Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/jpMgfOXsWY_dXar5ukUfc44iJfo.roa
File: jpMgfOXsWY_dXar5ukUfc44iJfo.roa (raw, json)
Hash identifier: Vr6SidyDuchvsNpWGptCRsdP0YTMrZLP6qYLEmokLMc=
Subject key identifier: 8E:93:20:7C:E5:EC:59:8F:DD:5D:AA:F9:BA:45:1F:73:8E:22:25:FA
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019FB77AF135C9F5B3A15A33552AE15ECB0B
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/jpMgfOXsWY_dXar5ukUfc44iJfo.roa
Signing time: Fri 31 Jul 2026 09:21:55 +0000
ROA not before: Fri 31 Jul 2026 09:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43180
IP address blocks: 45.11.57.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
82.158.192.0/23 maxlen: 23
85.137.51.0/24 maxlen: 24
85.137.60.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
91.222.172.0/24 maxlen: 24
91.222.173.0/24 maxlen: 24
91.222.174.0/23 maxlen: 23
176.97.112.0/23 maxlen: 23
176.97.116.0/22 maxlen: 22
176.97.120.0/23 maxlen: 23
176.119.31.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.204.0/24 maxlen: 24
194.42.206.0/23 maxlen: 23
195.66.210.0/24 maxlen: 24
195.128.248.0/23 maxlen: 24
212.86.122.0/23 maxlen: 23
2a09:2dc2::/32 maxlen: 32
2a09:2dc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:7a:f1:35:c9:f5:b3:a1:5a:33:55:2a:e1:5e:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jul 31 09:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e93207ce5ec598fdd5daaf9ba451f738e2225fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:ab:c9:3c:8f:d0:ce:70:82:dc:76:bf:53:
cf:84:d9:b8:d1:e3:aa:f4:93:08:19:26:76:dc:dc:
e2:86:4f:e7:dc:af:dd:c8:4c:46:42:50:95:24:45:
f9:95:eb:35:27:82:ff:84:6d:80:37:0b:96:50:2e:
36:78:f7:22:f7:b5:84:17:d6:b5:93:3d:7e:01:a3:
54:81:bc:73:5c:04:f7:64:7c:1e:7c:77:0a:bd:87:
7f:ee:70:e9:54:4b:73:4b:0b:44:03:a0:80:10:ce:
2b:cb:8a:14:fd:1e:95:e9:4a:f4:50:65:1f:e5:41:
cf:5b:94:2e:4c:5b:c2:ae:fb:76:ba:b8:52:51:c1:
f7:eb:aa:e3:26:df:01:19:38:71:8c:46:0a:15:92:
9e:bd:0a:e0:21:4b:66:ab:54:ae:d3:04:4b:b3:d6:
06:59:63:85:64:28:c9:99:e0:cb:8c:fb:fc:19:74:
e9:0e:43:36:68:dd:bc:3a:f1:6e:2b:fb:75:4e:9c:
ea:11:26:14:f4:bc:3b:64:a4:70:f4:ff:dc:64:0c:
44:52:33:d6:c6:e8:56:00:2d:90:08:81:a1:d5:f2:
f5:ab:fa:ee:1b:d6:b2:2c:bc:ff:24:bd:67:96:cf:
71:b4:dc:05:83:9e:3b:be:c0:5b:7f:ad:18:5a:1a:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:20:7C:E5:EC:59:8F:DD:5D:AA:F9:BA:45:1F:73:8E:22:25:FA
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/jpMgfOXsWY_dXar5ukUfc44iJfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.57.0/24
45.11.59.0/24
45.12.0.0/23
45.12.3.0/24
82.158.192.0/23
85.137.51.0/24
85.137.60.0/24
91.208.115.0/24
91.222.172.0/22
176.97.112.0/23
176.97.116.0-176.97.121.255
176.119.31.0/24
185.254.199.0/24
194.42.196.0/22
194.42.204.0/24
194.42.206.0/23
195.66.210.0/24
195.128.248.0/23
212.86.122.0/23
IPv6:
2a09:2dc2::/31
Signature Algorithm: sha256WithRSAEncryption
20:66:5a:d4:66:ec:3e:a3:60:fe:72:0f:07:c6:f7:c9:16:e6:
49:6b:f0:7b:8e:07:db:98:49:ee:b1:26:71:8d:31:8e:5f:71:
9f:fc:80:e4:75:4e:c8:14:44:1a:d6:b5:47:71:b5:03:d0:2b:
f2:b9:f3:e3:3a:ec:69:99:82:80:bc:13:98:76:d3:cb:87:6e:
00:da:2d:f7:39:0a:cd:e4:c5:16:e3:77:c6:28:e4:49:06:35:
07:3c:29:1f:02:43:61:d0:b4:be:3a:00:b1:28:84:08:78:3b:
c3:b0:b2:f2:22:35:bc:dd:fe:4e:58:a7:1f:72:93:f5:fb:9c:
60:02:6e:4c:04:e4:a4:57:06:de:07:96:35:48:37:6c:87:70:
99:0c:9d:31:4c:30:cd:aa:06:76:5d:7f:78:03:cf:29:eb:c6:
30:79:40:ef:25:07:34:fc:b2:6c:a1:51:eb:c4:b4:78:a8:55:
09:6f:55:4c:45:b7:71:7f:78:c2:87:e6:93:9e:b3:ed:2e:a2:
52:92:8c:5e:b2:23:af:02:8f:1d:d9:b2:ee:f0:90:c3:3e:74:
1d:c3:6d:f3:10:fe:91:ab:75:45:22:8d:8f:78:fc:a9:af:bd:
c5:9a:83:40:af:07:7d:d9:f9:fc:50:d4:2c:3a:91:dc:02:8e:
c9:aa:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:09:31 2026 by rpki-client