Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/94A5sSBsLytQQI2hGTLPE0ilJJM.roa
File: 94A5sSBsLytQQI2hGTLPE0ilJJM.roa (raw, json)
Hash identifier: hLARi1SZOfq8n5O9NKX1BYHDKNZM4YQIEPD/VsjBqYM=
Subject key identifier: F7:80:39:B1:20:6C:2F:2B:50:40:8D:A1:19:32:CF:13:48:A5:24:93
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A06730FDFC93D599B910549EA343A7894D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/94A5sSBsLytQQI2hGTLPE0ilJJM.roa
Signing time: Thu 03 Sep 2026 12:14:18 +0000
ROA not before: Thu 03 Sep 2026 12:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.68.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:30:fd:fc:93:d5:99:b9:10:54:9e:a3:43:a7:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 3 12:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f78039b1206c2f2b50408da11932cf1348a52493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:62:ca:b1:c3:17:2e:8e:16:c8:4f:bf:c8:
f9:0e:02:be:4a:75:30:93:ad:17:ce:2e:23:f0:56:
d5:8d:56:a8:35:61:49:1e:68:14:26:2e:9b:42:f5:
11:d6:26:6b:9c:f2:5f:65:59:30:d7:6a:50:93:70:
1c:a0:73:c8:30:d2:d5:28:7e:2f:9a:7e:07:60:d3:
4c:d2:8b:40:0e:39:4d:50:8a:2b:b2:e7:b6:a4:e3:
04:c0:c7:91:23:ad:d6:7e:ec:2e:44:d7:8e:d0:5e:
65:55:d3:1b:1c:18:ad:6e:9e:e6:f2:54:25:da:2a:
cf:2a:1c:98:93:fa:a6:b2:24:2b:73:4b:6b:6e:c6:
fe:f5:27:be:9c:0c:68:46:04:53:b5:01:3f:e3:88:
9d:09:67:f6:77:a1:03:6f:52:b9:b3:1f:21:83:75:
12:fb:76:8a:90:62:f4:8c:22:71:f3:d3:fa:7f:bd:
27:ec:0c:aa:ef:12:ef:1e:c1:dd:e1:27:be:35:fb:
58:fa:86:66:ab:01:a4:6f:a1:a8:c8:b3:76:c4:a5:
4b:cc:52:e3:04:56:74:87:e8:49:a5:53:22:9c:51:
45:fc:b2:fd:1b:db:7b:75:0a:5a:55:a4:ca:d0:0d:
bb:82:24:23:b8:11:ae:fb:bb:9a:3e:4b:bc:27:4e:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:39:B1:20:6C:2F:2B:50:40:8D:A1:19:32:CF:13:48:A5:24:93
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/94A5sSBsLytQQI2hGTLPE0ilJJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.209.133.0/24
85.217.130.0/23
87.120.68.0/24
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:95:19:b6:2b:c1:b9:7e:40:1b:d3:2d:23:12:0b:1f:2e:0c:
5e:ba:62:63:00:06:50:e1:9b:09:43:fb:fc:41:df:fe:73:28:
22:35:ef:f9:0a:d8:05:c6:9c:9d:55:48:b0:9b:40:a8:ba:00:
5d:06:49:e3:85:9c:10:79:3d:70:b0:fb:fa:f4:b5:76:69:d3:
d4:db:ae:cc:46:40:d3:72:ac:00:a6:a2:65:c1:b6:9f:6b:dd:
a7:31:54:c5:4e:ce:07:a5:ef:f7:8e:49:3d:25:42:6d:a0:9a:
86:46:1a:ee:c0:7a:5b:93:c6:7e:11:a7:41:ae:9f:da:3a:ff:
28:54:ab:58:4e:43:a4:c0:9c:3a:a1:ad:fe:ab:7e:54:5d:ed:
42:50:52:bf:6f:64:16:74:9c:52:0b:f0:8b:e1:6b:27:21:45:
2a:57:8f:2c:d8:1f:aa:34:6a:73:f9:ea:d5:f6:79:29:fe:51:
91:97:08:f0:6f:17:09:e7:1c:cb:65:a5:ff:9f:04:2a:80:ff:
5e:8c:fd:5b:ae:a0:5f:aa:75:85:44:d2:46:91:71:c6:78:47:
75:40:82:3f:55:d5:cb:79:4f:03:26:ec:81:f5:cb:9b:08:5e:
c1:e3:1c:b4:12:52:f5:3e:f4:17:c3:11:a8:2c:03:09:22:5e:
62:32:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:22 2026 by rpki-client