Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/jTpwteJckLxk88W-0IFWft0YYq0.roa
File: jTpwteJckLxk88W-0IFWft0YYq0.roa (raw, json)
Hash identifier: qmbAR8GlWHjPRVsTXR8d6LEMmz3CLKUUkjmNaODWk7Q=
Subject key identifier: 8D:3A:70:B5:E2:5C:90:BC:64:F3:C5:BE:D0:81:56:7E:DD:18:62:AD
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 019D31EB9C2190F82FA133BE799F0088CFAA
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/jTpwteJckLxk88W-0IFWft0YYq0.roa
Signing time: Sat 28 Mar 2026 00:50:17 +0000
ROA not before: Sat 28 Mar 2026 00:50:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51859
IP address blocks: 87.237.200.0/21 maxlen: 24
87.237.201.0/24 maxlen: 24
87.237.202.0/23 maxlen: 24
87.237.203.0/24 maxlen: 24
87.237.204.0/22 maxlen: 24
87.237.204.0/24 maxlen: 24
91.214.200.0/22 maxlen: 24
91.222.4.0/22 maxlen: 24
92.249.52.0/22 maxlen: 24
92.249.52.0/24 maxlen: 24
185.29.100.0/22 maxlen: 24
188.93.120.0/22 maxlen: 24
206.15.32.0/20 maxlen: 20
2a04:2e40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:eb:9c:21:90:f8:2f:a1:33:be:79:9f:00:88:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Mar 28 00:50:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d3a70b5e25c90bc64f3c5bed081567edd1862ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:b2:a1:13:ec:87:0a:50:cd:a2:42:49:e8:
cf:ae:b4:e8:99:25:0e:4f:07:de:ea:b0:f5:2b:09:
89:3a:17:d5:83:a2:4a:bf:b5:82:9b:4b:07:31:d3:
6a:0e:51:a0:5b:00:31:0f:b3:61:ed:46:de:e7:4d:
71:38:56:2a:08:58:f1:a2:b0:cb:be:e3:3d:02:d5:
44:ac:b6:a8:15:5d:48:8d:ab:33:fe:10:48:90:b8:
73:6b:5e:56:21:69:34:74:96:34:15:9a:cb:bd:ff:
99:33:9c:05:1b:07:5b:b5:39:3f:43:03:73:da:d9:
bc:51:e0:61:a9:16:b9:77:17:45:05:a4:b6:18:a1:
0f:95:d3:f0:72:76:3d:ec:be:34:87:35:76:65:d2:
fa:6e:f6:7c:59:37:6f:0e:0a:f8:6d:61:56:5f:5f:
8d:b2:80:d5:e5:07:5f:7d:e2:78:05:ef:ee:4c:d9:
4f:76:15:d6:ae:41:7e:5f:f1:1f:7c:62:43:97:d9:
2b:c3:15:a1:b0:4e:15:21:b4:fe:ba:99:07:b6:c5:
5b:b2:6e:ca:37:30:4a:8d:f2:03:85:5c:39:1f:33:
4d:0a:a3:07:2f:51:25:f8:3e:9f:66:69:d5:ec:f1:
a2:c9:4f:34:d2:79:5e:64:eb:e4:ed:69:6e:fa:ce:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:70:B5:E2:5C:90:BC:64:F3:C5:BE:D0:81:56:7E:DD:18:62:AD
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/jTpwteJckLxk88W-0IFWft0YYq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.200.0/21
91.214.200.0/22
91.222.4.0/22
92.249.52.0/22
185.29.100.0/22
188.93.120.0/22
206.15.32.0/20
IPv6:
2a04:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
3d:e1:cf:1c:81:e8:73:6e:05:4e:ce:4a:ed:a4:52:6f:d8:6e:
0c:9d:03:08:72:24:0c:8a:32:2d:fc:12:bf:83:20:e4:25:b5:
fb:35:42:5a:38:8b:1a:a2:b4:f6:0d:dd:3f:4d:ac:40:bd:cc:
4f:96:04:0b:8f:48:a1:7b:a7:c8:7c:ee:61:61:a2:e7:b6:c9:
b8:f9:2e:36:9c:ce:dc:89:e8:7c:39:4b:d8:c2:e8:a7:4b:22:
c6:87:de:fa:70:eb:d8:b5:5e:88:61:11:b2:96:aa:f6:fb:4f:
51:b9:71:98:06:2a:4e:00:59:77:70:76:98:02:a2:4c:2c:8b:
80:6e:dd:02:b9:e7:ed:47:65:45:a2:b6:89:fc:38:ba:09:7f:
be:27:a6:f9:ef:7d:88:db:ab:94:b4:28:78:80:85:40:45:9a:
25:78:02:e5:93:41:05:2f:50:36:c5:b5:6c:1e:73:a9:7d:46:
a4:e2:86:e5:d9:1e:a0:a3:ec:ac:cc:f7:79:57:e5:81:dd:ff:
cc:09:26:98:29:4b:29:7d:5b:03:3a:03:99:5d:20:fd:0a:ba:
b4:7d:80:d6:8f:fe:46:cb:bf:33:2a:fb:47:b1:4d:75:2c:58:
3f:6b:f0:3a:20:d7:0b:31:ae:c6:a5:a3:e3:40:e1:c8:46:0e:
ab:5c:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:11:05 2026 by rpki-client