Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/JcOppFfKnPF-LMTMf0TyEZDWlPU.roa
File: JcOppFfKnPF-LMTMf0TyEZDWlPU.roa (raw, json)
Hash identifier: CBK5Ax4pVuwzug5rITTKmUjunN1YPA+gs80SlvReIxE=
Subject key identifier: 25:C3:A9:A4:57:CA:9C:F1:7E:2C:C4:CC:7F:44:F2:11:90:D6:94:F5
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 01A04698FE736DBDB68B7D6821CF41C041C7
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/JcOppFfKnPF-LMTMf0TyEZDWlPU.roa
Signing time: Fri 28 Aug 2026 04:20:26 +0000
ROA not before: Fri 28 Aug 2026 04:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.30.0/23 maxlen: 23
109.172.78.0/23 maxlen: 23
109.172.100.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
109.172.116.0/23 maxlen: 23
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
155.212.160.0/20 maxlen: 20
157.22.184.0/21 maxlen: 21
157.22.192.0/20 maxlen: 20
168.113.176.0/20 maxlen: 20
168.113.192.0/20 maxlen: 20
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
2a01:230:6::/48 maxlen: 48
2a01:230:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:98:fe:73:6d:bd:b6:8b:7d:68:21:cf:41:c0:41:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Aug 28 04:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25c3a9a457ca9cf17e2cc4cc7f44f21190d694f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:48:00:32:bc:42:83:d6:35:18:c6:6e:75:
23:eb:d4:49:02:ff:70:a1:e3:c6:c4:ad:a5:f2:a8:
6a:43:1d:97:10:a5:bf:03:39:0a:51:23:9b:5a:0d:
57:5d:58:0f:14:3f:60:be:ed:ab:9b:e2:b4:a0:d5:
ae:00:3a:bb:f3:e7:39:fe:5e:a8:b6:f2:91:4e:92:
df:1a:49:24:3e:00:2b:9b:95:d5:e8:ff:86:b6:97:
31:a2:c3:6d:07:30:a5:bc:5a:63:11:4b:61:36:08:
c0:3c:da:17:43:e9:4f:f5:23:f5:8f:8a:bb:a1:c5:
ed:cd:ee:75:ba:91:ac:ce:cb:b0:ff:f4:06:56:40:
cb:5e:4f:bb:3b:9b:41:c4:88:b1:56:48:d6:8e:f0:
b8:20:07:89:bf:60:3e:12:ac:6e:f2:d1:bc:f2:31:
8e:4a:9d:f2:6b:de:95:3c:23:9e:76:b6:b9:82:40:
5f:01:43:aa:4d:42:f1:35:27:f8:2e:bc:78:08:f6:
b0:28:a3:74:78:cb:4a:88:23:f5:05:af:4c:1a:4e:
ee:e3:71:8a:3e:09:c7:47:ef:33:e7:42:9f:d7:14:
30:a7:ce:0d:6f:ff:87:7d:83:91:dc:b3:01:d9:83:
47:2e:36:75:47:a9:1d:bc:4f:df:d3:94:ff:1c:cc:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:A9:A4:57:CA:9C:F1:7E:2C:C4:CC:7F:44:F2:11:90:D6:94:F5
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/JcOppFfKnPF-LMTMf0TyEZDWlPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.30.0/23
109.172.78.0/23
109.172.100.0/23
109.172.108.0-109.172.117.255
149.154.64.0/21
155.212.160.0/20
157.22.184.0-157.22.207.255
168.113.176.0-168.113.207.255
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0-188.120.251.255
188.120.253.0-188.120.255.255
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230:1::-2a01:230:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:ba:e6:36:0e:59:1e:69:d9:61:16:55:37:1b:df:3d:4c:70:
a9:ea:fb:94:8a:f4:0b:d7:64:bc:1f:13:39:ae:39:53:4d:96:
ff:73:b5:25:2e:b0:b8:f1:bb:48:f0:f1:ce:bc:0a:24:2c:e1:
9d:70:3d:a3:6c:92:5f:c1:9e:7d:0f:10:3c:5c:dc:fc:33:08:
e6:3a:bd:e5:70:26:49:25:9d:23:4b:a2:19:14:5e:7b:b0:8d:
1c:32:42:56:02:04:ca:bb:ad:6c:75:18:12:a6:18:e4:6d:7d:
9a:4f:d4:e6:43:25:40:e4:ee:c8:57:c2:bf:4d:12:12:70:0d:
4d:ff:9a:5a:22:63:fb:b8:df:76:63:21:b2:a9:c3:e6:8e:17:
76:c6:de:98:51:86:b8:a2:9e:fd:c2:dd:b9:53:b5:1d:5a:50:
93:f2:40:9c:50:4c:b2:b1:02:24:17:74:09:dc:f3:53:d2:81:
c6:c2:31:3a:cf:ee:7c:39:ef:32:8c:61:11:49:95:8a:17:62:
e2:8f:53:b4:ce:10:6b:ff:f0:eb:f6:a6:b2:b7:b3:b8:eb:cf:
7c:a3:23:ad:fa:1a:0d:be:d2:4c:62:7f:43:b0:25:b9:72:4d:
44:4a:b0:5b:97:ec:f0:c8:d9:96:70:cd:c5:9f:21:7d:57:86:
6e:ed:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:28 2026 by rpki-client