Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/jlb1JR39IZf6Kz4j-cidvZRw1XU.roa
File: jlb1JR39IZf6Kz4j-cidvZRw1XU.roa (raw, json)
Hash identifier: Lqj4swNPp/lea9TA80l8kyLyCZmi6zz9jIqgO1fuqCw=
Subject key identifier: 8E:56:F5:25:1D:FD:21:97:FA:2B:3E:23:F9:C8:9D:BD:94:70:D5:75
Certificate issuer: /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial: 019F23685E570583BF2DA60F57B9D433FCC5
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/jlb1JR39IZf6Kz4j-cidvZRw1XU.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 145.36.0.0/20 maxlen: 20
145.36.16.0/20 maxlen: 20
145.36.32.0/20 maxlen: 20
145.36.48.0/24 maxlen: 24
145.36.49.0/24 maxlen: 24
145.36.50.0/24 maxlen: 24
145.36.51.0/24 maxlen: 24
145.36.52.0/24 maxlen: 24
145.36.53.0/24 maxlen: 24
145.36.54.0/24 maxlen: 24
145.36.55.0/24 maxlen: 24
145.36.56.0/24 maxlen: 24
145.36.57.0/24 maxlen: 24
145.36.58.0/24 maxlen: 24
145.36.59.0/24 maxlen: 24
145.36.60.0/24 maxlen: 24
145.36.61.0/24 maxlen: 24
145.36.62.0/24 maxlen: 24
145.36.63.0/24 maxlen: 24
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:57:05:83:bf:2d:a6:0f:57:b9:d4:33:fc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e56f5251dfd2197fa2b3e23f9c89dbd9470d575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:83:0d:b3:28:50:2c:43:eb:07:de:05:c4:
28:ce:15:5f:7f:88:85:c1:94:c6:f5:53:c3:24:98:
79:ef:3a:e5:45:57:27:9f:a7:df:c6:ba:8e:4a:68:
10:b5:a9:ec:15:df:f2:6a:4b:55:0c:d6:3f:14:a9:
27:61:12:8c:c1:f8:21:a2:e3:2a:26:dc:db:27:24:
d4:de:66:95:c5:e5:18:68:27:5d:aa:b5:94:2e:3c:
a3:e1:75:d3:18:a5:56:af:65:4a:49:2e:e5:a8:e9:
d3:7b:af:54:b8:c8:fd:41:c4:43:62:b4:d5:24:a9:
19:d1:86:3d:7c:67:ae:0d:39:29:74:78:fd:46:73:
2f:39:7d:36:2d:81:ce:90:1e:5f:42:da:85:72:e9:
49:34:ba:5a:5c:8f:a5:82:21:6a:32:c2:52:dc:fb:
4b:03:bc:73:52:2e:e6:f0:2d:55:68:67:b8:ca:eb:
a8:95:e6:0d:53:d1:df:42:90:70:8f:bd:e0:31:7c:
dd:16:aa:cd:80:f6:d0:89:c6:0c:b3:15:ba:07:e8:
19:ec:1b:fa:16:1d:9b:36:46:fb:93:59:04:4a:2f:
cd:0c:bb:3b:95:df:e6:5f:85:e9:ed:09:a5:b9:42:
2f:01:f8:9b:f2:ef:28:f3:96:e0:f1:31:31:47:f1:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:F5:25:1D:FD:21:97:FA:2B:3E:23:F9:C8:9D:BD:94:70:D5:75
X509v3 Authority Key Identifier:
keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/jlb1JR39IZf6Kz4j-cidvZRw1XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:e3:ac:af:19:2c:6c:b0:9d:50:84:0c:4f:0d:04:be:a3:96:
c1:69:b9:d9:00:4c:cc:36:36:7c:9e:e5:44:cf:e5:70:ed:86:
23:bc:0b:66:a9:47:e0:58:cb:41:a3:98:43:f4:07:90:f0:eb:
b2:71:d2:4d:e2:ee:f6:6c:92:55:80:8d:d5:ba:87:e5:61:88:
b7:3a:b4:8f:59:eb:b3:69:db:87:56:bb:d7:c8:83:f6:cf:f0:
8e:d5:17:bb:e9:10:e1:1a:3e:2a:94:54:7f:b5:b2:b7:f0:9f:
c7:8a:a4:f6:8e:4d:41:94:59:c5:b2:7e:2f:81:f4:66:e9:d6:
46:bb:95:2c:8b:f1:80:50:cc:ec:c3:00:a0:ab:63:3c:1f:68:
a1:29:47:98:e6:8a:bd:76:b0:b4:cd:ab:25:03:db:70:0b:33:
62:3c:0f:06:40:70:88:de:44:df:3b:99:86:4a:94:a1:c2:36:
0f:d3:00:ee:57:94:f6:90:4a:1d:ec:13:56:3e:a0:98:32:a7:
00:52:ca:cb:81:3c:6f:f6:34:c9:69:aa:cb:72:de:62:08:c4:
56:d7:19:17:51:30:d4:4d:ce:9d:fc:5c:23:71:3d:46:56:29:
8b:1b:71:cf:ad:ff:36:f0:6a:1e:3c:f2:ce:1b:2b:ee:f2:4a:
1f:24:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:49 2026 by rpki-client