Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/JudSUCOqbrtWbahpUSi_qKz1NTU.roa
File: JudSUCOqbrtWbahpUSi_qKz1NTU.roa (raw, json)
Hash identifier: bQyJrY/9C3LHftNvfMRZW3PNS7iigGqzrsnlBjeZ04o=
Subject key identifier: 26:E7:52:50:23:AA:6E:BB:56:6D:A8:69:51:28:BF:A8:AC:F5:35:35
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019D01A60130FD755333775DF259F82D08FA
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/JudSUCOqbrtWbahpUSi_qKz1NTU.roa
Signing time: Wed 18 Mar 2026 15:52:29 +0000
ROA not before: Wed 18 Mar 2026 15:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33820
IP address blocks: 145.36.0.0/20 maxlen: 20
145.36.16.0/20 maxlen: 20
145.36.32.0/20 maxlen: 20
145.36.48.0/24 maxlen: 24
145.36.49.0/24 maxlen: 24
145.36.50.0/24 maxlen: 24
145.36.51.0/24 maxlen: 24
145.36.52.0/24 maxlen: 24
145.36.53.0/24 maxlen: 24
145.36.54.0/24 maxlen: 24
145.36.55.0/24 maxlen: 24
145.36.56.0/24 maxlen: 24
145.36.57.0/24 maxlen: 24
145.36.58.0/24 maxlen: 24
145.36.59.0/24 maxlen: 24
145.36.60.0/24 maxlen: 24
145.36.61.0/24 maxlen: 24
145.36.62.0/24 maxlen: 24
145.36.63.0/24 maxlen: 24
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:a6:01:30:fd:75:53:33:77:5d:f2:59:f8:2d:08:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Mar 18 15:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e7525023aa6ebb566da8695128bfa8acf53535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:87:95:5f:8b:f3:5c:94:cc:fb:7b:df:77:
f4:78:f5:fb:10:58:ce:ca:e8:ee:31:f1:6f:33:56:
a3:3f:aa:00:aa:51:11:02:6a:67:4d:5c:cb:ec:68:
ce:94:67:9e:30:90:e1:28:35:e2:1a:bc:ed:3e:ca:
8b:c0:0c:55:a5:56:96:c3:75:8e:03:ed:16:31:43:
b6:19:33:9a:98:33:5c:db:e8:39:6c:7d:f2:e4:bc:
fa:ee:2c:82:c6:41:7c:27:34:96:2a:07:8c:e0:3a:
97:df:0e:a0:a5:60:cd:5e:a4:6f:d3:f3:47:3c:b4:
ca:9e:c3:8c:6f:94:a2:34:83:60:5d:b9:3a:ba:15:
55:41:09:5c:f7:3d:fc:f3:3e:b5:1f:30:38:93:fa:
7a:93:70:cf:9a:b1:2d:a3:2d:56:96:36:49:d0:ce:
93:4e:47:38:88:45:92:b2:36:2a:1d:5b:10:3b:28:
8a:a7:c6:40:f1:f3:b6:a0:50:c7:bc:f2:17:33:03:
17:66:db:9f:27:40:bf:ec:52:1d:ae:40:38:58:dd:
e4:18:ce:f7:3e:80:70:26:c9:7b:95:51:a4:db:be:
24:da:3c:27:d7:09:9b:ca:43:55:52:72:16:89:5d:
6a:3f:96:11:b4:5a:58:ef:15:18:67:07:78:90:20:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E7:52:50:23:AA:6E:BB:56:6D:A8:69:51:28:BF:A8:AC:F5:35:35
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/JudSUCOqbrtWbahpUSi_qKz1NTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:ca:4a:76:d1:2a:d1:1b:be:d3:85:d5:1f:d0:e7:a3:fc:b9:
b8:a3:dd:79:e7:67:db:d3:b1:8a:f2:2e:34:5c:5b:97:d8:29:
28:d5:a6:8a:78:12:3a:82:3d:81:e7:bb:6f:fe:ce:37:07:0a:
82:01:c6:85:70:70:b3:37:a1:a6:8f:15:d1:f5:79:68:a4:f3:
ad:93:38:f9:c9:0c:7c:e2:5c:a1:73:97:45:f3:0b:45:76:54:
ad:89:40:4a:0e:1a:7c:f4:d5:c7:57:25:48:7c:d4:e2:5b:db:
1b:1b:33:75:57:2d:32:1f:cf:76:de:a8:f9:fb:27:dd:d7:d8:
3e:e8:f0:32:ec:5d:e3:be:36:1f:91:8b:a5:6e:50:2d:9e:bd:
5e:8c:25:8b:55:28:22:4b:90:79:19:19:8e:d8:16:00:d6:9d:
4c:ca:5e:c1:5f:f1:64:be:eb:75:e1:49:76:1f:00:3f:bb:88:
a2:de:58:52:67:b8:e8:ea:bc:c2:ff:07:58:f4:0e:76:fc:a0:
01:10:e8:bc:46:0d:40:4f:7d:3f:b1:c9:78:45:86:02:8d:c2:
d2:54:99:13:28:0a:e5:cf:b3:7b:9d:ba:19:ce:10:1f:25:49:
ac:d7:8d:11:1e:12:a1:17:fd:c3:b9:0e:ad:2c:95:e2:56:0d:
57:f1:4a:96
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ0BpgEw/XVTM3dd8ln4LQj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk
ZmMxNGMwHhcNMjYwMzE4MTU1MjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmU3NTI1MDIzYWE2ZWJiNTY2ZGE4Njk1MTI4YmZhOGFjZjUzNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks6HlV+L81yUzPt733f0ePX7EFjO
yujuMfFvM1ajP6oAqlERAmpnTVzL7GjOlGeeMJDhKDXiGrztPsqLwAxVpVaWw3WO
A+0WMUO2GTOamDNc2+g5bH3y5Lz67iyCxkF8JzSWKgeM4DqX3w6gpWDNXqRv0/NH
PLTKnsOMb5SiNINgXbk6uhVVQQlc9z388z61HzA4k/p6k3DPmrEtoy1WljZJ0M6T
Tkc4iEWSsjYqHVsQOyiKp8ZA8fO2oFDHvPIXMwMXZtufJ0C/7FIdrkA4WN3kGM73
PoBwJsl7lVGk274k2jwn1wmbykNVUnIWiV1qP5YRtFpY7xUYZwd4kCCg6wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCbnUlAjqm67Vm2oaVEov6is9TU1MB8GA1UdIwQY
MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt
OGZmNmNkNzc0N2M0LzEvSnVkU1VDT3FicnRXYmFocFVTaV9xS3oxTlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0
LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSQwDQYJ
KoZIhvcNAQELBQADggEBAEfKSnbRKtEbvtOF1R/Q56P8ubij3XnnZ9vTsYryLjRc
W5fYKSjVpop4EjqCPYHnu2/+zjcHCoIBxoVwcLM3oaaPFdH1eWik862TOPnJDHzi
XKFzl0XzC0V2VK2JQEoOGnz01cdXJUh81OJb2xsbM3VXLTIfz3beqPn7J93X2D7o
8DLsXeO+Nh+Ri6VuUC2evV6MJYtVKCJLkHkZGY7YFgDWnUzKXsFf8WS+63XhSXYf
AD+7iKLeWFJnuOjqvML/B1j0Dnb8oAEQ6LxGDUBPfT+xyXhFhgKNwtJUmRMoCuXP
s3uduhnOEB8lSazXjREeEqEX/cO5Dq0sleJWDVfxSpY=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:37:31 2026 by rpki-client