Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C9jLgCeKxR-GUo_HiMvzaueJPZ8.roa
File: C9jLgCeKxR-GUo_HiMvzaueJPZ8.roa (raw, json)
Hash identifier: 0sSgKcvecAFQSHx6lQoEENhgb100DzdD+U/8uECo/VU=
Subject key identifier: 0B:D8:CB:80:27:8A:C5:1F:86:52:8F:C7:88:CB:F3:6A:E7:89:3D:9F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FCE62001ACE5C98A7E53A1A1C6CCC76CE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C9jLgCeKxR-GUo_HiMvzaueJPZ8.roa
Signing time: Tue 04 Aug 2026 20:05:56 +0000
ROA not before: Tue 04 Aug 2026 20:05:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.193.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:62:00:1a:ce:5c:98:a7:e5:3a:1a:1c:6c:cc:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 20:05:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bd8cb80278ac51f86528fc788cbf36ae7893d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:9e:41:b0:1a:73:41:14:a9:db:96:5b:9c:
96:ec:df:17:e6:5e:f8:3a:1f:2e:63:0d:28:71:b4:
a4:20:c5:89:07:5d:f3:e7:55:c2:61:84:c8:38:92:
00:c7:c7:d0:6b:be:4c:e7:05:42:d1:d1:86:bf:2e:
b1:ed:33:40:ad:64:ee:60:54:10:44:64:f1:67:d6:
4a:24:59:ed:13:65:91:0c:d0:a5:78:33:2b:b8:9d:
01:0e:b9:4f:8d:9b:02:1c:c2:1e:46:e7:00:8c:11:
a5:95:b4:b2:87:85:1a:c0:fe:c4:5d:52:0d:bb:19:
1f:0b:dc:50:0c:9c:80:e4:08:bd:1b:e3:06:7a:5d:
07:53:70:ac:5e:5b:45:dc:fb:b2:7c:b2:48:3a:de:
ce:3d:10:b9:25:6a:c0:03:3e:c7:04:38:28:a5:b9:
a3:b8:cd:97:f0:2e:b9:5c:ea:ed:83:ec:45:1d:0a:
ad:f5:16:33:3e:51:f5:49:cb:a6:2b:59:35:07:7e:
16:e4:55:90:24:70:57:a1:bb:76:1e:fe:c6:13:fa:
73:d5:24:66:b2:f8:b0:58:e0:c3:ab:16:c9:c2:97:
17:c5:7b:15:2f:05:30:71:c0:d3:8f:44:9f:64:94:
39:2e:cf:e5:a0:ed:03:37:63:cc:aa:84:ef:a0:8c:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:CB:80:27:8A:C5:1F:86:52:8F:C7:88:CB:F3:6A:E7:89:3D:9F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C9jLgCeKxR-GUo_HiMvzaueJPZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.63.0/24
87.121.79.0/24
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
19:91:ad:6e:c8:ed:1a:76:a0:e5:d0:6a:ee:d1:33:72:60:5f:
af:dd:98:9f:93:26:bd:03:b4:37:d3:d1:7f:98:96:5d:bb:37:
80:a2:2a:b5:1b:3c:56:0f:df:95:00:ab:8e:e7:f4:68:74:63:
31:33:b0:e5:91:94:2a:a9:cd:93:13:f3:65:5e:58:22:08:6c:
71:d0:b3:aa:01:52:35:c3:1d:7b:23:10:76:10:34:35:81:32:
f0:88:03:29:74:71:63:12:d2:fc:82:13:e5:c4:94:87:e7:52:
dc:ad:54:3a:65:1a:8d:0a:c1:cd:b9:7b:02:3e:72:a2:58:47:
00:9c:9d:7c:99:fe:f4:20:1d:2c:81:6e:73:12:d7:25:d9:78:
6d:34:28:41:12:06:1f:37:5b:ef:16:ab:2c:b3:8d:32:d0:c2:
7c:bc:9a:0e:2f:0a:27:59:15:f9:4f:b4:09:5e:12:8a:6c:a6:
27:dc:d4:ee:8f:a7:2f:fe:28:70:95:81:eb:8e:c5:10:f6:4b:
4e:65:5e:b3:95:34:6a:b6:2c:bc:a1:ac:ef:d1:e2:bd:d0:38:
f9:07:1d:36:45:d8:7c:e3:c7:77:8a:16:f9:d9:74:5d:f8:14:
7e:b1:e6:3f:86:17:51:21:46:e3:bf:18:0d:9a:f9:c2:d9:6a:
76:aa:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 02:22:08 2026 by rpki-client