Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa
File: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (raw, json)
Hash identifier: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=
Subject key identifier: 27:73:5B:F5:5D:49:EB:A0:67:22:C2:74:29:BC:45:5F:DE:15:29:76
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 019CD7FDFA1A89207BE9C718AF4845A00987
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa
Signing time: Tue 10 Mar 2026 13:44:31 +0000
ROA not before: Tue 10 Mar 2026 13:44:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 153.112.128.0/24 maxlen: 24
153.112.195.0/24 maxlen: 24
153.112.200.0/23 maxlen: 24
153.112.203.0/24 maxlen: 24
153.112.205.0/24 maxlen: 24
153.112.210.0/24 maxlen: 24
153.112.216.0/24 maxlen: 24
153.112.217.0/24 maxlen: 24
153.112.223.0/24 maxlen: 24
153.112.224.0/24 maxlen: 24
153.112.225.0/24 maxlen: 24
153.112.226.0/24 maxlen: 24
153.112.227.0/24 maxlen: 24
153.112.228.0/24 maxlen: 24
153.112.229.0/24 maxlen: 24
153.112.230.0/24 maxlen: 24
153.112.231.0/24 maxlen: 24
153.112.244.0/24 maxlen: 24
192.131.25.0/24 maxlen: 24
192.157.12.0/23 maxlen: 24
192.157.14.0/24 maxlen: 24
192.157.15.0/24 maxlen: 24
192.157.16.0/23 maxlen: 23
192.157.16.0/24 maxlen: 24
192.157.17.0/24 maxlen: 24
193.53.25.0/24 maxlen: 24
193.53.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:fd:fa:1a:89:20:7b:e9:c7:18:af:48:45:a0:09:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Mar 10 13:44:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27735bf55d49eba06722c27429bc455fde152976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:7d:c1:8d:83:79:f4:8a:8d:97:32:c8:e6:
1a:d0:99:b4:0d:ad:af:48:3e:f1:61:fd:d6:b3:18:
5c:5f:d9:8f:9f:45:4b:24:0a:d2:1f:91:9e:56:cf:
57:26:8f:78:73:ab:85:6d:84:e6:35:23:bd:5f:e9:
7a:3b:a4:34:aa:12:f2:51:da:f4:4a:2a:70:a5:93:
10:8a:59:9a:55:2a:b1:b2:2f:70:d2:07:8f:f9:31:
7f:7b:d1:9a:2b:98:dc:ad:78:d5:a6:2f:98:ca:49:
ea:52:a5:e4:a1:8c:cc:fc:ed:0f:82:5c:82:e5:27:
25:a0:4e:09:f5:34:c4:63:24:84:b5:c2:5c:cc:fc:
ee:c4:3c:dd:08:6c:a1:bc:03:4d:c1:45:b2:15:9b:
c0:56:5c:69:e8:2a:07:e5:59:2a:f2:35:0c:69:ea:
ca:3f:30:8e:b6:67:0b:0f:95:ad:c7:04:a8:3d:d8:
c4:05:31:dc:6a:a1:b5:3d:4f:9f:55:83:52:f2:c8:
f3:85:4b:ee:43:f5:44:9d:5f:ff:64:d1:ab:2a:67:
7d:25:9b:94:2c:0f:10:c6:33:a4:bc:9d:fd:45:ac:
52:5a:6e:a0:f3:ec:4b:50:11:3f:4e:eb:74:2a:84:
5c:7c:8f:32:25:9e:5a:3c:50:6d:94:53:9b:f3:f4:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:5B:F5:5D:49:EB:A0:67:22:C2:74:29:BC:45:5F:DE:15:29:76
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.128.0/24
153.112.195.0/24
153.112.200.0/23
153.112.203.0/24
153.112.205.0/24
153.112.210.0/24
153.112.216.0/23
153.112.223.0-153.112.231.255
153.112.244.0/24
192.131.25.0/24
192.157.12.0-192.157.17.255
193.53.25.0/24
193.53.29.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:32:26:39:76:13:b4:73:4b:73:ab:1b:0b:c4:ed:be:a5:4b:
dc:8d:de:8f:2a:fc:51:fd:54:f7:19:f5:f8:71:2f:aa:a3:35:
99:2f:0f:d3:b8:ca:c2:6a:e3:0d:26:71:c7:0d:fd:b7:b7:ea:
cd:79:0e:28:d8:95:4d:a9:6d:4a:3d:5c:63:c7:1e:08:38:84:
ba:f4:19:a7:64:cf:94:8d:c5:d1:31:6a:b0:d8:14:12:e9:c7:
34:33:1d:7c:08:3c:b6:9d:62:23:31:08:b3:71:36:e3:41:3e:
c6:99:72:e1:e5:38:9b:67:bb:a6:76:55:48:e9:51:50:bf:8b:
bc:1f:f1:8e:25:91:d9:32:76:44:00:f7:75:72:a0:ac:75:5b:
9a:0a:80:8f:66:8d:20:23:17:15:b0:c3:46:1e:ba:f8:a4:7d:
4b:13:23:43:ac:5d:99:b6:2d:14:15:2f:65:f6:e0:85:6d:92:
65:63:23:ab:46:22:ea:62:6a:7d:00:cc:a0:49:ac:5d:eb:62:
8a:3d:1e:92:00:41:83:9c:c5:5e:85:c3:c9:3e:ba:80:be:19:
7e:03:a4:d6:e6:ec:9d:d1:5d:98:38:53:40:f3:97:33:bb:0d:
9c:11:c3:50:25:50:83:bf:f8:f0:eb:7a:38:f4:80:30:49:c6:
54:e7:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:30:57 2026 by rpki-client