Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dz6QOiq9rSZGMEQisuyAp-ZTdOg.roa
File: Dz6QOiq9rSZGMEQisuyAp-ZTdOg.roa (raw, json)
Hash identifier: 537ZytImA9GVlq3jexHrLwZRCznEAwjFd0x/sB9Sl/E=
Subject key identifier: 0F:3E:90:3A:2A:BD:AD:26:46:30:44:22:B2:EC:80:A7:E6:53:74:E8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F3D5FEE176BBB6A6DB16F9636EF8AC9B9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dz6QOiq9rSZGMEQisuyAp-ZTdOg.roa
Signing time: Tue 07 Jul 2026 16:18:44 +0000
ROA not before: Tue 07 Jul 2026 16:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 16:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:5f:ee:17:6b:bb:6a:6d:b1:6f:96:36:ef:8a:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 7 16:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f3e903a2abdad2646304422b2ec80a7e65374e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:c8:4b:a1:62:26:94:80:5f:fe:e5:71:da:
71:c6:9f:7e:17:32:da:3f:8f:f1:81:29:8c:43:fd:
03:56:80:4f:5a:d4:1f:46:2d:15:8d:5e:b1:5a:64:
90:7c:2f:65:46:ac:e4:6d:6e:95:ea:82:d0:8c:cf:
f4:04:43:e2:de:22:9d:b1:d8:36:28:94:36:30:fd:
06:0e:8e:a1:3f:c4:ec:fa:8d:55:91:94:bf:e9:74:
05:0f:90:6c:f7:7c:34:7d:1b:75:b5:0e:a7:2c:fb:
e1:30:7a:76:50:54:3f:b8:79:8a:bd:42:e2:df:00:
fe:e8:1b:6d:a2:fa:d4:56:7b:83:23:f0:30:09:36:
c4:ab:70:e0:81:ee:7b:bb:c5:4a:36:86:c7:ca:ac:
c7:22:84:a0:5a:cf:db:33:f5:b6:d3:73:ea:ef:74:
92:12:9f:3d:29:ba:da:19:d9:99:c9:cc:80:36:36:
ce:d0:eb:7d:eb:6a:0c:ce:51:da:e9:26:af:65:01:
f0:a9:1e:4b:f2:43:5f:c8:77:db:f2:d2:e5:75:35:
30:e8:5c:ee:97:c2:18:76:16:25:35:4c:ea:2a:ed:
93:43:da:c2:b6:db:3a:df:ec:fc:f2:88:e1:ca:0d:
29:39:3a:a8:99:48:fc:a3:17:ff:ac:19:78:f2:0e:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:90:3A:2A:BD:AD:26:46:30:44:22:B2:EC:80:A7:E6:53:74:E8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dz6QOiq9rSZGMEQisuyAp-ZTdOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:61:de:20:5b:e9:fb:68:79:fd:80:e9:88:f1:80:37:17:a2:
13:d8:c3:5e:b0:31:98:a5:bb:01:03:0c:dc:ae:66:03:d5:66:
7c:88:04:3a:c3:3a:61:6e:2c:0e:4e:ce:d0:f8:00:bb:e3:e3:
90:b8:d8:9e:66:45:b4:07:f5:05:a6:0f:ec:b8:35:a9:b6:08:
21:51:d4:14:69:01:80:84:51:38:f9:b7:ba:a3:15:93:73:57:
b4:d6:50:5e:d5:fe:13:ba:4b:6d:2c:af:46:b2:8b:d1:b9:bc:
ce:9f:7e:03:cd:9c:59:06:12:da:6c:09:74:16:42:da:48:9f:
c7:ea:12:99:7e:f1:aa:3e:45:f7:b9:8a:25:50:68:c6:95:09:
fb:b7:68:01:c9:99:e2:36:bf:c9:1f:47:96:6d:ad:99:18:d1:
bb:8e:af:72:d9:e2:f7:fd:79:33:dc:7e:36:67:f2:e9:25:dc:
f3:89:a9:81:5f:cf:b0:40:a9:e7:ac:8e:e5:38:fb:54:aa:1f:
83:a6:1a:6e:5e:6c:30:26:5b:a1:4b:41:70:23:66:c4:e0:50:
a9:6c:50:f9:e8:7c:fc:f9:3e:e1:d3:8a:ab:fb:9a:e3:07:d6:
6a:d2:b0:51:28:47:94:ca:7b:98:fe:ca:6f:91:bd:4a:e2:52:
70:95:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:14:01 2026 by rpki-client