Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/23i2esxsTitXYMEoyHWGRt8InQI.roa
File: 23i2esxsTitXYMEoyHWGRt8InQI.roa (raw, json)
Hash identifier: TL+UURnZSKmMxrENRpb8AMDPwNW9puQJIqbN6YU1HjU=
Subject key identifier: DB:78:B6:7A:CC:6C:4E:2B:57:60:C1:28:C8:75:86:46:DF:08:9D:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F2FAC8A751593ADE6A2929AC19F3A6448
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/23i2esxsTitXYMEoyHWGRt8InQI.roa
Signing time: Sun 05 Jul 2026 00:27:44 +0000
ROA not before: Sun 05 Jul 2026 00:27:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:ac:8a:75:15:93:ad:e6:a2:92:9a:c1:9f:3a:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 00:27:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db78b67acc6c4e2b5760c128c8758646df089d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:c8:80:d6:c2:b5:ea:aa:67:76:65:6a:cf:
83:e1:2f:dc:e4:6f:1b:92:df:6d:61:3d:1f:cf:57:
66:e3:ac:64:82:32:2a:47:76:a6:76:94:8d:32:65:
52:2d:87:d4:75:5b:0a:1e:4f:86:f0:a1:06:fc:2c:
94:84:e0:19:49:49:7e:1f:8d:ea:59:f2:57:1c:8b:
e2:e9:94:a6:03:da:be:ef:73:52:3e:82:61:71:e7:
8c:28:f5:c7:39:29:51:cb:d0:73:64:0b:ab:1a:3b:
0e:09:aa:34:93:d5:76:16:6c:73:7b:22:77:71:92:
c9:e6:d9:af:84:ff:d6:ad:c0:6e:51:70:5f:3b:78:
00:29:60:22:1c:cc:2f:2a:2f:5f:9a:a7:b9:92:b6:
05:11:0e:1c:00:e0:13:43:f6:5c:53:a7:8e:36:c1:
fe:ff:46:f7:51:4b:ca:92:58:b2:77:4d:bd:fc:2c:
39:c8:37:7d:69:26:7c:d0:e7:da:13:c6:f4:98:fc:
a3:cc:b2:e5:2b:88:ae:78:40:39:38:c3:8b:6c:16:
7c:5f:ae:4b:f7:06:b3:4d:7d:4d:5b:cf:bf:c5:6e:
33:ca:a1:1c:bc:a2:6e:5d:ea:85:d2:7a:53:e2:09:
18:78:ff:43:a4:eb:f0:fb:18:03:a7:b9:92:ad:23:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:B6:7A:CC:6C:4E:2B:57:60:C1:28:C8:75:86:46:DF:08:9D:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/23i2esxsTitXYMEoyHWGRt8InQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f9:6a:7d:ee:cf:74:90:0b:b5:b5:87:9c:2e:f6:38:f5:3d:
37:08:c5:d6:a4:bf:e4:c5:6c:a3:eb:f2:66:d1:b7:90:a4:fb:
a0:5b:b6:7c:6d:5e:6e:50:42:52:12:8e:aa:7b:bb:f7:df:98:
4b:e6:d3:69:fd:3b:a0:69:bd:5d:5e:50:2e:ea:a4:7f:aa:98:
d7:4d:4e:af:05:a4:2e:1f:85:2c:4c:fa:08:b4:f2:49:7f:f8:
f4:b7:8b:7c:63:f1:cc:da:bb:2d:25:f1:9a:01:ef:bc:6d:1e:
e5:e5:cc:1e:28:dd:67:33:95:de:32:88:de:57:fa:f6:11:1c:
b1:dc:a0:ed:e0:db:51:7f:23:28:a1:ba:1c:30:1d:7f:21:62:
25:61:f9:3f:fa:2c:a8:bb:43:c8:29:28:c3:4e:7a:ba:99:cd:
22:7c:54:ab:f8:27:1e:cb:b5:51:3c:31:d0:9c:74:2e:48:53:
06:33:ec:2a:af:39:e8:bf:6d:c7:64:a5:52:e2:b6:f1:eb:57:
ae:17:a8:ee:83:d3:73:fc:d5:3f:16:59:e3:2f:c1:b9:e0:3a:
16:a2:75:c6:c3:24:30:21:48:17:14:03:2d:76:f6:60:a4:cd:
66:e7:e1:77:aa:7b:40:79:28:e6:06:51:89:5d:92:35:bb:fe:
74:9a:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 05:58:33 2026 by rpki-client