Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JJ926xpLP9hYnaxfOW_TsSLPPHU.roa
File: JJ926xpLP9hYnaxfOW_TsSLPPHU.roa (raw, json)
Hash identifier: JuuMAhDPdPKFrrD6Sw/uiAywwqP6L841I9Q2Ub6qna4=
Subject key identifier: 24:9F:76:EB:1A:4B:3F:D8:58:9D:AC:5F:39:6F:D3:B1:22:CF:3C:75
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CB9918418E7A6B9D104C8DAE587558F3F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JJ926xpLP9hYnaxfOW_TsSLPPHU.roa
Signing time: Wed 04 Mar 2026 15:57:27 +0000
ROA not before: Wed 04 Mar 2026 15:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.227.0/24 maxlen: 24
43.242.137.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
77.111.108.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
94.229.215.0/24 maxlen: 24
103.102.134.0/24 maxlen: 24
124.158.115.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:91:84:18:e7:a6:b9:d1:04:c8:da:e5:87:55:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 4 15:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=249f76eb1a4b3fd8589dac5f396fd3b122cf3c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:ad:8d:e0:0b:f0:25:6d:06:1c:fe:ca:97:
62:ee:66:7f:a4:01:86:7b:d0:bd:80:38:22:ab:2c:
39:de:ce:95:be:00:de:57:02:05:40:be:a8:14:4a:
df:c1:91:26:5e:bb:c4:36:ee:f9:55:d4:00:47:a4:
07:13:df:78:fc:19:b1:f1:ae:4f:b9:04:c9:65:74:
68:36:b0:71:7a:9e:f0:16:0a:48:3d:0a:4d:b3:cd:
77:c7:83:6b:55:44:ba:1e:9d:64:3e:48:11:e7:0e:
7c:5a:30:af:d9:47:48:65:51:c4:00:85:e9:d1:a2:
08:c3:35:40:47:1d:a1:a8:6d:ba:40:bb:a6:80:ce:
99:df:3c:9f:95:8c:57:e1:42:0a:76:7e:41:7a:07:
b8:01:26:6d:43:29:2f:84:66:3d:86:fa:de:e3:c2:
a8:ce:f8:eb:9c:f6:e3:d2:01:c2:83:94:23:77:d7:
08:76:5c:b4:44:22:d6:51:f9:b3:ce:75:41:8a:74:
b5:84:b4:34:e8:21:2a:16:74:be:ef:42:64:82:8e:
97:32:6a:21:ca:7a:f0:4e:f6:56:71:56:5c:af:8f:
a2:73:c8:49:0a:76:d8:c7:da:b5:93:b7:f8:31:36:
48:c7:48:64:32:e7:64:c2:c6:5a:44:fa:05:c0:e5:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9F:76:EB:1A:4B:3F:D8:58:9D:AC:5F:39:6F:D3:B1:22:CF:3C:75
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JJ926xpLP9hYnaxfOW_TsSLPPHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
43.242.137.0/24
45.151.141.0/24
77.111.108.0/24
89.106.23.0/24
94.229.215.0/24
103.102.134.0/24
124.158.115.0/24
194.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6d:02:2a:3b:54:da:c1:2a:de:aa:a4:6e:4c:48:3c:93:79:
9a:fc:a1:22:15:e8:93:e4:80:b8:d3:35:81:3d:08:ba:5d:61:
b3:2d:b4:74:3d:ba:b9:85:6e:93:73:95:b3:56:59:ff:43:ac:
53:d4:90:b6:81:0c:71:89:fe:3e:68:36:2b:67:f3:34:03:89:
33:38:f7:b7:8c:d0:33:f2:85:2b:95:c9:f8:d6:09:8e:c7:f6:
67:4f:c2:80:d5:8a:9d:f1:a3:b2:b4:ed:bd:f7:43:3e:a9:14:
91:34:d5:a0:4b:7a:dc:69:cf:9d:2d:fe:0e:5c:61:e8:97:79:
b7:30:b0:1f:eb:f3:03:17:7a:67:24:58:dc:a1:16:48:0d:87:
c6:17:7e:d6:d4:07:41:df:a0:4b:e6:3e:f5:92:6e:74:24:ab:
19:c2:91:b0:33:a9:ea:a3:76:b1:82:13:1e:e0:31:48:a9:ae:
ed:be:de:c4:bd:ef:b1:ad:38:51:2b:fd:1d:12:b1:f9:3f:50:
f2:77:9b:92:bb:48:3d:ad:d8:2e:35:8b:4b:1c:ce:b2:0f:82:
ff:fe:2f:21:3e:57:22:ef:d0:2e:36:91:e7:e5:b2:0c:05:13:
12:53:3f:84:44:21:b9:21:02:e4:6d:fa:4e:a3:a6:6b:50:13:
3e:58:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 06:28:32 2026 by rpki-client