Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa
File: jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa (raw, json)
Hash identifier: nUynGoee1lekBHyQycCWjTotr3IB8hCilEBQKb53ky0=
Subject key identifier: 8E:30:1C:4D:9B:04:E9:25:86:E6:8E:A6:B4:71:CE:97:7F:F1:F2:67
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019FD3B184BB364747159CB2CBA7AEBBE974
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa
Signing time: Wed 05 Aug 2026 20:50:54 +0000
ROA not before: Wed 05 Aug 2026 20:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
5.252.165.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
31.216.59.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.145.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
94.154.8.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
135.84.209.0/24 maxlen: 24
135.84.210.0/24 maxlen: 24
135.84.211.0/24 maxlen: 24
135.84.212.0/24 maxlen: 24
135.84.213.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
135.136.128.0/24 maxlen: 24
135.136.129.0/24 maxlen: 24
135.136.130.0/24 maxlen: 24
135.136.131.0/24 maxlen: 24
135.136.132.0/24 maxlen: 24
135.136.134.0/24 maxlen: 24
135.136.135.0/24 maxlen: 24
135.136.136.0/24 maxlen: 24
135.136.137.0/24 maxlen: 24
135.136.138.0/24 maxlen: 24
135.136.139.0/24 maxlen: 24
135.136.142.0/24 maxlen: 24
135.136.143.0/24 maxlen: 32
135.136.144.0/24 maxlen: 32
153.52.160.0/19 maxlen: 32
178.211.157.0/24 maxlen: 24
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
189.12.224.0/19 maxlen: 32
191.219.128.0/19 maxlen: 32
194.49.68.0/24 maxlen: 24
194.49.69.0/24 maxlen: 24
194.49.78.0/24 maxlen: 24
194.49.79.0/24 maxlen: 24
207.189.0.0/19 maxlen: 32
207.189.0.0/24 maxlen: 24
207.189.1.0/24 maxlen: 24
207.189.2.0/24 maxlen: 24
207.189.3.0/24 maxlen: 24
207.189.4.0/24 maxlen: 24
207.189.5.0/24 maxlen: 24
207.189.6.0/24 maxlen: 24
207.189.7.0/24 maxlen: 24
207.189.8.0/24 maxlen: 24
207.189.9.0/24 maxlen: 24
207.189.10.0/24 maxlen: 24
207.189.11.0/24 maxlen: 24
207.189.12.0/24 maxlen: 24
207.189.13.0/24 maxlen: 24
207.189.14.0/24 maxlen: 24
207.189.15.0/24 maxlen: 24
207.189.26.0/24 maxlen: 24
207.189.27.0/24 maxlen: 24
207.189.30.0/24 maxlen: 24
207.189.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:b1:84:bb:36:47:47:15:9c:b2:cb:a7:ae:bb:e9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Aug 5 20:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e301c4d9b04e92586e68ea6b471ce977ff1f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:fd:da:5b:f8:35:e2:4c:7a:6e:f6:f6:d2:
7d:24:01:47:c1:87:fd:e6:e1:a6:1a:d7:f2:c0:86:
22:8b:ef:8d:dd:b2:5b:a7:f8:4f:a4:d1:8e:05:21:
25:4d:72:cd:91:28:a0:4b:d7:02:2a:06:5b:76:83:
0c:e3:8c:71:e8:01:1e:75:83:5f:fe:54:e2:6f:3e:
13:07:fa:07:d3:6f:e0:8a:74:23:3a:1c:38:e3:f7:
5b:3b:a5:81:08:c3:64:04:18:bd:f9:55:b1:14:9f:
0c:18:a2:7f:02:df:d3:c3:d3:5a:be:2c:63:59:d7:
d1:0c:9d:11:8b:b6:79:d8:19:31:4c:c7:a1:3c:e7:
49:ba:10:60:97:5b:de:9a:39:89:3c:68:b2:a7:62:
0d:ae:8c:46:a9:0c:41:6e:fc:a6:81:75:64:f3:d9:
3a:6d:71:d4:6b:85:1a:38:52:7f:bb:99:c1:e0:22:
65:e9:f1:8e:62:6a:86:be:b1:9d:02:9b:68:2e:40:
e7:c9:12:4b:37:da:5a:8a:e0:fe:b3:dc:3b:05:ca:
