Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LtjkO_14352hJWiawvfNu9Pwx_c.roa
File: LtjkO_14352hJWiawvfNu9Pwx_c.roa (raw, json)
Hash identifier: 1lday8b/JJ5LRTudESFfo+heD3XhMnPJsubyt+7qgJU=
Subject key identifier: 2E:D8:E4:3B:FD:78:DF:9D:A1:25:68:9A:C2:F7:CD:BB:D3:F0:C7:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A060C50B99793D7CC7D7A2CE4608476416
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LtjkO_14352hJWiawvfNu9Pwx_c.roa
Signing time: Wed 02 Sep 2026 06:18:41 +0000
ROA not before: Wed 02 Sep 2026 06:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.68.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 06:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:c5:0b:99:79:3d:7c:c7:d7:a2:ce:46:08:47:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 2 06:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ed8e43bfd78df9da125689ac2f7cdbbd3f0c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:a0:33:ac:0f:18:94:15:36:7c:ca:a2:48:
7b:dd:39:5e:88:2c:eb:a4:1d:1f:4a:9a:14:e7:7b:
4e:df:76:2b:98:83:18:ab:19:a5:5f:83:ea:71:8b:
f5:72:fb:fa:d4:5c:09:00:c6:75:90:d4:a6:e6:46:
15:df:5f:23:46:2d:6b:f0:fa:d3:86:3f:d6:51:fd:
5a:cf:eb:2f:be:2c:92:41:f5:f9:c5:95:a7:dc:d4:
2b:5c:9e:e3:cc:72:e8:78:1f:34:f1:04:de:08:d6:
7c:9b:9e:bb:7b:0b:ef:03:3e:9c:e6:18:4b:17:89:
26:e7:78:9b:b0:7e:fe:7d:24:00:21:45:1a:14:b7:
96:60:10:88:16:ec:54:25:b9:0a:8f:b3:64:d1:95:
ec:10:e5:1e:9e:0c:c0:27:f5:16:f6:6f:e6:3a:79:
dc:13:0b:a4:90:c9:30:0e:d4:d3:24:23:ee:ea:99:
32:1c:e1:7d:7e:cd:32:a2:fa:be:67:2e:d4:cb:6f:
7f:4e:07:53:11:ee:1c:77:47:1e:6a:1f:e0:28:e7:
77:2a:e9:b0:f1:19:6d:3e:89:5c:28:34:df:e8:de:
e8:05:75:d5:ef:8a:2e:97:88:3d:59:06:b8:a6:e7:
ea:cb:2a:51:30:30:fc:51:0e:20:46:48:99:8c:c1:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:E4:3B:FD:78:DF:9D:A1:25:68:9A:C2:F7:CD:BB:D3:F0:C7:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LtjkO_14352hJWiawvfNu9Pwx_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.217.130.0/23
87.120.68.0/24
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:75:e2:ef:6f:d3:bd:d3:22:59:f1:ce:ae:c4:e0:63:3b:37:
2a:c1:d1:b1:2d:45:52:f5:0f:5e:40:78:f3:c4:15:30:9c:ec:
10:25:94:8c:e5:61:e2:25:cf:04:bf:84:04:f6:39:9c:a9:c6:
8e:4c:7f:d9:d4:2f:b7:30:48:14:67:ca:0e:8b:aa:84:ee:d4:
1c:9f:3c:cc:19:27:e3:5b:6b:3d:f3:06:f7:70:ea:98:5e:4c:
07:a8:21:38:4f:59:18:df:14:88:8e:8c:e8:b0:33:4a:8d:d9:
38:77:ff:c5:67:f5:e2:a7:3a:39:32:cb:00:95:92:a4:a2:5d:
de:b2:4a:af:12:25:a6:ff:7a:1b:6e:89:c3:3a:05:eb:8d:8d:
67:17:97:b0:81:d7:92:a4:29:8e:d5:87:67:25:a8:0a:c6:f8:
4f:3a:17:7c:d3:c9:82:30:36:44:26:ae:7e:b0:b2:41:b8:de:
c1:09:b8:f9:7c:64:83:6d:cd:b2:d6:a5:cc:c7:ba:51:3c:8c:
8c:ce:79:39:75:d3:37:b2:81:92:20:0e:4f:77:31:17:f7:41:
58:b8:05:95:e5:36:9a:f5:e4:65:1b:f2:7c:18:87:8f:02:f0:
3a:e4:49:1e:cf:1e:96:31:15:a1:a3:c8:3c:22:7d:e4:6b:30:
d4:b7:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:45:19 2026 by rpki-client