Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rm3c6rALJWHDc-o3MDqzd7nj25E.roa
File: Rm3c6rALJWHDc-o3MDqzd7nj25E.roa (raw, json)
Hash identifier: 6SsK4WJrDbQMsd9EduB/sBCIYLShUw3YQSR9E1a5o0M=
Subject key identifier: 46:6D:DC:EA:B0:0B:25:61:C3:73:EA:37:30:3A:B3:77:B9:E3:DB:91
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F6B347291AE7E5F0143B7FD7D61E02032
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rm3c6rALJWHDc-o3MDqzd7nj25E.roa
Signing time: Thu 16 Jul 2026 13:53:46 +0000
ROA not before: Thu 16 Jul 2026 13:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 13:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:34:72:91:ae:7e:5f:01:43:b7:fd:7d:61:e0:20:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 16 13:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=466ddceab00b2561c373ea37303ab377b9e3db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:39:68:d6:bc:bc:0a:9b:b7:d4:28:c4:51:
19:c9:89:14:d0:9b:67:c3:05:55:2d:c7:9c:77:d7:
16:6f:5a:b9:77:40:ad:64:c9:2c:37:a6:40:a7:f8:
02:1c:03:db:45:ec:62:e5:a3:32:d1:74:3d:62:5f:
af:63:b8:96:a9:df:ca:60:a2:e2:d2:56:51:8a:e4:
c4:da:4c:cd:ff:2e:5e:02:2c:ca:f7:8b:be:e0:c7:
cf:8d:e3:ea:d2:67:80:ad:ac:dd:4a:ae:c3:ad:f9:
f4:f5:49:05:4c:c1:f1:b8:46:8b:e4:81:fd:47:4d:
83:01:a4:e4:eb:58:30:b0:59:f7:86:79:b6:d8:2f:
76:79:3f:6b:8b:9e:d3:ce:6b:27:d8:fb:f8:e4:e1:
6f:2b:92:7d:8f:e1:90:93:9d:a2:e8:e6:17:73:5c:
99:d6:72:25:79:4b:13:2f:b2:67:d3:4e:5c:31:21:
83:f3:81:c2:4a:d4:34:b4:b5:57:18:50:77:38:ab:
95:fe:00:74:17:e1:d4:f4:98:bf:a2:d9:12:34:15:
ef:be:72:d2:b6:8a:9a:ca:43:12:24:f3:8e:bf:4a:
c1:bf:32:98:92:83:38:74:c3:88:46:a2:1f:22:a5:
85:92:9d:38:07:44:59:4a:c8:1c:01:02:75:fd:9f:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:DC:EA:B0:0B:25:61:C3:73:EA:37:30:3A:B3:77:B9:E3:DB:91
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rm3c6rALJWHDc-o3MDqzd7nj25E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a2:67:e5:b4:1a:12:07:64:72:81:9f:17:4a:4c:b7:b0:b8:
5b:fc:21:d6:1f:ed:81:31:90:4d:61:d3:25:db:eb:77:35:5c:
f1:3b:ea:40:f7:7b:a0:a0:a8:ea:34:8b:5a:84:7e:6c:28:95:
6a:73:b2:fa:9f:25:b8:b2:22:24:eb:d2:39:47:b9:0d:df:73:
36:1b:ff:a6:2b:9e:6c:a5:48:df:8a:be:b6:7b:29:9f:de:ed:
fa:3f:37:72:81:8d:8a:8d:e3:f0:db:3e:3c:86:16:4e:fa:c3:
6e:4b:70:0d:6b:3f:85:e5:ef:1b:ad:30:67:6c:b6:e5:28:41:
0d:73:33:27:06:3f:32:31:dc:55:dd:79:8f:be:2e:c2:34:9f:
13:ac:5a:11:b9:38:9b:53:67:7d:ca:07:0b:af:7a:34:0f:3e:
df:5e:79:64:16:b0:20:1e:31:1a:f8:25:ba:ff:90:54:31:25:
1c:49:bd:d4:27:c0:25:b0:17:c7:99:6e:6c:0e:83:c0:07:49:
f8:e5:41:11:e8:93:31:c9:be:fa:fe:6a:88:77:a1:df:ec:19:
24:d9:d8:d6:e3:dc:a8:6c:ab:d6:ad:50:e3:eb:91:5b:91:b0:
f0:27:be:77:03:bd:d5:50:59:28:c8:92:f6:0c:1a:e0:ac:57:
eb:07:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 19:20:41 2026 by rpki-client