Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7LznDUtQNBNbogsU33httoYrZCU.roa
File: 7LznDUtQNBNbogsU33httoYrZCU.roa (raw, json)
Hash identifier: jIKkdLfVTtzW5nnqbpsDJPiyAOB7jUMwAdCkGOFIIGY=
Subject key identifier: EC:BC:E7:0D:4B:50:34:13:5B:A2:0B:14:DF:78:6D:B6:86:2B:64:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F95219B3B7A718C597A085C812137C879
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7LznDUtQNBNbogsU33httoYrZCU.roa
Signing time: Fri 24 Jul 2026 17:17:15 +0000
ROA not before: Fri 24 Jul 2026 17:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:21:9b:3b:7a:71:8c:59:7a:08:5c:81:21:37:c8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 17:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecbce70d4b5034135ba20b14df786db6862b6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:c2:45:64:d6:55:2a:77:c3:b5:42:f5:1d:
3d:ee:59:db:fc:95:93:dc:f9:ff:33:50:74:44:93:
31:58:a1:6c:2a:c3:de:e1:a6:d1:f0:23:b0:5f:9d:
4c:0e:cf:49:67:c4:26:ad:82:d7:ec:a7:ad:7b:84:
73:49:e8:1f:49:95:34:9d:fc:4a:93:9f:60:a3:bc:
4d:08:f5:dd:cf:56:1f:42:fa:06:6f:0c:84:61:28:
fe:0e:36:64:51:db:3f:fc:9b:03:fa:a7:fe:3c:25:
6c:63:a5:cb:ec:08:67:1d:ea:b7:f4:ea:78:bb:9e:
b9:02:98:43:02:6a:66:ab:63:dc:12:eb:23:c5:1e:
e5:54:8b:7f:96:f5:a7:82:fb:b4:ee:d6:74:d6:8f:
2e:0c:96:1d:25:49:97:53:08:bd:8c:6d:be:a1:0e:
57:44:52:10:e8:26:a0:11:bb:44:91:6b:10:ec:a2:
3b:86:e7:7e:32:8c:e8:14:ff:fc:51:d1:7c:96:e2:
46:ca:4d:87:c4:a2:6a:36:41:0e:9b:47:cd:95:47:
f3:b1:20:01:05:43:a5:99:c0:5d:a9:d5:8d:83:88:
6d:4e:ba:5e:db:fb:46:85:f4:43:d1:98:11:2f:9d:
2a:d0:8d:77:ba:62:31:e9:ef:be:67:43:44:9b:68:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:E7:0D:4B:50:34:13:5B:A2:0B:14:DF:78:6D:B6:86:2B:64:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7LznDUtQNBNbogsU33httoYrZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
60:33:b9:79:88:b8:b8:f5:c9:77:3d:a2:83:fb:ad:3f:6c:08:
eb:d4:66:ad:3a:68:33:95:3e:1a:91:42:b6:5c:de:64:ef:5c:
3b:79:17:fd:61:e5:bf:9e:9b:66:d6:45:46:87:9b:92:f1:55:
2b:1c:69:17:21:96:7e:2b:05:2a:78:dd:65:37:b3:ae:50:fd:
4b:5f:87:49:81:c6:af:a1:81:b1:11:15:68:dc:f2:69:cf:c2:
d9:d7:29:40:a7:89:44:ae:eb:76:9c:75:72:19:99:4b:ae:b8:
92:74:11:71:a1:c5:e1:7d:45:31:56:03:ab:c0:de:de:2b:c3:
21:41:ef:0a:0a:c2:3d:56:66:9d:ed:41:77:13:f5:25:2a:bc:
89:cd:65:cd:a0:0c:72:de:be:82:f3:0b:7c:d1:f6:78:33:8c:
f1:dd:a8:34:8c:dc:d6:25:ff:aa:98:b4:5d:c9:22:78:ce:42:
e2:83:06:3f:b8:fd:6e:c0:75:8a:6e:c3:5f:8a:a6:8b:70:95:
7e:da:08:6b:1f:92:45:4b:1d:5c:d0:ba:00:ff:40:d8:72:54:
bf:fa:dd:7d:dd:cd:be:f9:6c:d6:36:9b:ee:ab:33:84:17:35:
3a:8b:e1:db:83:8d:b3:4d:bb:d7:a4:f2:7d:10:e6:3e:2b:01:
c2:37:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:11:31 2026 by rpki-client