Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bg61b6dViwWfbMtAUcE-9YUMt9Q.roa
File: Bg61b6dViwWfbMtAUcE-9YUMt9Q.roa (raw, json)
Hash identifier: yHQHHObrKXp93XV7TZMKnOc1DRj+o1yUlzt0l7EwuMI=
Subject key identifier: 06:0E:B5:6F:A7:55:8B:05:9F:6C:CB:40:51:C1:3E:F5:85:0C:B7:D4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FB6C699BB61A9FB371D949E13DB030F4F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bg61b6dViwWfbMtAUcE-9YUMt9Q.roa
Signing time: Fri 31 Jul 2026 06:04:56 +0000
ROA not before: Fri 31 Jul 2026 06:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.193.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 06:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:c6:99:bb:61:a9:fb:37:1d:94:9e:13:db:03:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 06:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=060eb56fa7558b059f6ccb4051c13ef5850cb7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:32:bc:6d:75:58:2b:7a:68:20:48:31:67:
38:35:94:02:00:ec:5c:64:b5:cd:c3:78:9f:d5:9f:
d4:3d:c0:63:48:56:c1:9f:b0:97:f0:46:3b:96:8c:
f6:bf:e1:3f:78:c2:46:95:05:ff:bb:db:60:fd:c6:
ca:34:c8:a4:26:07:f9:74:83:39:26:4c:36:4a:68:
c4:a4:ef:89:75:43:90:be:10:45:90:22:e8:5f:a5:
fb:8a:13:fc:27:ef:c3:27:13:bb:1e:f2:05:c4:34:
f7:00:42:a6:0a:79:54:d3:32:be:ee:9d:14:cb:8a:
f5:bf:4a:a8:99:e5:11:bb:43:c7:c5:f7:43:e0:44:
17:26:ab:fe:f2:42:43:51:23:a6:bc:fe:d6:1b:32:
2d:cf:55:c0:e2:8c:9f:a9:3b:ce:64:a5:8b:3b:fb:
87:fd:e7:67:e7:f9:de:6e:9d:29:02:3b:9e:b1:28:
04:79:b0:c5:14:b4:33:53:a5:a6:97:f3:51:1b:ae:
37:a7:d2:65:1c:93:d2:37:d4:34:05:1d:b0:76:41:
c1:62:e4:ff:5b:b1:05:85:fc:7a:43:c1:87:7b:4a:
13:52:26:b6:11:63:79:54:1d:11:72:35:be:e9:2c:
d1:f8:71:dc:90:df:5b:d5:a0:66:50:91:9c:5b:90:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0E:B5:6F:A7:55:8B:05:9F:6C:CB:40:51:C1:3E:F5:85:0C:B7:D4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bg61b6dViwWfbMtAUcE-9YUMt9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.63.0/24
87.121.79.0/24
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.100.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b0:3b:05:a7:61:d9:4b:67:43:fd:54:13:52:34:94:c9:a6:
fd:65:93:2a:a5:aa:00:71:f1:e5:63:33:a8:12:1a:df:79:04:
b1:2c:a8:56:75:37:45:41:eb:4e:f8:6e:a4:6d:d2:2c:e2:06:
4b:f2:ec:89:46:f6:31:a4:ee:a1:3b:bf:73:e4:fc:0f:ee:ca:
03:c0:9b:e6:8a:ec:25:75:64:f9:18:c8:d1:3b:f1:cd:ab:8b:
96:01:83:20:d3:10:32:f1:ce:19:15:9b:c0:c8:59:61:4a:7f:
74:ff:d7:d9:ee:e0:09:04:94:77:45:32:ec:8f:f3:81:ad:74:
b8:b1:e2:79:8b:42:a6:a9:bf:48:12:46:a7:b9:a1:3b:19:d0:
85:75:00:19:f4:d8:88:6c:ac:10:90:eb:92:24:7a:d3:5b:37:
57:bd:d7:63:d7:3d:ea:3a:5d:5c:f1:88:fa:70:e1:15:74:04:
02:4a:9d:73:3a:af:74:fe:ee:37:ab:26:53:88:0e:34:b5:b3:
77:d1:26:77:29:38:80:fc:01:34:a2:00:4a:de:36:d0:54:53:
12:7c:39:23:e6:f7:b8:d0:ed:7e:ab:0c:57:e1:ff:6c:97:40:
9a:8d:b1:eb:b0:19:4b:21:c3:05:cb:a5:63:81:cf:59:68:e2:
a0:fd:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 11:33:33 2026 by rpki-client