Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/JzLW8GyEJdEZAZBHGxxypt1ByX4.roa
File: JzLW8GyEJdEZAZBHGxxypt1ByX4.roa (raw, json)
Hash identifier: 9OsitL8ABoUN/oBkEaFvTG9xg39aKzooy4oqb/xcYz8=
Subject key identifier: 27:32:D6:F0:6C:84:25:D1:19:01:90:47:1B:1C:72:A6:DD:41:C9:7E
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019F837C608881F849BD3FACB577B9CA4FAE
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/JzLW8GyEJdEZAZBHGxxypt1ByX4.roa
Signing time: Tue 21 Jul 2026 07:03:14 +0000
ROA not before: Tue 21 Jul 2026 07:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49126
IP address blocks: 94.102.90.0/24 maxlen: 24
94.102.91.0/24 maxlen: 24
94.138.192.0/24 maxlen: 24
94.138.193.0/24 maxlen: 24
94.138.194.0/24 maxlen: 24
94.138.195.0/24 maxlen: 24
94.138.196.0/24 maxlen: 24
94.138.197.0/24 maxlen: 24
94.138.198.0/24 maxlen: 24
94.138.199.0/24 maxlen: 24
94.138.200.0/24 maxlen: 24
94.138.201.0/24 maxlen: 24
94.138.202.0/24 maxlen: 24
94.138.203.0/24 maxlen: 24
94.138.204.0/22 maxlen: 22
94.138.204.0/24 maxlen: 24
94.138.205.0/24 maxlen: 24
94.138.206.0/24 maxlen: 24
94.138.207.0/24 maxlen: 24
94.138.208.0/22 maxlen: 22
94.138.212.0/22 maxlen: 22
94.138.216.0/22 maxlen: 22
94.138.220.0/22 maxlen: 22
185.48.180.0/24 maxlen: 24
185.48.181.0/24 maxlen: 24
185.48.182.0/24 maxlen: 24
185.48.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7c:60:88:81:f8:49:bd:3f:ac:b5:77:b9:ca:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jul 21 07:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2732d6f06c8425d1190190471b1c72a6dd41c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:f7:f5:35:63:c2:25:7f:96:00:e1:ee:f3:
bd:04:39:e8:88:56:36:66:8c:f8:6d:fa:26:7e:e6:
5e:ce:90:29:b2:31:c0:6a:c4:4e:b0:1c:f8:1d:66:
00:8b:da:5f:04:0f:e5:6f:e1:7e:39:fc:0e:e3:9c:
8d:57:91:67:90:95:c4:e7:27:15:1e:93:ac:36:a0:
11:9d:8f:44:de:8f:67:ba:95:c9:40:f4:0b:e3:6e:
9a:ee:30:a1:61:1e:30:b2:c2:7b:aa:ef:b2:4a:50:
b5:14:44:0e:aa:a9:37:76:6c:00:e1:f0:48:31:07:
44:b4:6f:2c:ac:d7:ac:53:6b:e8:1a:33:85:c1:68:
4f:09:a4:99:62:99:d2:8d:3a:d9:2f:2f:7c:47:ef:
6d:26:73:ec:9f:b1:2b:c1:40:9d:01:ed:ed:24:22:
9b:c1:25:3a:82:6b:f2:98:27:82:13:7d:ef:2d:fb:
7e:05:66:9c:5e:ae:fd:f4:c9:ee:5c:51:50:97:de:
4b:2a:57:08:57:81:3b:7a:18:51:16:c6:52:87:48:
16:0a:13:c9:68:80:e2:c4:d6:e2:36:c6:df:4a:37:
d8:70:6a:d3:56:93:73:d6:56:21:65:63:23:c2:df:
5b:d7:cf:21:d9:19:a9:97:61:9a:db:d1:59:43:95:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:D6:F0:6C:84:25:D1:19:01:90:47:1B:1C:72:A6:DD:41:C9:7E
