Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/N_jcx-vMMZQ-ggznBt4qC1gKoBU.roa
File: N_jcx-vMMZQ-ggznBt4qC1gKoBU.roa (raw, json)
Hash identifier: OloQSKGZhoZGC+V0qLNb1liAFb+q8aqVMFhoZc42dnw=
Subject key identifier: 37:F8:DC:C7:EB:CC:31:94:3E:82:0C:E7:06:DE:2A:0B:58:0A:A0:15
Certificate issuer: /CN=b666121db784bdedb61dd0dfc6e0fa70f79473a1
Certificate serial: 019F236896EDB606D87C885A92A84BEA603F
Authority key identifier: B6:66:12:1D:B7:84:BD:ED:B6:1D:D0:DF:C6:E0:FA:70:F7:94:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmYSHbeEve22HdDfxuD6cPeUc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/N_jcx-vMMZQ-ggznBt4qC1gKoBU.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42228
IP address blocks: 45.137.48.0/22 maxlen: 22
77.108.128.0/18 maxlen: 18
77.108.154.0/24 maxlen: 24
77.108.158.0/24 maxlen: 24
77.108.160.0/24 maxlen: 24
2a00:6300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmYSHbeEve22HdDfxuD6cPeUc6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:96:ed:b6:06:d8:7c:88:5a:92:a8:4b:ea:60:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b666121db784bdedb61dd0dfc6e0fa70f79473a1
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37f8dcc7ebcc31943e820ce706de2a0b580aa015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:d5:a9:d4:34:e3:e9:24:c6:26:30:cd:44:
03:84:02:97:8b:5b:e2:2d:f0:ff:ea:26:10:7e:d2:
28:8f:e3:a2:e8:58:6c:8f:08:67:d4:5b:ed:88:93:
46:c3:6d:3e:aa:03:6b:c6:fe:e8:22:70:a6:cf:90:
b0:39:70:1a:a3:da:dd:b5:bc:02:26:38:b1:df:0d:
14:94:3a:a0:2f:c9:89:32:b2:87:07:19:15:5b:7d:
0d:b3:95:75:18:c5:d8:88:85:1a:8e:86:52:07:96:
45:21:a4:26:e1:c6:d4:b7:9f:ad:92:28:de:c5:4f:
21:d9:21:1a:63:cb:95:4d:1d:99:1d:4e:0a:42:32:
09:57:0d:24:2f:3a:56:44:63:8f:53:e4:f3:3f:e9:
ee:26:47:a9:1c:65:c9:9a:c5:2f:7e:97:13:16:cf:
db:6e:1f:58:f0:68:1e:c8:32:a2:12:d0:95:86:15:
b6:e8:51:0d:6f:65:d8:07:57:af:0e:40:25:14:3e:
34:b6:30:83:10:b5:79:7b:30:55:70:8a:e7:69:e2:
45:e8:1d:0c:41:52:f9:e9:34:0b:ba:f6:8d:e8:70:
16:56:95:d9:f6:77:d6:dd:60:cb:d1:72:5d:aa:c1:
51:a6:87:3e:27:c6:c5:b0:82:8d:5e:8a:fe:53:18:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:DC:C7:EB:CC:31:94:3E:82:0C:E7:06:DE:2A:0B:58:0A:A0:15
X509v3 Authority Key Identifier:
keyid:B6:66:12:1D:B7:84:BD:ED:B6:1D:D0:DF:C6:E0:FA:70:F7:94:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmYSHbeEve22HdDfxuD6cPeUc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/N_jcx-vMMZQ-ggznBt4qC1gKoBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.48.0/22
77.108.128.0/18
IPv6:
2a00:6300::/32
Signature Algorithm: sha256WithRSAEncryption
0c:3d:fb:72:7c:c9:eb:19:9d:b5:1e:70:5a:06:82:14:88:ee:
4b:c9:54:6c:d6:c4:bb:ef:7a:9e:78:af:52:2a:ed:39:14:4b:
11:4f:bb:0f:cb:16:80:46:6a:27:2a:16:d0:f4:6c:07:c3:8c:
83:3c:0f:a5:f5:c5:d9:83:3a:9d:93:14:36:42:44:21:ae:8f:
c3:20:2f:52:0f:52:df:11:4f:13:a7:e9:21:86:a5:ff:26:44:
48:38:06:32:b8:ff:db:d8:4f:21:51:19:02:a7:5c:04:4d:4e:
78:3f:74:28:1c:68:2a:b7:fe:78:19:f7:ba:2f:6e:68:3e:5d:
2c:7d:4c:1e:ec:20:f6:6a:8e:cc:04:bc:a1:63:ef:28:21:87:
29:0a:c0:a5:59:fb:a6:4d:b0:3b:28:09:e9:64:d7:cc:d7:08:
1c:af:3b:15:2d:9f:eb:a6:1a:b9:89:2e:d4:52:46:39:8b:db:
9c:e7:4b:40:92:3a:a4:83:3e:bd:a7:ef:b7:e3:7f:dd:b9:90:
da:7a:bf:57:5b:5f:c0:e1:2e:03:33:c7:07:b2:bb:3a:75:10:
f4:84:d9:88:d6:7e:24:57:28:5c:cd:5e:5b:fb:8c:19:9f:66:
0d:0f:d3:15:4f:73:db:2c:6d:49:77:17:80:59:ca:64:05:04:
87:5b:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:22 2026 by rpki-client