Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/pJjBMVgjU8TU3lF8ocox453j5Jw.roa
File: pJjBMVgjU8TU3lF8ocox453j5Jw.roa (raw, json)
Hash identifier: GXNU56VqxczP2JIPD5AYPnfq2TU7EH3n/lf3ph9JEPA=
Subject key identifier: A4:98:C1:31:58:23:53:C4:D4:DE:51:7C:A1:CA:31:E3:9D:E3:E4:9C
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 01A014E417CF27E8C87110F17CF410B2D382
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/pJjBMVgjU8TU3lF8ocox453j5Jw.roa
Signing time: Tue 18 Aug 2026 12:41:27 +0000
ROA not before: Tue 18 Aug 2026 12:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47329
IP address blocks: 79.139.48.0/22 maxlen: 22
79.139.112.0/22 maxlen: 22
185.39.160.0/22 maxlen: 22
185.39.161.0/24 maxlen: 24
185.39.163.0/24 maxlen: 24
185.63.108.0/22 maxlen: 22
185.63.200.0/22 maxlen: 22
185.67.8.0/22 maxlen: 22
185.67.68.0/22 maxlen: 22
185.67.68.0/24 maxlen: 24
185.67.69.0/24 maxlen: 24
185.67.70.0/24 maxlen: 24
185.67.71.0/24 maxlen: 24
185.116.252.0/24 maxlen: 24
185.116.253.0/24 maxlen: 24
185.116.254.0/24 maxlen: 24
185.116.255.0/24 maxlen: 24
195.62.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:e4:17:cf:27:e8:c8:71:10:f1:7c:f4:10:b2:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Aug 18 12:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a498c131582353c4d4de517ca1ca31e39de3e49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:a7:6a:c3:c2:38:ba:65:a8:5c:e5:02:f5:
2b:8b:45:72:5c:92:f3:d1:fc:20:42:b4:da:2c:77:
cd:83:d2:20:ef:40:c0:ef:bc:de:a8:29:cd:19:d5:
b9:5d:31:05:64:d7:93:8e:68:18:30:7d:5e:ee:00:
1c:ff:f9:85:11:4e:6b:12:cf:60:f3:f7:40:dc:dc:
03:4a:9f:4c:9a:57:7c:1e:d2:7c:ef:2f:c4:ec:bf:
42:04:bd:8a:a9:c4:b2:29:32:6e:bd:3c:87:02:0e:
e0:75:ae:0e:a1:1f:f9:20:fe:d9:06:a3:9b:ab:40:
f7:d4:cf:3d:10:37:51:e2:4b:38:95:90:4e:b1:b0:
cf:ff:2c:52:96:56:38:2e:da:46:39:30:5e:1f:16:
a3:5f:3e:18:a9:7c:48:18:85:96:4d:61:ee:9b:de:
b2:17:74:92:a8:4b:02:e2:75:62:4e:e1:74:82:8e:
a2:11:b9:8d:b4:fc:37:3e:e2:2e:24:53:e1:17:68:
85:b2:49:19:4b:12:f3:e0:76:e3:26:63:ce:c0:a7:
b2:d7:7f:d3:90:96:07:2a:45:b4:78:31:04:d4:08:
77:62:71:26:78:d2:15:22:0c:f5:d7:d0:0a:ea:20:
55:c5:9c:7a:d6:92:02:56:17:33:b4:be:8f:dc:55:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:C1:31:58:23:53:C4:D4:DE:51:7C:A1:CA:31:E3:9D:E3:E4:9C
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/pJjBMVgjU8TU3lF8ocox453j5Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.48.0/22
79.139.112.0/22
185.39.160.0/22
185.63.108.0/22
185.63.200.0/22
185.67.8.0/22
185.67.68.0/22
185.116.252.0/22
195.62.64.0/23
Signature Algorithm: sha256WithRSAEncryption
46:66:16:de:fc:92:77:d8:23:45:62:2b:b5:0e:f6:f8:ee:6d:
f2:65:8d:e6:a7:8b:26:33:0f:55:a7:b4:56:3b:c3:f3:81:9c:
d2:69:e9:0f:73:15:9e:7b:aa:5f:b0:07:8c:62:2c:77:68:2c:
2b:ac:d2:ed:df:d3:74:16:be:66:d3:2b:a6:98:44:e9:f8:fc:
cb:d7:73:fd:73:3a:05:49:52:f4:11:14:de:ad:8d:cb:d2:fe:
f7:93:06:9b:54:60:1f:66:0e:40:0e:8e:4b:fd:b5:cc:79:f1:
df:61:18:83:f3:d6:13:fd:95:05:52:d9:12:09:f0:68:93:f0:
36:43:44:7f:10:48:e3:ee:ab:d5:f3:9b:57:69:e2:84:2b:4e:
53:db:f1:b4:fe:a7:39:df:a5:eb:b7:a3:43:63:45:ee:16:ce:
d8:f9:4b:6c:be:00:51:4c:a6:a5:df:1a:ec:a5:ce:33:b5:dd:
79:89:82:6c:38:dc:6c:ac:5f:0e:00:f4:f1:d6:a7:0b:23:ff:
e1:09:bc:8c:5b:8f:c2:33:38:ac:c8:ec:ab:0a:09:3d:ae:6e:
31:fe:cb:b4:fa:6b:34:05:31:97:66:f9:d8:d6:6d:ff:f3:12:
0e:55:00:4f:6a:8f:89:b2:e5:37:57:29:78:7c:d8:44:95:2b:
50:61:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:43:45 2026 by rpki-client