Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GMe24J3PwYIZYSFA10nz9w7qQac.roa
File: GMe24J3PwYIZYSFA10nz9w7qQac.roa (raw, json)
Hash identifier: KxPsHcn5qrx+oq92CEaWgwg+SwlLDF72uL/49BpXVE4=
Subject key identifier: 18:C7:B6:E0:9D:CF:C1:82:19:61:21:40:D7:49:F3:F7:0E:EA:41:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FC73F84E0BB09C1307E0750B1687279DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GMe24J3PwYIZYSFA10nz9w7qQac.roa
Signing time: Mon 03 Aug 2026 10:50:56 +0000
ROA not before: Mon 03 Aug 2026 10:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.193.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:3f:84:e0:bb:09:c1:30:7e:07:50:b1:68:72:79:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 10:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18c7b6e09dcfc18219612140d749f3f70eea41a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:8c:db:3f:8e:5e:80:99:03:f5:00:2a:80:
57:68:15:5f:12:07:a5:be:93:b8:67:88:4a:05:6f:
d8:f4:15:39:37:e7:64:96:82:43:e8:9a:e2:68:d4:
10:58:10:39:63:e0:c3:34:9b:95:43:9e:0d:17:c9:
29:38:b5:50:b6:f0:8f:74:eb:b6:9b:36:55:31:d2:
02:d7:f0:ec:c6:75:39:54:d4:e3:c8:14:2e:85:57:
d4:5e:80:71:02:16:72:61:11:a4:59:5f:46:db:b2:
cd:da:db:1a:6d:0d:11:26:13:96:2c:44:6e:78:f4:
bd:e4:1a:a4:32:65:74:bb:7d:41:0a:93:e0:96:e7:
85:ff:a8:c7:06:06:d0:08:9c:a2:12:bc:cd:1e:44:
ff:e8:fe:8e:fa:5e:95:c3:6b:c1:12:7a:bb:37:64:
f0:4f:1d:7e:eb:37:b9:d6:4f:9b:78:3f:ba:9e:e9:
97:40:d6:82:58:b4:7b:3b:73:ee:5a:48:02:e3:7d:
15:ac:bd:41:4d:c1:8d:38:f4:01:b2:79:c3:e1:ca:
96:d2:38:e1:b7:74:76:8a:cf:01:18:4a:8a:ae:2e:
1d:44:dd:54:37:af:6f:a3:91:43:f0:ec:18:cb:a5:
00:7e:24:2d:ad:1d:2b:20:7f:38:26:2c:e5:d8:ce:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:B6:E0:9D:CF:C1:82:19:61:21:40:D7:49:F3:F7:0E:EA:41:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GMe24J3PwYIZYSFA10nz9w7qQac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.63.0/24
87.121.79.0/24
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.100.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e5:89:50:79:cf:9b:25:18:ba:8b:2f:1d:b3:d1:c4:e6:8b:
02:a6:ef:f2:b4:27:ec:41:e1:b4:3f:98:b9:85:81:43:aa:5c:
97:e0:1e:25:90:4e:5b:0a:14:1f:b0:21:9c:d1:2f:f8:72:a5:
2d:89:fc:60:71:d6:7d:ab:b9:c1:79:a2:b2:bf:d6:d5:b2:ac:
93:53:ce:5e:71:37:16:cb:83:9a:31:b0:2e:05:8b:7c:d3:0b:
3c:9a:9b:a2:5b:3f:f4:e6:95:de:ef:15:5c:e1:2b:79:28:ab:
92:55:26:29:4d:40:f1:c6:df:2e:ab:67:ef:0a:a2:cb:7f:f4:
b3:24:13:a0:4a:aa:2f:61:9e:88:22:b3:12:61:20:39:71:b4:
a3:91:8f:82:aa:05:6f:46:c3:c8:be:cc:57:68:fa:6d:42:2f:
03:2e:1a:b6:8b:bb:dd:99:28:cc:d0:90:8a:be:94:1f:33:12:
56:10:ad:3a:15:b3:f3:49:5e:fd:77:db:08:60:92:3b:15:43:
b6:08:37:b1:4d:14:72:38:59:04:fe:cc:ee:1c:f5:21:79:82:
6f:76:a1:5d:19:c9:d5:ed:6f:1b:e1:bd:60:1a:19:74:db:72:
a3:25:40:1e:0d:26:db:99:a9:27:04:8c:d2:3a:0f:1d:9b:25:
24:1c:94:80
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZ/HP4TguwnBMH4HULFocnnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODAzMTA1MDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGM3YjZlMDlkY2ZjMTgyMTk2MTIxNDBkNzQ5ZjNmNzBlZWE0MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ2M2z+OXoCZA/UAKoBXaBVfEgel
vpO4Z4hKBW/Y9BU5N+dkloJD6JriaNQQWBA5Y+DDNJuVQ54NF8kpOLVQtvCPdOu2
mzZVMdIC1/DsxnU5VNTjyBQuhVfUXoBxAhZyYRGkWV9G27LN2tsabQ0RJhOWLERu
ePS95BqkMmV0u31BCpPglueF/6jHBgbQCJyiErzNHkT/6P6O+l6Vw2vBEnq7N2Tw
Tx1+6ze51k+beD+6numXQNaCWLR7O3PuWkgC430VrL1BTcGNOPQBsnnD4cqW0jjh
t3R2is8BGEqKri4dRN1UN69vo5FD8OwYy6UAfiQtrR0rIH84Jizl2M7uSwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFBjHtuCdz8GCGWEhQNdJ8/cO6kGnMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvR01lMjRKM1B3WUlaWVNGQTEwbno5dzdxUWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBAAl
i4ADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtgVUDBAAtjZ4DBABPbjIDBABR
oe4DBABTj3EDBABT22IDBAFV2YIDBABXeFcDBABXeH4DBABXeKYDBAFXeMADBABX
eT8DBABXeU8DBAFXeXIDBABXed0DBABc+TIDBABde2QDBABde20DBABenLwDBACT
TmUDBAC53qADBAC5/LEDBADCN7oDBADCqa8wDQYJKoZIhvcNAQELBQADggEBAFPl
iVB5z5slGLqLLx2z0cTmiwKm7/K0J+xB4bQ/mLmFgUOqXJfgHiWQTlsKFB+wIZzR
L/hypS2J/GBx1n2rucF5orK/1tWyrJNTzl5xNxbLg5oxsC4Fi3zTCzyam6JbP/Tm
ld7vFVzhK3koq5JVJilNQPHG3y6rZ+8Kost/9LMkE6BKqi9hnogisxJhIDlxtKOR
j4KqBW9Gw8i+zFdo+m1CLwMuGraLu92ZKMzQkIq+lB8zElYQrToVs/NJXv132whg
kjsVQ7YIN7FNFHI4WQT+zO4c9SF5gm92oV0ZydXtbxvhvWAaGXTbcqMlQB4NJtuZ
qScEjNI6Dx2bJSQclIA=
-----END CERTIFICATE-----
Generated at Mon Aug 3 15:48:35 2026 by rpki-client