Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/79g5rPinqmC9RBRvIW8nvniUFfw.roa
File: 79g5rPinqmC9RBRvIW8nvniUFfw.roa (raw, json)
Hash identifier: eu9VgXfru6JXgpOtDB5O6RMS8IHlGg0b0Yfhsev0tjw=
Subject key identifier: EF:D8:39:AC:F8:A7:AA:60:BD:44:14:6F:21:6F:27:BE:78:94:15:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FFACB821FDBD0652BA37365C07B57FAE4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/79g5rPinqmC9RBRvIW8nvniUFfw.roa
Signing time: Thu 13 Aug 2026 11:04:28 +0000
ROA not before: Thu 13 Aug 2026 11:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.229.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.158.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.162.0/23 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:cb:82:1f:db:d0:65:2b:a3:73:65:c0:7b:57:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 13 11:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efd839acf8a7aa60bd44146f216f27be789415fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:28:a9:12:10:82:86:1e:dc:2a:31:8b:01:
97:c6:0f:ba:5f:59:60:77:20:72:38:04:1f:5a:45:
8d:66:24:94:14:a1:06:c6:9c:f8:ff:f0:ed:e3:d7:
f7:ca:0f:44:dc:9c:8d:42:00:b0:c5:89:b4:03:75:
8a:0a:20:0e:1d:bd:34:9b:0b:75:7f:64:51:8a:5b:
3e:36:54:7e:62:2f:55:d6:9d:b1:dc:17:ff:54:2a:
ef:0d:7a:f1:b1:a0:37:b8:48:4d:8e:b4:78:71:14:
22:6a:36:5b:ff:7b:38:a2:a9:20:bb:25:c0:38:c7:
b7:2b:a5:4f:b9:12:ab:41:0e:cb:4c:c0:8f:f9:79:
c4:d8:4f:7a:dc:e4:b7:6e:ff:c2:94:33:d4:a0:1b:
55:c9:75:7e:1b:1a:39:80:00:67:da:50:80:76:ef:
e5:24:50:b5:cb:60:79:27:49:96:ac:26:58:3b:99:
01:a4:fa:83:b1:1d:08:2c:f9:11:08:8c:2a:c0:3e:
24:f1:5b:cf:aa:b9:a7:00:10:a8:31:00:6c:03:4d:
0e:67:d9:85:f0:ad:2d:20:1d:09:51:2d:93:e2:c2:
f1:f4:4a:b2:3e:2f:c4:72:8e:cb:05:78:f0:a0:21:
51:0f:bb:f4:4e:cc:56:cb:5f:0c:70:ca:ea:6e:f7:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:39:AC:F8:A7:AA:60:BD:44:14:6F:21:6F:27:BE:78:94:15:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/79g5rPinqmC9RBRvIW8nvniUFfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.229.0/24
81.161.238.0/24
83.143.113.0/24
83.219.96.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.158.0/23
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.98.0/24
87.121.114.0/24
87.121.146.0/23
87.121.163.0/24
87.121.221.0/24
91.92.26.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.162.0/23
185.252.177.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
58:37:4c:1d:47:89:94:84:df:65:9d:3a:cc:1f:a6:3c:49:33:
ea:7b:ba:73:90:b3:50:11:b1:ff:a2:c6:b6:ac:51:94:7c:9d:
99:82:1d:90:e6:3d:3f:b2:52:c7:1f:5b:22:9d:93:64:e3:7e:
25:b6:b0:23:1a:f8:87:bd:bf:3c:49:1c:2f:96:dd:cf:d6:ce:
09:8b:4f:5e:69:27:f4:4f:62:b1:a6:f7:df:8f:c9:3a:c1:72:
57:eb:44:06:b5:9f:e9:a7:f8:61:d9:48:c7:65:14:99:82:94:
34:5f:91:79:32:62:1d:55:a4:cc:9d:49:68:30:6c:c4:84:2f:
95:90:30:bc:27:8b:84:43:db:86:f2:27:dd:18:eb:0a:dd:18:
56:0f:c1:ed:b7:8e:50:cf:ec:7c:88:7e:50:9c:ae:dd:9e:71:
cc:14:b8:d1:84:a8:97:6f:1f:0b:27:84:d7:31:ef:76:93:21:
d1:c3:26:57:fd:f7:75:68:68:9b:7a:49:9a:a8:df:46:23:d6:
14:22:1f:fe:cf:85:e5:0d:6f:c2:f0:50:f4:c6:4e:b9:f6:cc:
49:cd:5e:db:cd:96:60:fe:f0:0e:3d:7c:92:26:f1:1f:d6:b1:
14:0a:63:fc:bd:38:d5:cb:7b:52:a2:f1:89:c0:d5:01:1f:a3:
06:24:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:28 2026 by rpki-client