Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9PxDUc5LD7qfF_DG1qYyUuxgOY.roa
File: A9PxDUc5LD7qfF_DG1qYyUuxgOY.roa (raw, json)
Hash identifier: VLDmUf87rGbPfLuLgtqNgrcdT7DcPIe8maGJMx/fNOI=
Subject key identifier: 03:D3:F1:0D:47:39:2C:3E:EA:7C:5F:C3:1B:5A:98:C9:4B:B1:80:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DA633E94442A68BF06DF4FA3402D73773
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9PxDUc5LD7qfF_DG1qYyUuxgOY.roa
Signing time: Sun 19 Apr 2026 14:45:13 +0000
ROA not before: Sun 19 Apr 2026 14:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:33:e9:44:42:a6:8b:f0:6d:f4:fa:34:02:d7:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 14:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03d3f10d47392c3eea7c5fc31b5a98c94bb180e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:1d:3a:e3:fa:9c:8a:c5:0d:3d:91:2b:1a:
e3:22:ee:d6:28:9c:48:08:51:fc:4f:3e:19:44:41:
9f:97:32:42:7a:fb:e3:3e:46:05:98:99:9f:3e:ff:
53:d7:c8:1f:14:3c:43:4b:11:38:d0:6e:a1:19:1b:
aa:80:a2:29:0a:38:2a:1e:d1:3b:a4:8e:c9:82:df:
5b:ae:8a:9b:34:ad:f8:59:c9:95:c4:8a:26:72:07:
2c:8e:eb:dd:2d:f1:23:24:76:94:59:75:26:69:31:
5b:dc:1c:b5:60:03:8b:5b:86:77:ba:cd:fc:22:11:
e4:1b:d3:1f:68:d6:60:ec:88:aa:28:98:82:b6:7f:
dd:32:0a:56:4d:9f:d8:80:fb:54:e0:1e:ed:f1:2b:
27:37:3c:62:06:ef:ac:8b:f4:9f:bd:41:23:c7:0f:
a9:50:13:81:23:63:33:b6:3d:3b:2b:91:2f:42:ca:
3f:8d:b4:31:22:24:5c:0c:2d:05:20:2e:25:58:09:
39:a6:ad:cd:f1:cd:25:43:95:3e:48:49:df:4d:75:
db:99:08:11:18:4c:fa:47:4d:aa:a2:49:06:82:36:
af:d9:fb:ae:c4:61:4d:15:d8:4d:df:1e:9a:cc:01:
f7:aa:fc:b8:54:d0:c1:08:a9:26:6a:76:31:17:9e:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D3:F1:0D:47:39:2C:3E:EA:7C:5F:C3:1B:5A:98:C9:4B:B1:80:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9PxDUc5LD7qfF_DG1qYyUuxgOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.191.0/24
92.119.199.0/24
92.249.50.0/24
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
193.37.44.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f8:64:fd:0c:2e:f0:30:bd:1d:d7:a4:f1:68:4f:5a:be:c2:
8f:b4:80:66:cf:5e:67:99:f7:b9:bc:8f:af:8d:df:ea:ef:48:
29:b2:95:fe:b0:4b:35:da:96:7d:d6:a6:b0:77:fd:ab:a4:82:
0e:0b:20:4c:13:29:3a:e2:0e:2d:e8:43:59:5e:2a:af:3b:1b:
ac:7f:ec:22:e7:0c:df:84:29:42:6e:ec:60:6b:5c:12:f2:88:
e9:97:20:d5:9d:54:e2:3e:b9:a4:df:29:be:b8:b7:ce:97:05:
80:b8:7e:3a:90:ab:bf:d0:58:20:e6:6e:8e:f4:73:73:2f:ad:
54:34:9b:c3:01:7b:5c:c6:12:0b:9d:22:7c:a9:dc:f4:16:4f:
89:cf:86:d5:2c:a4:70:ab:be:da:ae:fc:92:44:64:ab:9b:28:
f6:e9:a1:53:b2:75:5e:94:ca:e8:f0:c9:29:2a:e4:33:cb:67:
19:48:29:15:37:13:10:51:16:75:78:f3:14:ec:7a:c9:d9:d6:
1a:83:89:18:62:ac:04:71:9c:33:21:11:07:df:1e:91:f5:d2:
f4:dd:d0:05:0b:16:61:52:fb:b0:a8:3a:ec:7a:e8:2f:ba:72:
85:dc:ee:95:3e:8d:07:16:ae:15:0d:27:5a:33:dd:5c:76:c1:
d3:7e:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:03:32 2026 by rpki-client