2d:e0:f7:6e:a7:a9:47:d1:a4:5d:35:71:57:eb:89:
b5:cb:2b:04:62:8c:54:a0:3d:3d:6a:57:70:f8:94:
d1:a4:cf:7f:5a:a7:87:6b:5d:54:0b:a9:29:25:1f:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:1C:4D:9B:04:E9:25:86:E6:8E:A6:B4:71:CE:97:7F:F1:F2:67
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/22
31.216.59.0/24
45.87.60.0/22
45.130.152.0/22
45.143.144.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
94.154.8.0/24
103.104.248.0/22
103.202.52.0/22
135.84.209.0-135.84.213.255
135.136.128.0/19
153.52.160.0/19
178.211.157.0/24
185.162.74.0/23
185.234.115.0/24
188.210.236.0/24
189.12.224.0/19
191.219.128.0/19
194.49.68.0/23
194.49.78.0/23
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
76:9e:b0:fb:bd:2b:4e:1e:ac:e5:8e:95:bd:26:93:a7:a8:fe:
e7:a9:99:12:e5:12:3e:13:35:ff:90:95:c1:28:5a:57:b5:f1:
53:ec:dc:76:a0:a9:e1:5b:30:f2:38:ec:e0:91:2d:7c:53:75:
cd:bf:b4:a2:b8:2f:87:93:89:84:6c:21:49:5c:2e:68:f8:7e:
a9:fd:14:03:90:b2:e5:e7:31:4c:db:6a:91:15:a6:da:97:46:
30:4f:2a:10:54:5e:c2:49:22:ff:2e:52:ae:d0:b3:be:e6:d9:
67:34:e5:a7:f7:c2:04:4b:ca:63:1a:13:d0:a4:78:31:70:e8:
8f:59:36:33:45:75:15:2c:67:96:eb:a2:9c:c6:9f:b2:b9:32:
ba:34:7f:eb:43:59:d8:a0:ce:c4:96:e8:61:1b:9e:54:ef:63:
4b:5e:83:4f:d0:2d:4d:3e:8e:ab:32:42:6a:a7:75:1d:2d:c2:
bb:07:0b:37:f5:5b:a6:89:2d:a5:5d:19:d4:96:44:bf:f1:7f:
f2:e9:8b:a2:29:b9:cb:6f:6b:c0:4a:e4:76:07:ed:95:50:66:
ce:ea:a2:95:4e:db:1d:35:9d:c1:65:3b:c5:db:44:78:ab:f8:
df:2c:e7:9c:1a:d0:ff:f4:21:5e:0b:21:17:38:cf:77:22:0e:
92:80:00:5f
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZ/TsYS7NkdHFZyyy6euu+l0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3
NGJmMWYwHhcNMjYwODA1MjA1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTMwMWM0ZDliMDRlOTI1ODZlNjhlYTZiNDcxY2U5NzdmZjFmMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHb92lv4NeJMem729tJ9JAFHwYf9
5uGmGtfywIYii++N3bJbp/hPpNGOBSElTXLNkSigS9cCKgZbdoMM44xx6AEedYNf
/lTibz4TB/oH02/ginQjOhw44/dbO6WBCMNkBBi9+VWxFJ8MGKJ/At/Tw9Navixj
WdfRDJ0Ri7Z52BkxTMehPOdJuhBgl1vemjmJPGiyp2INroxGqQxBbvymgXVk89k6
bXHUa4UaOFJ/u5nB4CJl6fGOYmqGvrGdAptoLkDnyRJLN9paiuD+s9w7Bcot4Pdu
p6lH0aRdNXFX64m1yysEYoxUoD09aldw+JTRpM9/WqeHa11UC6kpJR+gRwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFI4wHE2bBOklhuaOprRxzpd/8fJnMB8GA1UdIwQY
MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt
ZTQ3MzUzMWY2ZmU4LzEvampBY1Rac0U2U1dHNW82bXRISE9sM194OG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4
LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAIF
/KQDBAAf2DsDBAItVzwDBAItgpgDBAItj5ADBABZJOYDBABZJWQDBABZLisDBABe
mggDBAJnaPgDBAJnyjQwDAMEAIdU0QMEAYdU1AMEBYeIgAMEBZk0oAMEALLTnQME
AbmiSgMEALnqcwMEALzS7AMEBb0M4AMEBb/bgAMEAcIxRAMEAcIxTgMEBc+9ADAN
BgkqhkiG9w0BAQsFAAOCAQEAdp6w+70rTh6s5Y6VvSaTp6j+56mZEuUSPhM1/5CV
wShaV7XxU+zcdqCp4Vsw8jjs4JEtfFN1zb+0orgvh5OJhGwhSVwuaPh+qf0UA5Cy
5ecxTNtqkRWm2pdGME8qEFRewkki/y5SrtCzvubZZzTlp/fCBEvKYxoT0KR4MXDo
j1k2M0V1FSxnluuinMafsrkyujR/60NZ2KDOxJboYRueVO9jS16DT9AtTT6OqzJC
aqd1HS3CuwcLN/VbpoktpV0Z1JZEv/F/8umLoim5y29rwErkdgftlVBmzuqilU7b
HTWdwWU7xdtEeKv43yznnBrQ//QhXgshFzjPdyIOkoAAXw==
-----END CERTIFICATE-----
Generated at Tue Aug 11 06:50:36 2026 by rpki-client