
6e:59:f2:50:29:6d:c0:ee:60:a3:69:25:88:6d:a7:
01:76:3f:39:de:f3:2f:95:6c:1b:dd:e9:3c:14:86:
85:4a:75:da:28:f6:e0:c9:08:f5:d1:7d:99:08:c6:
f3:29:c0:8d:71:4e:0e:4d:ab:29:05:a1:7b:43:be:
ed:cb:28:0d:11:5a:51:66:b2:83:8d:d6:a5:7d:e9:
af:53:fc:f6:19:a0:31:89:dd:5a:c3:98:17:3d:35:
50:b7:01:64:68:3a:cc:63:07:67:40:5c:90:84:39:
b2:8b:01:b7:32:7b:2c:9c:29:ab:8b:4d:82:01:74:
23:00:d0:52:88:aa:4b:0b:a4:32:a5:38:83:f1:07:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1D:B9:45:F4:B8:44:96:C9:DD:BE:37:C9:01:27:50:7E:43:F5:3B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JB25RfS4RJbJ3b43yQEnUH5D9Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.150.0/24
83.148.153.0-83.148.155.255
83.148.184.0/22
85.189.216.0/22
87.85.228.0/23
87.85.247.0/24
109.204.102.0/24
109.204.104.0/21
109.204.114.0/24
109.204.127.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ee:0b:b3:89:e6:4b:89:97:9a:bd:3a:79:37:b1:9e:88:80:
b2:d8:3d:0d:5a:81:d9:16:54:ad:5c:87:2d:65:26:e2:4f:83:
51:e9:68:f0:49:07:46:48:42:72:8c:96:71:66:5b:19:03:ad:
4b:e9:e5:c4:f4:27:9b:c2:5a:a6:6b:b7:7f:05:a7:2a:89:31:
06:ee:0a:54:9f:c1:23:11:19:7c:9c:2f:52:cd:2b:17:2a:75:
46:65:d6:0a:78:88:db:fc:d9:45:40:7c:26:3f:79:fa:ca:35:
9d:91:4b:71:c8:ea:b6:67:2a:1d:f0:68:8f:4d:71:fc:78:ec:
05:6c:f0:12:23:5e:be:e5:6b:b5:c3:44:5d:fa:29:00:0e:6a:
91:0b:6c:61:1a:57:92:d0:e2:6f:90:16:d9:1f:19:c6:e3:24:
6b:aa:4c:9c:01:45:c1:e3:bc:cd:4d:14:e5:14:fe:be:86:f0:
d9:32:3c:52:4e:71:20:55:ea:b1:75:23:5f:f4:f7:e2:b4:bb:
c5:47:ec:5d:c9:0d:f7:cd:bd:ea:b3:73:c7:0e:17:67:cb:80:
74:4d:4a:b0:7d:b3:ed:34:68:7d:c4:2d:33:eb:d2:8a:4a:aa:
21:a2:72:c0:a4:f4:29:84:f7:a5:f3:04:28:0f:3a:fc:7f:dc:
ac:79:f4:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:54 2026 by rpki-client