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/JzLW8GyEJdEZAZBHGxxypt1ByX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.90.0/23
94.138.192.0/19
185.48.180.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ee:aa:1f:25:b1:a4:96:4a:82:ca:9a:4f:02:86:b5:c8:c6:
11:f7:f3:c0:f4:8f:9f:42:ba:f7:d4:30:83:a1:a1:11:6a:ea:
4a:20:3d:7e:12:f4:c6:fc:73:4f:a4:02:d0:52:b0:3f:a9:ab:
d1:90:25:16:f5:6e:54:86:98:61:7c:d7:66:5f:28:6b:09:98:
de:0c:06:60:ce:c8:b7:7b:ca:51:3a:82:99:07:95:42:29:b3:
63:ca:7a:ba:e4:e2:ae:a3:e6:af:bc:df:6a:6b:79:13:50:15:
09:eb:d1:0f:68:1c:01:9e:92:f1:a0:e3:eb:3d:54:62:37:49:
04:a1:ed:f9:33:7e:68:47:8e:95:67:3c:12:4a:cd:ce:28:28:
21:d9:23:c5:07:99:72:50:3d:d8:33:ff:d4:9e:e2:2d:57:5b:
6c:a3:95:43:d9:1c:ce:f8:c5:c8:48:27:f6:8c:5b:03:d2:8c:
2a:7c:67:a0:04:35:99:f8:03:95:d5:d5:2b:99:3e:60:f6:ab:
19:60:b6:29:07:c5:7f:c4:9e:db:15:d5:9f:35:7b:31:de:97:
6a:d7:25:c1:4c:f4:88:a4:be:5c:d2:d7:de:70:1e:da:6e:c2:
65:27:99:f8:c4:54:4b:df:ef:0f:d0:e7:07:be:d7:a4:a0:ab:
b1:ec:12:39
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+DfGCIgfhJvT+stXe5yk+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0
YTgwYmEwHhcNMjYwNzIxMDcwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzMyZDZmMDZjODQyNWQxMTkwMTkwNDcxYjFjNzJhNmRkNDFjOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf/39TVjwiV/lgDh7vO9BDnoiFY2
Zoz4bfomfuZezpApsjHAasROsBz4HWYAi9pfBA/lb+F+OfwO45yNV5FnkJXE5ycV
HpOsNqARnY9E3o9nupXJQPQL426a7jChYR4wssJ7qu+ySlC1FEQOqqk3dmwA4fBI
MQdEtG8srNesU2voGjOFwWhPCaSZYpnSjTrZLy98R+9tJnPsn7ErwUCdAe3tJCKb
wSU6gmvymCeCE33vLft+BWacXq799MnuXFFQl95LKlcIV4E7ehhRFsZSh0gWChPJ
aIDixNbiNsbfSjfYcGrTVpNz1lYhZWMjwt9b188h2Rmpl2Ga29FZQ5XaaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCcy1vBshCXRGQGQRxsccqbdQcl+MB8GA1UdIwQY
MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt
YWUwZWE2NjQzYmJkLzEvSnpMVzhHeUVKZEVaQVpCSEd4eHlwdDFCeVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk
LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXmZaAwQF
XorAAwQCuTC0MA0GCSqGSIb3DQEBCwUAA4IBAQBn7qofJbGklkqCyppPAoa1yMYR
9/PA9I+fQrr31DCDoaERaupKID1+EvTG/HNPpALQUrA/qavRkCUW9W5UhphhfNdm
XyhrCZjeDAZgzsi3e8pROoKZB5VCKbNjynq65OKuo+avvN9qa3kTUBUJ69EPaBwB
npLxoOPrPVRiN0kEoe35M35oR46VZzwSSs3OKCgh2SPFB5lyUD3YM//UnuItV1ts
o5VD2RzO+MXISCf2jFsD0owqfGegBDWZ+AOV1dUrmT5g9qsZYLYpB8V/xJ7bFdWf
NXsx3pdq1yXBTPSIpL5c0tfecB7absJlJ5n4xFRL3+8P0OcHvtekoKux7BI5
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:12 2026 by rpki-client