Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Pqtq3ASXhH-Kv0oO99nz1achCk.roa
File: 8Pqtq3ASXhH-Kv0oO99nz1achCk.roa (raw, json)
Hash identifier: xKJhRsX58lsI/8N9DLQBu6fnK+VCSIkP4Mg/+62CyYw=
Subject key identifier: F0:FA:AD:AB:70:12:5E:11:FE:2A:FD:28:3B:DF:67:CF:56:9C:84:29
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019ECA6F4E45CAE44E2253838099511B28E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Pqtq3ASXhH-Kv0oO99nz1achCk.roa
Signing time: Mon 15 Jun 2026 08:39:12 +0000
ROA not before: Mon 15 Jun 2026 08:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:6f:4e:45:ca:e4:4e:22:53:83:80:99:51:1b:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 15 08:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0faadab70125e11fe2afd283bdf67cf569c8429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:2d:7a:d1:b1:dd:53:31:89:80:21:83:7c:
c5:dc:45:84:37:e7:38:b2:85:77:c2:14:77:e7:2b:
85:d2:02:22:3b:78:28:07:ff:85:74:b9:6f:b6:5e:
2c:a6:18:9d:09:23:50:29:c4:84:b8:82:b4:b0:1e:
b5:7c:6b:26:5d:fd:a4:f7:98:2f:e1:43:cf:00:5b:
de:a2:2c:9b:3d:43:a2:39:e2:e4:e7:84:c5:e1:83:
bc:99:e7:db:b3:c7:fd:00:98:b4:a4:14:1b:86:f4:
8b:b7:59:00:06:1a:d2:4a:d9:4b:b5:16:eb:54:3c:
03:7e:cc:21:94:10:c5:bf:ff:33:b3:89:da:71:88:
9c:68:fc:7f:e4:b3:28:ec:1e:73:cc:25:ca:77:b4:
3d:cf:bc:12:97:3c:e9:d3:e1:f6:da:00:f3:a6:49:
19:a0:f0:87:d6:d7:12:3b:ef:a7:33:0f:05:f1:83:
64:e6:c0:95:cc:95:28:18:36:85:ff:14:a0:9e:ed:
d4:0f:ce:9c:82:6b:86:8d:d2:e5:ed:e8:95:92:f8:
cc:5a:46:12:0c:99:d0:4f:c0:3d:e1:6f:1e:a6:7b:
2a:89:96:23:ae:84:10:a1:0e:d0:8e:6b:14:61:85:
0f:af:ea:42:1e:5f:f9:fc:58:25:e0:fc:d7:c6:30:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:AD:AB:70:12:5E:11:FE:2A:FD:28:3B:DF:67:CF:56:9C:84:29
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Pqtq3ASXhH-Kv0oO99nz1achCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.121.221.0/24
91.92.21.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:91:a0:de:33:5c:f4:55:7f:c8:81:ff:72:f5:6b:95:99:57:
6d:95:95:ec:64:0f:77:ff:31:48:51:5a:e6:73:e4:a3:69:88:
35:25:56:bc:67:a1:8c:c3:7a:e8:2b:bf:ea:e0:4b:0b:11:f5:
34:8c:cf:95:25:28:38:70:c7:51:ee:6a:0f:95:20:d8:33:74:
53:d1:b7:16:82:cf:0d:48:f2:52:a6:ce:82:6a:55:ed:a9:82:
ab:8a:ff:14:23:4f:35:a3:b0:40:2a:19:3f:a0:75:ed:76:a1:
1d:ba:de:5a:ae:47:1e:fe:68:86:4b:0c:4b:d8:77:80:02:29:
52:2e:a4:5a:c3:61:ce:a1:cd:80:61:0c:7a:8f:1d:11:ad:4c:
9f:ae:d4:ea:dd:95:7b:65:18:01:fe:6b:eb:f2:c0:c8:39:53:
62:f6:a5:da:e5:19:e3:a5:ac:e6:01:11:83:20:6f:b1:e9:69:
bb:8d:62:ad:38:2a:e5:2c:21:c8:d1:4d:97:49:ee:57:3b:87:
1b:8e:48:40:21:55:d1:f9:30:78:9b:2d:4c:7e:ec:7d:ee:5f:
53:74:0d:8c:4c:c4:75:26:a2:68:f5:bb:65:ab:04:37:3c:eb:
1a:b6:87:ba:a1:4b:b0:f0:31:a6:33:e2:19:67:54:30:5b:49:
17:cf:f0:ae
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZ7Kb05FyuROIlODgJlRGyjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNjE1MDgzOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGZhYWRhYjcwMTI1ZTExZmUyYWZkMjgzYmRmNjdjZjU2OWM4NDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FwtetGx3VMxiYAhg3zF3EWEN+c4
soV3whR35yuF0gIiO3goB/+FdLlvtl4sphidCSNQKcSEuIK0sB61fGsmXf2k95gv
4UPPAFveoiybPUOiOeLk54TF4YO8mefbs8f9AJi0pBQbhvSLt1kABhrSStlLtRbr
VDwDfswhlBDFv/8zs4nacYicaPx/5LMo7B5zzCXKd7Q9z7wSlzzp0+H22gDzpkkZ
oPCH1tcSO++nMw8F8YNk5sCVzJUoGDaF/xSgnu3UD86cgmuGjdLl7eiVkvjMWkYS
DJnQT8A94W8epnsqiZYjroQQoQ7QjmsUYYUPr+pCHl/5/Fgl4PzXxjCiFQIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFPD6ratwEl4R/ir9KDvfZ89WnIQpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOFBxdHEzQVNYaEgtS3Ywb085OW56MWFjaENrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAl
i4ADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtjZ4DBABRoe4DBABTj3EDBAFV
2YIDBABXeFcDBABXeH4DBABXeKYDBABXed0DBABbXBUDBABc+TIDBAFde2QDBABd
e20DBABenLwDBACTTmUDBAK52lQDBAC53qADBAC59t0DBAC5/LEDBADCN7oDBADC
qa8wDQYJKoZIhvcNAQELBQADggEBAC6RoN4zXPRVf8iB/3L1a5WZV22VlexkD3f/
MUhRWuZz5KNpiDUlVrxnoYzDeugrv+rgSwsR9TSMz5UlKDhwx1Huag+VINgzdFPR
txaCzw1I8lKmzoJqVe2pgquK/xQjTzWjsEAqGT+gde12oR263lquRx7+aIZLDEvY
d4ACKVIupFrDYc6hzYBhDHqPHRGtTJ+u1OrdlXtlGAH+a+vywMg5U2L2pdrlGeOl
rOYBEYMgb7HpabuNYq04KuUsIcjRTZdJ7lc7hxuOSEAhVdH5MHibLUx+7H3uX1N0
DYxMxHUmomj1u2WrBDc86xq2h7qhS7DwMaYz4hlnVDBbSRfP8K4=
-----END CERTIFICATE-----
Generated at Tue Jun 16 02:12:53 2026 by rpki-client