Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3pxDB3Y8Gy98qq-AtH1W6eRbw4U.roa
File: 3pxDB3Y8Gy98qq-AtH1W6eRbw4U.roa (raw, json)
Hash identifier: 6/e2AD/i6xA2HbMW+ImEUidYP1V7FIQ2fFIlxvdPHTA=
Subject key identifier: DE:9C:43:07:76:3C:1B:2F:7C:AA:AF:80:B4:7D:56:E9:E4:5B:C3:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A018D5053A270AE02294FE66DA196A4E00
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3pxDB3Y8Gy98qq-AtH1W6eRbw4U.roa
Signing time: Wed 19 Aug 2026 07:03:28 +0000
ROA not before: Wed 19 Aug 2026 07:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.229.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.158.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
87.121.161.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.162.0/23 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 09:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:d5:05:3a:27:0a:e0:22:94:fe:66:da:19:6a:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 07:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de9c4307763c1b2f7caaaf80b47d56e9e45bc385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:84:70:b2:be:7b:01:d9:2f:24:6a:89:5e:
62:30:97:15:b0:35:00:fd:7c:ca:4e:17:f3:8a:e2:
14:0e:91:9f:36:43:f6:0b:d3:9d:6b:e0:26:c6:4f:
4b:51:19:1b:f1:ef:73:51:2f:f0:e5:5e:f5:80:8b:
d3:84:7b:d3:9a:a2:7f:34:be:c7:93:26:76:b2:a3:
7e:c6:43:fb:c0:59:83:0e:fd:cd:9b:8b:74:5e:c5:
2a:74:4c:4e:90:74:b0:36:e1:9e:03:ec:b7:e5:1b:
af:2b:92:0e:80:3f:63:02:39:22:4a:0c:a4:31:cb:
e2:0b:55:4a:15:b6:63:33:9e:51:7a:b7:d8:3a:90:
dc:e8:1b:30:31:b1:41:aa:8d:30:6a:5d:69:8b:63:
e6:74:51:43:3f:b5:84:37:12:34:4c:3c:08:6e:98:
42:f4:79:ab:b3:26:92:7c:b3:66:30:08:32:4e:23:
6f:26:58:63:08:27:8d:e1:e2:b3:9a:37:72:65:99:
55:32:50:bc:f0:c6:cc:4b:9b:11:bb:c5:95:4d:81:
52:53:5f:7f:28:b1:fc:44:10:bf:97:e9:5b:00:2f:
ea:7e:27:eb:bd:e8:12:38:aa:f5:10:56:b5:98:03:
6e:99:44:6d:73:45:8e:65:9e:7a:22:c8:1d:dd:92:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:43:07:76:3C:1B:2F:7C:AA:AF:80:B4:7D:56:E9:E4:5B:C3:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3pxDB3Y8Gy98qq-AtH1W6eRbw4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.229.0/24
81.161.238.0/24
83.143.113.0/24
83.219.96.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.158.0/23
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.98.0/24
87.121.114.0/24
87.121.146.0/23
87.121.161.0/24
87.121.163.0/24
87.121.221.0/24
91.92.26.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.162.0/23
185.252.177.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f1:bf:78:8e:73:3b:f5:fb:93:1e:cf:07:84:6c:b8:c8:a9:
41:4b:fd:2c:ff:48:ed:70:83:b3:8d:4a:29:be:5d:36:c7:83:
03:d8:0e:dc:46:85:ee:ad:45:4d:31:91:1e:9f:3f:20:89:ad:
eb:b6:5f:55:34:51:1b:e2:3e:52:1c:c0:38:e5:28:bc:dd:78:
da:4b:3a:ee:7c:5b:23:e3:a8:b0:7d:75:6f:9d:82:f0:cc:ce:
4b:35:6b:9a:44:1f:db:99:6a:f8:dd:56:e9:72:51:13:1e:01:
fc:4a:d4:64:0c:02:6d:f3:6f:5f:91:b1:b3:d1:8d:20:93:5d:
9c:dc:d2:7b:69:6a:e3:a2:8d:5a:2b:00:54:3a:4e:73:48:82:
8f:3b:bf:8f:2e:65:3c:e7:cd:49:9a:c0:15:5b:3e:84:cb:2e:
be:de:be:18:a4:57:23:1b:70:ec:fa:88:eb:4d:c7:cd:a5:47:
4f:13:79:6e:06:9c:d6:db:31:dd:74:3b:71:8d:1c:98:0c:ba:
b3:49:44:38:6c:80:d6:34:d9:d9:d1:97:9f:85:52:25:fd:bb:
56:aa:d7:ca:70:36:63:50:ce:f0:07:38:22:e0:51:d1:88:cc:
4a:32:29:26:18:8a:f4:b8:c4:80:a3:3d:a4:0c:c4:60:ce:ea:
bb:32:9d:35
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAaAY1QU6JwrgIpT+ZtoZak4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODE5MDcwMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTljNDMwNzc2M2MxYjJmN2NhYWFmODBiNDdkNTZlOWU0NWJjMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkSEcLK+ewHZLyRqiV5iMJcVsDUA
/XzKThfziuIUDpGfNkP2C9Oda+Amxk9LURkb8e9zUS/w5V71gIvThHvTmqJ/NL7H
kyZ2sqN+xkP7wFmDDv3Nm4t0XsUqdExOkHSwNuGeA+y35RuvK5IOgD9jAjkiSgyk
McviC1VKFbZjM55RerfYOpDc6BswMbFBqo0wal1pi2PmdFFDP7WENxI0TDwIbphC
9HmrsyaSfLNmMAgyTiNvJlhjCCeN4eKzmjdyZZlVMlC88MbMS5sRu8WVTYFSU19/
KLH8RBC/l+lbAC/qfifrvegSOKr1EFa1mANumURtc0WOZZ56Isgd3ZL3QQIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFN6cQwd2PBsvfKqvgLR9VunkW8OFMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvM3B4REIzWThHeTk4cXEtQXRIMVc2ZVJidzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCB5QQCAAEwgd4DBAAl
i4ADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtgVUDBAAtjZ4DBABPbjIDBABR
oeUDBABRoe4DBABTj3EDBABT22ADBABVHy8DBAFV2YIDBABXeFcDBABXeH4DBAFX
eJ4DBABXeKYDBABXeMADBABXeU8DBABXeWIDBABXeXIDBAFXeZIDBABXeaEDBABX
eaMDBABXed0DBABbXBoDBABc+TIDBABde20DBABenLwDBACTTmUDBAC53qADBAG5
/KIDBAC5/LEDBADCN7oDBADCN+ADBADCqa8wDQYJKoZIhvcNAQELBQADggEBAGrx
v3iOczv1+5MezweEbLjIqUFL/Sz/SO1wg7ONSim+XTbHgwPYDtxGhe6tRU0xkR6f
PyCJreu2X1U0URviPlIcwDjlKLzdeNpLOu58WyPjqLB9dW+dgvDMzks1a5pEH9uZ
avjdVulyURMeAfxK1GQMAm3zb1+RsbPRjSCTXZzc0ntpauOijVorAFQ6TnNIgo87
v48uZTznzUmawBVbPoTLLr7evhikVyMbcOz6iOtNx82lR08TeW4GnNbbMd10O3GN
HJgMurNJRDhsgNY02dnRl5+FUiX9u1aq18pwNmNQzvAHOCLgUdGIzEoyKSYYivS4
xICjPaQMxGDO6rsynTU=
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:47:53 2026 by rpki-client