Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JreMWWMsC9aNQvk5aFmmtKamocM.roa
File: JreMWWMsC9aNQvk5aFmmtKamocM.roa (raw, json)
Hash identifier: s1gaS0wmJDnZEy9cFRmgnvK+aF4JNNf4tk5SgiQY7Gk=
Subject key identifier: 26:B7:8C:59:63:2C:0B:D6:8D:42:F9:39:68:59:A6:B4:A6:A6:A1:C3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3AE65EB663612CE12F8A9E96313462D8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JreMWWMsC9aNQvk5aFmmtKamocM.roa
Signing time: Tue 07 Jul 2026 04:46:43 +0000
ROA not before: Tue 07 Jul 2026 04:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:e6:5e:b6:63:61:2c:e1:2f:8a:9e:96:31:34:62:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 04:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26b78c59632c0bd68d42f9396859a6b4a6a6a1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:cc:a4:23:c0:62:ce:a4:6d:31:a2:50:1e:
b2:17:e4:bc:71:78:69:9c:69:0c:83:10:51:4c:60:
7e:23:33:ed:17:a4:1e:9e:d5:5a:41:c2:71:18:5d:
6f:61:2b:fb:81:3e:df:6d:90:ff:e1:e2:a0:a8:5f:
96:df:df:e9:d1:44:7e:e0:be:5a:49:66:9c:a0:81:
68:ca:41:ee:c9:b6:51:d9:e1:ad:f2:d0:13:60:ab:
3d:57:5a:d1:d7:1b:dd:71:c7:7f:e9:f1:ae:f5:2a:
44:01:08:96:03:57:b8:45:20:af:a1:ab:1a:80:dd:
8a:54:8b:80:60:d0:7e:72:42:1f:38:74:ef:e5:7b:
f2:4f:37:36:a7:9a:d0:ec:e2:4f:91:b0:8b:58:6b:
b3:4e:b9:bc:57:77:62:68:74:d8:16:76:e1:ba:1a:
52:39:d9:ce:01:c8:b5:a6:62:63:52:cb:1f:b1:cd:
87:7a:47:5c:e6:60:21:33:af:a9:78:ba:c2:5f:c8:
e1:a2:0d:db:f4:12:50:41:c2:a5:eb:41:6e:4f:ae:
cc:cb:b1:6c:ed:c6:7c:60:58:11:d3:62:7f:6c:eb:
1e:38:c9:0c:fa:2b:0e:3d:0d:b4:3a:6a:6e:5b:bd:
10:3a:6a:34:d0:19:aa:3e:10:fb:c0:ec:d4:d2:98:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:8C:59:63:2C:0B:D6:8D:42:F9:39:68:59:A6:B4:A6:A6:A1:C3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JreMWWMsC9aNQvk5aFmmtKamocM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.37.119.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.43.140.0/24
89.43.143.0/24
89.46.3.0/24
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.126.255
93.113.181.0/24
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ae:03:97:ce:14:49:46:35:26:0f:01:6e:ea:7e:56:4e:2d:
33:91:42:ae:bb:d5:a2:74:17:36:2b:20:d3:0d:b5:5f:dc:2c:
67:80:8a:24:a1:9e:dd:19:8d:41:61:82:bd:d7:e1:74:a9:23:
53:c1:0b:97:09:df:33:b3:4b:77:75:a3:ae:47:99:c8:2c:65:
94:b4:2c:fa:d5:e1:fc:d1:ff:7e:c1:ce:42:52:e7:df:79:86:
4f:2d:00:fb:0a:b5:bc:53:b1:66:98:bf:5d:e7:2d:74:ac:92:
a6:91:70:be:b6:e0:d4:4e:c9:2c:7b:64:68:22:ec:c6:59:b1:
c4:8b:86:e9:e9:eb:76:ca:d4:a2:af:88:58:9d:ac:4b:27:6f:
61:27:f1:f6:40:d3:f4:d9:17:14:b9:9b:24:f2:4d:0a:9a:0b:
46:2d:de:ed:64:7c:2a:62:b2:c4:e2:60:c7:64:06:11:a2:b9:
af:9d:e6:e0:58:67:08:af:1b:8c:69:93:b8:3b:66:d3:67:22:
bc:20:e2:8c:7c:78:30:56:07:d4:f3:75:dd:35:91:93:f5:3c:
ce:22:fb:37:39:6b:66:76:df:d0:9d:dc:f7:90:4b:b7:26:5a:
17:55:ec:28:0e:7e:67:26:dc:54:bb:22:68:0b:d6:a7:74:05:
b6:7e:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client