Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0i5DStuRLE-2fJXyM54YmCw3G1o.roa
File: 0i5DStuRLE-2fJXyM54YmCw3G1o.roa (raw, json)
Hash identifier: 3hHlcqPkeMKrsPL5HxWd2Px3u57Zaa0ErKOAgVKy69g=
Subject key identifier: D2:2E:43:4A:DB:91:2C:4F:B6:7C:95:F2:33:9E:18:98:2C:37:1B:5A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D04FFDF52CD5E83738D4F69F67CE4D887
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0i5DStuRLE-2fJXyM54YmCw3G1o.roa
Signing time: Thu 19 Mar 2026 07:29:30 +0000
ROA not before: Thu 19 Mar 2026 07:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.165.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 14:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ff:df:52:cd:5e:83:73:8d:4f:69:f6:7c:e4:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 07:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d22e434adb912c4fb67c95f2339e18982c371b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:b6:3f:d9:00:a1:7a:84:04:09:e8:b7:f4:
ad:ec:e7:cd:44:42:47:59:1b:eb:c2:b4:ff:45:e1:
27:36:79:c6:a7:de:82:b1:bf:21:cb:6d:0f:81:d6:
18:2c:c6:2a:82:f4:0b:2d:24:a5:9a:10:e6:2a:8c:
18:a4:6d:bb:d0:d2:10:9f:46:69:0f:ce:b4:12:c9:
32:f7:5c:9d:cc:44:f3:6c:76:34:87:18:04:0a:4a:
8a:5a:68:d2:07:b5:a8:00:97:dd:d8:2c:3f:84:53:
c5:4a:60:87:e5:df:7a:ad:a2:3a:18:3e:be:4f:7e:
89:e7:f6:8a:ab:3d:c1:70:80:d0:ae:9f:6d:a3:86:
45:52:b0:5a:f6:8a:b1:1d:d0:4a:b8:e1:fb:7b:73:
51:ce:15:ef:56:35:df:e6:6e:06:fa:d8:24:51:04:
20:91:8d:67:36:8d:35:5a:7f:dc:a3:f6:72:de:92:
ec:65:47:56:22:e4:a5:a1:1d:91:67:74:3c:b7:ad:
07:f8:20:56:fd:b2:25:80:a9:b0:26:f1:0c:39:e2:
12:61:f5:7e:65:42:ea:a5:fa:20:32:3a:02:fc:c3:
f9:64:69:c6:ed:32:9b:df:ab:c7:9d:3a:7c:7a:f2:
b0:7d:67:b7:67:14:e2:d7:68:2e:d1:60:d4:0a:af:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:43:4A:DB:91:2C:4F:B6:7C:95:F2:33:9E:18:98:2C:37:1B:5A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0i5DStuRLE-2fJXyM54YmCw3G1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.121.60.0/23
87.121.165.0/24
92.249.50.0/24
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
193.47.61.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e7:ca:5a:9d:42:2a:f8:48:ac:79:22:4f:32:ca:77:d7:f6:
ca:81:bf:99:a6:b8:7a:a6:ed:d4:cb:58:a1:e8:8f:c0:c7:e3:
93:27:f0:0c:9f:40:36:99:88:39:93:99:e0:77:cd:74:4e:c7:
65:c9:7d:c9:51:b0:43:7b:44:be:34:79:b3:65:35:ba:83:90:
68:a2:d4:78:6b:b7:da:7e:3d:5f:ae:fa:ad:c3:6f:ac:4b:bf:
c5:70:ec:b7:0d:17:99:8b:d0:b9:66:a9:da:ab:9e:a4:11:b7:
98:fe:6f:a3:7c:db:1f:37:ec:ce:62:86:eb:e4:61:c4:ef:d5:
b0:86:46:e9:7b:4d:dd:f6:a8:5f:45:7f:63:49:37:f1:b5:8b:
5f:18:63:b4:22:d3:fb:5d:39:55:6f:4a:1a:e2:4c:09:d3:34:
db:24:95:48:f2:4e:a5:38:4d:0b:58:15:cc:73:0b:bc:50:a9:
ed:10:3f:8e:c9:7a:ab:f1:92:94:84:2a:33:7e:74:16:bc:4b:
39:6e:23:33:52:ba:e6:57:68:70:70:f9:00:9b:39:c9:84:d8:
67:ba:ef:6c:5a:5d:da:74:71:ab:12:e4:3e:82:05:ed:d0:74:
20:e6:2c:c1:07:da:7d:80:a1:8c:8e:36:31:9c:f3:91:64:ad:
21:52:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:37:35 2026 by rpki-client