Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AMV6Uh6MnLraiK1vkmwTYCFmX_Q.roa
File: AMV6Uh6MnLraiK1vkmwTYCFmX_Q.roa (raw, json)
Hash identifier: Ko6CCMCEr7EK6Kkzn1YwgEWSCUZdBx8yCtly6oeFvd0=
Subject key identifier: 00:C5:7A:52:1E:8C:9C:BA:DA:88:AD:6F:92:6C:13:60:21:66:5F:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0EB773D08B4DDFC21C2974FA2D0CD2750
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AMV6Uh6MnLraiK1vkmwTYCFmX_Q.roa
Signing time: Tue 29 Sep 2026 04:40:55 +0000
ROA not before: Tue 29 Sep 2026 04:40:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.82.0/24 maxlen: 32
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.159.0/24 maxlen: 32
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:77:3d:08:b4:dd:fc:21:c2:97:4f:a2:d0:cd:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 04:40:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00c57a521e8c9cbada88ad6f926c136021665ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:fd:b9:26:ac:58:e2:04:42:58:d2:90:fb:
45:a9:79:af:5b:34:b0:be:07:fc:ef:af:35:54:03:
e6:a4:a0:32:64:8c:a2:7a:e9:4c:4a:c9:9f:a0:17:
c9:94:e2:fe:ee:a2:31:ee:a0:00:79:b3:4a:ec:ce:
27:d5:c1:b1:28:31:69:6d:5f:1c:83:10:fd:28:79:
0e:f2:5d:78:53:9c:47:b0:4c:b2:b2:1f:15:db:35:
e6:24:1e:1a:6c:42:26:3f:de:59:72:ad:49:75:39:
47:90:b2:58:bb:f0:83:4b:6b:ed:95:a2:2b:45:62:
da:70:a1:3d:14:fe:ba:33:7a:31:9a:9c:08:1e:16:
46:b6:d0:97:a1:37:40:8c:b0:3d:5f:2b:ab:35:44:
71:10:35:16:35:7e:ce:20:70:31:75:f8:7e:9d:08:
7d:fe:c0:14:9f:18:3b:b0:26:6a:60:cf:04:dd:c1:
0e:54:36:2e:50:1f:e3:5d:a2:e3:4f:20:57:d6:f3:
3c:d2:2f:a4:b9:20:9b:6f:bb:17:d3:f0:f1:26:a6:
24:63:60:ef:67:64:b6:b5:f9:85:9f:7b:6f:ba:96:
df:9e:3c:80:ef:b1:24:3d:e8:99:c7:29:0c:38:ee:
a4:91:b0:bb:4a:ad:02:d2:05:95:82:01:aa:07:14:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:7A:52:1E:8C:9C:BA:DA:88:AD:6F:92:6C:13:60:21:66:5F:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AMV6Uh6MnLraiK1vkmwTYCFmX_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.8.93.0/24
45.66.228.0/24
45.84.222.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.82.0/24
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.159.0/24
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e5:86:e2:17:8b:3b:aa:75:6a:50:29:51:21:4c:ec:ea:a0:
75:2b:d7:bd:cf:69:84:97:65:74:c2:c6:86:58:b5:a4:2b:f4:
d5:e0:4f:34:46:d1:04:8a:48:d0:83:75:ef:83:17:6c:d0:e2:
34:e1:e2:84:4a:5b:15:8e:c7:d0:35:0b:d6:ee:55:19:84:b5:
60:fc:b4:64:55:aa:ac:74:d5:41:1c:74:7e:0f:6a:b1:1c:e3:
ed:1a:42:28:e1:f4:83:38:9d:5f:f0:35:41:d4:cf:14:cb:e0:
94:55:ef:49:dd:54:1d:43:38:32:a1:38:18:66:72:41:af:e9:
3b:4d:26:61:1e:49:01:21:53:58:62:17:97:6b:70:9e:5d:27:
f5:59:7e:5f:04:89:06:43:79:fe:7c:ff:53:53:32:40:f7:60:
0d:11:5b:a6:65:d5:be:16:48:74:f9:29:54:15:d4:12:ec:67:
83:55:b1:55:78:86:9b:6f:1a:e6:94:49:c3:da:4b:9c:95:4e:
83:67:f5:64:e9:be:f8:7f:ad:45:08:cd:84:70:33:11:2d:03:
9c:9d:1e:6a:44:75:a7:a5:f1:be:ba:ac:fd:d9:02:a8:84:bb:
bc:d5:d3:cc:6f:68:e2:58:9a:b3:be:8e:b4:1a:f4:4d:3c:cc:
b8:9b:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:51:45 2026 by rpki-client