Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JpxTxfw2ssZJ-D-usc6fT8_tYpo.roa
File: JpxTxfw2ssZJ-D-usc6fT8_tYpo.roa (raw, json)
Hash identifier: ME9ldE0g3oGjS+XPcEcObEtF7Drize8iSKju//IwLr8=
Subject key identifier: 26:9C:53:C5:FC:36:B2:C6:49:F8:3F:AE:B1:CE:9F:4F:CF:ED:62:9A
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01A038CC05D3CFC8547130A35472E442177A
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JpxTxfw2ssZJ-D-usc6fT8_tYpo.roa
Signing time: Tue 25 Aug 2026 12:01:29 +0000
ROA not before: Tue 25 Aug 2026 12:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 43.230.56.0/22 maxlen: 22
45.251.60.0/22 maxlen: 22
86.104.215.0/24 maxlen: 24
86.104.227.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
103.49.84.0/22 maxlen: 22
103.49.84.0/24 maxlen: 24
103.49.85.0/24 maxlen: 24
103.49.87.0/24 maxlen: 24
162.218.157.0/24 maxlen: 24
162.218.158.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
194.29.70.0/24 maxlen: 24
194.29.80.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:cc:05:d3:cf:c8:54:71:30:a3:54:72:e4:42:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Aug 25 12:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=269c53c5fc36b2c649f83faeb1ce9f4fcfed629a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:a8:0f:9c:9e:a6:74:f4:b1:31:5d:e6:41:
5e:68:11:8a:ca:ab:f4:45:cb:83:c9:2d:e5:ac:5b:
c5:1c:19:ca:01:fc:14:89:23:0c:96:6c:a4:ab:fe:
34:32:80:e5:b0:1d:8e:3c:86:d2:f7:d0:9e:3f:52:
64:70:63:13:eb:29:e6:52:53:97:1c:64:2f:2c:a0:
02:82:80:08:29:32:47:c1:59:60:fe:82:0b:f2:88:
d9:ba:89:d8:3e:07:10:23:95:25:87:2b:6c:e2:f3:
47:3e:4c:a2:85:be:2c:cd:93:f7:ba:96:4e:70:d8:
92:c5:17:13:86:b3:2a:ae:d0:d2:dd:e4:42:f3:de:
ef:b7:15:46:ad:cd:61:15:4a:45:ff:4a:52:63:7b:
aa:85:b4:83:ae:cd:60:cc:e5:94:e9:45:dc:39:32:
4d:dd:3a:a6:ea:39:13:2f:f1:34:4b:7c:42:ce:26:
3e:26:30:82:77:2c:95:26:a8:0c:c7:1b:7c:e2:6d:
9e:19:ba:5a:f3:1c:4b:7f:fe:26:1c:16:46:db:34:
6a:66:b6:37:94:ae:04:66:9a:a6:c0:a4:f0:84:ae:
52:f5:ab:75:e8:79:d2:05:41:0c:1a:90:8c:e8:98:
33:3f:51:54:cb:76:fd:a2:f4:d4:4e:71:00:f2:f2:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9C:53:C5:FC:36:B2:C6:49:F8:3F:AE:B1:CE:9F:4F:CF:ED:62:9A
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JpxTxfw2ssZJ-D-usc6fT8_tYpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.56.0/22
45.251.60.0/22
86.104.215.0/24
86.104.227.0/24
89.32.204.0/24
89.33.83.0/24
103.49.84.0/22
162.218.157.0-162.218.158.255
194.26.149.0/24
194.29.70.0/24
194.29.80.0/24
212.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d3:96:fd:00:9f:4b:82:4a:ff:e9:2f:a3:6b:75:66:ba:c2:
ef:7c:09:c7:22:9e:9f:48:fd:29:56:d1:bc:1c:40:98:83:dc:
94:eb:21:ba:0f:2c:66:dd:d7:b4:12:f8:ac:94:91:c0:cb:94:
68:ba:1c:84:13:e7:41:03:1b:fb:02:0c:1a:7c:1b:23:a0:fd:
91:12:a3:d3:4a:42:6c:52:43:73:2d:3d:c6:e2:77:58:54:4d:
53:a7:86:24:81:75:03:f3:05:9b:e3:f6:90:17:64:05:77:82:
9f:0e:c2:81:4b:2e:1e:f7:fb:45:71:32:eb:66:60:20:41:bd:
69:fa:7b:88:69:f5:bb:ff:be:5f:2e:9b:36:94:c8:66:9c:70:
d9:7d:6c:54:73:b3:07:32:76:0f:2c:30:22:6f:80:8b:2f:11:
ff:77:f6:fb:4d:2b:0c:12:ad:42:83:f3:5d:fe:7f:78:e1:25:
8b:e2:bd:16:71:d1:30:7c:f5:8d:02:7c:26:f4:44:8a:c4:77:
ad:ff:f5:91:98:7c:ca:5f:aa:05:bb:38:ad:9a:d8:88:71:74:
1f:f9:89:ff:d3:50:72:a5:cc:13:70:ce:c9:c3:86:8d:fb:f7:
37:f6:7e:5f:08:5b:2c:9b:3b:58:f1:01:11:bd:6f:46:b7:8a:
b4:25:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:52 2026 by rpki-client