Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRemZZyd1pD3FkKPigAjPHK4pWk.roa
File: PRemZZyd1pD3FkKPigAjPHK4pWk.roa (raw, json)
Hash identifier: TgjQfNyfskYJl5xrLoTENq8SdtvGoTtFEQNbf5rot+g=
Subject key identifier: 3D:17:A6:65:9C:9D:D6:90:F7:16:42:8F:8A:00:23:3C:72:B8:A5:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E49A2F7B52DB6EBE9964EDE49254E87E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRemZZyd1pD3FkKPigAjPHK4pWk.roa
Signing time: Thu 21 May 2026 08:24:37 +0000
ROA not before: Thu 21 May 2026 08:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:a2:f7:b5:2d:b6:eb:e9:96:4e:de:49:25:4e:87:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 21 08:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d17a6659c9dd690f716428f8a00233c72b8a569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:f9:34:80:95:e0:43:da:1e:f9:40:df:60:
6e:85:3c:88:03:c6:d5:8e:4a:5e:25:c2:55:1b:7a:
1d:32:94:3e:f6:07:d3:48:73:41:f6:c9:5d:dc:2d:
e0:a1:2b:23:93:0d:bd:20:ee:92:80:2e:8d:ca:fd:
5f:69:28:15:7c:63:1a:f1:fd:0b:e6:d9:fb:98:cb:
17:1d:db:3d:b6:93:c1:eb:8a:e6:03:2a:42:8f:fa:
98:8c:70:1c:78:63:a6:ef:22:19:3e:5c:4a:58:97:
ae:93:eb:8d:6b:c1:b1:b3:09:73:b5:e5:72:a7:d0:
de:38:2e:4a:1e:c7:4d:b2:44:c6:b0:33:fa:ea:23:
82:ac:43:55:fc:d7:16:cc:2c:d4:e5:6d:a0:30:97:
0a:4e:7d:4e:9e:59:4a:47:07:28:4c:b1:75:b0:2b:
21:cd:41:66:80:37:38:e3:29:86:0f:6e:bd:1f:b1:
1a:29:da:e0:5b:c1:6c:38:9a:8e:45:67:69:dc:00:
f7:5c:bf:e1:11:b0:84:a8:a9:1e:ef:9a:d3:eb:e0:
5b:05:d5:8a:b5:4e:56:f6:30:a5:d6:f1:1b:b3:65:
2f:01:c8:cd:17:be:d5:fc:91:88:59:05:fe:b8:68:
1a:59:b4:fe:32:1d:a4:33:43:b6:af:0c:0b:47:1c:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:A6:65:9C:9D:D6:90:F7:16:42:8F:8A:00:23:3C:72:B8:A5:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRemZZyd1pD3FkKPigAjPHK4pWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.191.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ec:6e:ad:99:f8:0b:db:4c:a9:df:dd:c9:0c:bc:56:f5:6e:
f5:75:d6:65:41:5d:a7:54:06:01:07:79:0f:f8:02:0c:67:db:
59:dd:8f:b7:62:5e:34:db:c5:da:37:5f:85:2a:d8:5f:6d:04:
8f:77:96:dc:0a:ed:d8:de:fc:53:c7:46:e0:1f:a2:43:5f:30:
3d:22:00:2c:c7:4e:6b:7d:9a:04:e4:4b:7a:26:3c:fa:88:f6:
a5:03:3d:ca:e0:ef:23:d0:55:d2:01:2c:34:06:2e:3a:7e:18:
82:96:a7:c4:7e:99:3f:00:f3:4f:a0:03:3f:dc:cb:19:91:74:
34:4a:43:d9:62:f2:11:44:8f:50:86:ce:d2:0f:72:e1:b3:9f:
f9:21:3d:14:6c:95:6d:a8:a0:8d:7f:74:a4:dc:fa:2c:47:c6:
f8:0d:a2:8d:32:f0:10:45:cf:51:d8:9e:4d:67:41:04:d1:d2:
62:20:98:a6:81:1e:ef:a4:53:bc:b4:15:75:1f:b7:0a:b0:1a:
3d:0a:da:d4:f4:e4:7e:05:e9:67:8c:14:bd:50:14:d7:53:c7:
72:a6:02:34:5b:17:c8:4e:45:72:ac:e5:1e:22:7a:db:73:5a:
d3:e8:26:f3:ff:e7:ae:2c:24:89:21:a1:19:28:8a:e8:d3:e5:
53:5c:89:4c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZ5Jove1Lbbr6ZZO3kklToflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTIxMDgyNDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE3YTY2NTljOWRkNjkwZjcxNjQyOGY4YTAwMjMzYzcyYjhhNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApir5NICV4EPaHvlA32BuhTyIA8bV
jkpeJcJVG3odMpQ+9gfTSHNB9sld3C3goSsjkw29IO6SgC6Nyv1faSgVfGMa8f0L
5tn7mMsXHds9tpPB64rmAypCj/qYjHAceGOm7yIZPlxKWJeuk+uNa8GxswlzteVy
p9DeOC5KHsdNskTGsDP66iOCrENV/NcWzCzU5W2gMJcKTn1OnllKRwcoTLF1sCsh
zUFmgDc44ymGD269H7EaKdrgW8FsOJqORWdp3AD3XL/hEbCEqKke75rT6+BbBdWK
tU5W9jCl1vEbs2UvAcjNF77V/JGIWQX+uGgaWbT+Mh2kM0O2rwwLRxwQiwIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFD0XpmWcndaQ9xZCj4oAIzxyuKVpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUFJlbVpaeWQxcEQzRmtLUGlnQWpQSEs0cFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAAf
DeADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtjZ4DBABRoe4DBABTj3EDBABU
NjMDBAFV2YIDBABXeFcDBABXeH4DBABXeKYDBABXeL8DBABc+TIDBAFde2QDBABd
e20DBACTTmUDBAK52lQDBAC53qADBADCN7oDBADCqa8wDQYJKoZIhvcNAQELBQAD
ggEBAK7sbq2Z+AvbTKnf3ckMvFb1bvV11mVBXadUBgEHeQ/4Agxn21ndj7diXjTb
xdo3X4Uq2F9tBI93ltwK7dje/FPHRuAfokNfMD0iACzHTmt9mgTkS3omPPqI9qUD
Pcrg7yPQVdIBLDQGLjp+GIKWp8R+mT8A80+gAz/cyxmRdDRKQ9li8hFEj1CGztIP
cuGzn/khPRRslW2ooI1/dKTc+ixHxvgNoo0y8BBFz1HYnk1nQQTR0mIgmKaBHu+k
U7y0FXUftwqwGj0K2tT05H4F6WeMFL1QFNdTx3KmAjRbF8hORXKs5R4iettzWtPo
JvP/564sJIkhoRkoiujT5VNciUw=
-----END CERTIFICATE-----
Generated at Thu May 21 13:20:15 2026 by rpki-client