Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/jLoAADJ5Gs74uK7H-JMHbC6vQ6k.roa
File: jLoAADJ5Gs74uK7H-JMHbC6vQ6k.roa (raw, json)
Hash identifier: 9R+2Qe90idvHqjNj/7kJnuzpi6kaHQ700oIpbDO6G2U=
Subject key identifier: 8C:BA:00:00:32:79:1A:CE:F8:B8:AE:C7:F8:93:07:6C:2E:AF:43:A9
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A15C490E263671D9623D52474D8285ECFD
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/jLoAADJ5Gs74uK7H-JMHbC6vQ6k.roa
Signing time: Wed 21 Oct 2026 02:27:33 +0000
ROA not before: Wed 21 Oct 2026 02:27:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135598
IP address blocks: 45.132.75.0/24 maxlen: 24
167.104.100.0/22 maxlen: 22
167.104.168.0/24 maxlen: 24
167.254.240.0/23 maxlen: 23
185.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:49:0e:26:36:71:d9:62:3d:52:47:4d:82:85:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Oct 21 02:27:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cba000032791acef8b8aec7f893076c2eaf43a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:6f:4e:92:68:df:6d:4b:70:8a:fd:78:2f:
f5:df:3e:b0:1c:1f:8d:1d:de:02:64:d7:a6:9b:5a:
c2:96:86:0f:9e:26:9c:54:ea:3e:f2:c1:c0:db:50:
5c:4a:ae:b7:7a:99:e2:b5:56:ae:7d:00:73:4d:a6:
93:1c:e3:8a:74:ec:8a:2a:1d:dd:51:f2:3f:6c:25:
b0:a9:6b:d1:d1:6c:60:4f:b3:db:5b:dc:af:93:74:
e0:7b:cd:a5:5a:75:3c:b7:a2:0e:cb:ac:92:c3:85:
cd:7f:1b:95:3b:c8:73:7a:8a:10:25:9a:22:be:ad:
50:2a:7f:6e:28:d7:f1:ed:ff:65:cf:7b:3b:55:3d:
5a:f5:26:ef:4f:1b:02:32:b9:18:c1:8a:9d:8d:4d:
56:9b:56:a4:a8:77:24:69:38:d8:3a:f2:34:14:23:
63:30:97:bb:4b:5a:29:a9:82:a1:62:f5:fb:6f:6e:
ed:f2:36:d8:0c:52:7c:a1:ef:98:52:52:c5:ff:23:
06:f7:13:f9:fe:41:84:ef:dd:d9:c4:72:03:0d:72:
c7:bb:94:cd:25:79:0a:67:0b:5c:c7:d7:ac:32:d2:
2e:7a:4c:08:f0:b6:81:2e:cc:85:93:14:be:93:97:
19:4c:0a:8b:86:86:a4:28:c0:cc:c0:6a:e8:e2:64:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BA:00:00:32:79:1A:CE:F8:B8:AE:C7:F8:93:07:6C:2E:AF:43:A9
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/jLoAADJ5Gs74uK7H-JMHbC6vQ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.75.0/24
167.104.100.0/22
167.104.168.0/24
167.254.240.0/23
185.223.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:42:8a:7f:32:3f:d3:16:b8:e1:f5:ef:c6:55:c5:56:02:e3:
9a:ce:23:00:27:65:d1:ec:9f:13:bc:e5:cb:7b:4f:4c:12:70:
1a:31:03:bc:67:da:96:70:1c:20:38:2a:37:5a:66:72:fe:91:
5a:58:b2:c6:5f:7a:2c:14:ca:3d:51:ae:6b:fd:41:b3:19:64:
eb:22:a1:3d:3d:f8:ea:60:1d:0c:9f:89:57:1d:41:22:06:57:
9a:04:ba:96:25:0c:f0:4b:ae:b0:59:57:3e:6d:7c:06:77:63:
79:c5:81:a9:1a:91:22:2e:fa:f0:7a:81:7e:d8:f4:f6:a4:ac:
c6:48:2b:89:27:56:b0:8e:7b:d2:5d:9c:46:59:78:d0:31:b0:
c6:ea:29:17:c5:ab:53:a9:fa:ad:a8:da:71:66:05:fe:11:cb:
84:a1:52:70:c2:7d:fc:c1:52:28:19:2e:cd:a9:a9:cf:24:53:
23:02:6b:69:ce:62:9e:78:51:c7:bb:ac:64:7a:71:ae:1b:e2:
d1:eb:f1:0f:5b:9c:74:e5:73:ad:31:02:92:de:a8:fd:f1:4a:
f9:0e:ce:3f:0a:ab:35:8a:b3:f9:cb:d4:38:db:b6:47:16:28:
63:19:7d:62:a2:c0:29:df:4c:1f:87:63:51:7f:d7:9a:c5:96:
29:db:35:67
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaFcSQ4mNnHZYj1SR02Chez9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzk2OTU1ZDZjNjRkZGZhMTVjZDRhYzg4Y2U1NGQzZjhj
YjEzNDQwHhcNMjYxMDIxMDIyNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2JhMDAwMDMyNzkxYWNlZjhiOGFlYzdmODkzMDc2YzJlYWY0M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv1vTpJo321LcIr9eC/13z6wHB+N
Hd4CZNemm1rCloYPniacVOo+8sHA21BcSq63epnitVaufQBzTaaTHOOKdOyKKh3d
UfI/bCWwqWvR0WxgT7PbW9yvk3Tge82lWnU8t6IOy6ySw4XNfxuVO8hzeooQJZoi
vq1QKn9uKNfx7f9lz3s7VT1a9SbvTxsCMrkYwYqdjU1Wm1akqHckaTjYOvI0FCNj
MJe7S1opqYKhYvX7b27t8jbYDFJ8oe+YUlLF/yMG9xP5/kGE793ZxHIDDXLHu5TN
JXkKZwtcx9esMtIuekwI8LaBLsyFkxS+k5cZTAqLhoakKMDMwGro4mQYEQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIy6AAAyeRrO+Liux/iTB2wur0OpMB8GA1UdIwQY
MBaAFLt5aVXWxk3foVzUrIjOVNP4yxNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmIt
YWM0MDE2MTIwY2I5LzEvakxvQUFESjVHczc0dUs3SC1KTUhiQzZ2UTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmItYWM0MDE2MTIwY2I5
LzEvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYRLAwQC
p2hkAwQAp2ioAwQBp/7wAwQAud/PMA0GCSqGSIb3DQEBCwUAA4IBAQCKQop/Mj/T
Frjh9e/GVcVWAuOaziMAJ2XR7J8TvOXLe09MEnAaMQO8Z9qWcBwgOCo3WmZy/pFa
WLLGX3osFMo9Ua5r/UGzGWTrIqE9PfjqYB0Mn4lXHUEiBleaBLqWJQzwS66wWVc+
bXwGd2N5xYGpGpEiLvrweoF+2PT2pKzGSCuJJ1awjnvSXZxGWXjQMbDG6ikXxatT
qfqtqNpxZgX+EcuEoVJwwn38wVIoGS7NqanPJFMjAmtpzmKeeFHHu6xkenGuG+LR
6/EPW5x05XOtMQKS3qj98Ur5Ds4/Cqs1irP5y9Q427ZHFihjGX1iosAp30wfh2NR
f9eaxZYp2zVn
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:18 2026 by rpki-client