Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J0Hzip7eFqgrw2sKeDxZQD94XDY.roa
File: J0Hzip7eFqgrw2sKeDxZQD94XDY.roa (raw, json)
Hash identifier: gnZPU3EhmAWIj/FkBU/ml5SKCb0Y6A9ggQpDnaTkui8=
Subject key identifier: 27:41:F3:8A:9E:DE:16:A8:2B:C3:6B:0A:78:3C:59:40:3F:78:5C:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EE462039E585A6E70EB87CD55E163FC93
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J0Hzip7eFqgrw2sKeDxZQD94XDY.roa
Signing time: Sat 20 Jun 2026 09:34:49 +0000
ROA not before: Sat 20 Jun 2026 09:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:62:03:9e:58:5a:6e:70:eb:87:cd:55:e1:63:fc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 09:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2741f38a9ede16a82bc36b0a783c59403f785c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:18:34:75:08:42:19:f8:a4:db:9b:0f:b0:
ad:46:9b:18:03:db:59:53:67:93:56:89:be:15:5f:
a0:94:c6:10:25:fd:cf:36:c9:b3:8f:32:75:8f:e3:
78:77:b8:32:fa:8f:61:0f:b4:b4:29:ee:27:b3:04:
92:d9:da:8f:e7:39:10:ee:83:ff:4c:13:30:ff:32:
45:14:dc:32:ce:7e:ec:8b:f8:99:f9:d0:3b:b9:29:
03:25:08:7f:ef:c9:4a:2f:d8:e3:dc:f3:b7:69:93:
7a:11:bf:51:16:37:06:ec:09:05:5c:ec:91:e0:25:
f4:87:50:d7:9f:05:55:4d:21:c5:ed:ad:49:15:93:
4b:b2:6b:ce:1a:2a:42:11:0c:24:12:cf:c3:02:d3:
46:58:83:1e:c6:b8:d7:ef:43:78:a3:ea:69:08:a4:
d5:4f:8e:73:e9:8b:9f:17:4d:42:3e:32:40:7e:eb:
7f:4c:89:9c:a1:11:04:f4:df:58:1e:ec:cc:8c:4c:
24:17:28:09:90:cf:2d:3d:10:db:15:f6:01:2d:03:
d3:c0:4c:53:c3:21:84:ec:09:57:bf:c5:f7:72:19:
da:46:14:69:9f:a5:45:12:dc:e7:a1:68:83:f0:0e:
ea:02:96:48:e2:50:10:0d:e4:43:30:98:67:d8:7f:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:F3:8A:9E:DE:16:A8:2B:C3:6B:0A:78:3C:59:40:3F:78:5C:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J0Hzip7eFqgrw2sKeDxZQD94XDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6d:6d:1c:0f:ee:48:de:3d:5f:45:4b:c3:71:ce:60:ed:8a:
44:12:22:7f:1d:ac:cf:84:7e:30:e2:ae:ed:f5:20:8c:e1:31:
1f:8c:f5:38:24:85:c2:77:3b:d7:c6:14:8b:de:a3:b5:70:12:
b7:c9:ac:79:d3:0c:65:cb:f4:2c:8c:ef:80:b7:57:16:90:8c:
13:2f:a2:3a:87:1b:13:da:9f:d7:e8:2d:76:9a:d6:c1:a5:34:
04:d9:0d:d3:6c:69:ea:04:1b:10:67:e7:2a:32:5a:bf:67:45:
10:b0:54:00:9e:2c:60:ba:93:4d:4f:18:2a:46:d7:a8:aa:f1:
d6:c0:01:59:46:df:eb:f5:fe:c0:46:65:39:9b:d3:09:69:1c:
16:77:33:1e:89:3f:54:53:00:9a:2f:5e:a2:7b:62:38:a6:26:
31:1e:40:89:62:0e:86:db:4c:0a:39:e3:8f:82:d4:13:ea:e9:
f2:00:f2:96:21:62:7b:c8:0c:81:6c:17:9a:c6:30:d0:82:e4:
68:b3:e6:72:9d:e8:aa:73:9c:df:da:3a:3b:7f:e2:dd:fc:60:
d2:ef:65:cd:df:cc:29:4f:1b:a2:50:e0:85:a3:40:70:1a:f4:
2b:2f:e6:7e:88:5a:9d:99:2a:25:64:cc:8b:ad:25:f0:6c:94:
8f:31:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 20:12:55 2026 by rpki-client