Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SVUwbhmRAbNa0WKukAemwqdo0Cs.roa
File: SVUwbhmRAbNa0WKukAemwqdo0Cs.roa (raw, json)
Hash identifier: 3ogCYiIcK8MbenPfzXUr5BgeRZv21SOdthe8UY4qC1w=
Subject key identifier: 49:55:30:6E:19:91:01:B3:5A:D1:62:AE:90:07:A6:C2:A7:68:D0:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F40551262BF910C87E184D2F61113926E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SVUwbhmRAbNa0WKukAemwqdo0Cs.roa
Signing time: Wed 08 Jul 2026 06:05:44 +0000
ROA not before: Wed 08 Jul 2026 06:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:55:12:62:bf:91:0c:87:e1:84:d2:f6:11:13:92:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 06:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4955306e199101b35ad162ae9007a6c2a768d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:a4:88:60:21:26:0a:8d:ef:b8:59:4a:42:
da:ce:5b:51:c3:1a:66:39:dd:05:35:e3:af:53:a8:
b6:a5:39:83:e6:93:61:02:f9:fa:6d:f3:39:06:70:
0d:9a:7c:c0:d6:94:cc:d5:11:89:78:92:16:70:c7:
1b:f8:bf:cb:fa:65:96:a6:4d:b3:12:31:44:4a:8b:
7c:05:77:22:0b:8b:9d:bb:c7:1e:e0:e5:ff:7a:99:
93:79:f1:41:c7:4b:a5:c3:6f:cc:9f:1a:f4:60:c7:
67:c4:ae:68:e9:d8:c1:5d:e2:18:b8:c5:b0:93:71:
7a:fb:e2:67:5f:90:98:cb:e0:9e:b6:74:a4:bc:47:
5b:6b:d8:ed:cd:be:a5:61:62:2f:f5:32:2f:c0:ec:
81:c7:ee:6b:71:79:99:b3:5a:0a:14:fb:99:5c:06:
6a:84:d2:d1:4e:94:af:bd:12:62:54:36:d7:1c:69:
28:90:c5:2a:a6:af:16:5f:70:ca:b1:ac:2f:71:46:
3a:59:98:7f:81:af:81:a5:c4:b5:a1:3e:25:af:54:
bf:e5:c9:c7:68:41:41:f8:55:c7:87:26:49:54:69:
82:d9:79:e1:a4:13:00:08:2a:20:ef:f7:26:1a:a1:
73:49:80:11:b5:bd:9c:1f:38:6c:e7:32:3a:53:eb:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:55:30:6E:19:91:01:B3:5A:D1:62:AE:90:07:A6:C2:A7:68:D0:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SVUwbhmRAbNa0WKukAemwqdo0Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:74:ce:6b:90:3b:5e:cd:1f:3d:85:4b:cf:b1:6b:84:26:ef:
fa:bc:dd:b1:4b:04:0f:fe:76:59:ea:45:1a:99:2e:cb:4d:e3:
9f:1b:42:ae:81:4f:b9:ed:d3:85:64:25:3d:26:ca:2c:02:8c:
2d:45:94:d2:7f:91:8e:ca:b8:9f:cf:e5:fe:7f:5c:24:76:5e:
6c:21:58:57:19:f0:88:a9:65:cd:c4:d5:c9:bc:03:96:7e:a5:
dd:22:1d:60:dd:23:51:64:ed:05:2c:4d:e2:f0:e8:eb:f2:ac:
6d:93:6a:eb:7b:80:3f:89:fd:ce:3e:34:0c:eb:c0:04:b6:f6:
5a:de:fe:45:ab:52:0b:fd:e5:ea:59:9a:ec:96:3a:17:dd:6c:
71:c7:61:cd:eb:89:f7:46:b2:33:0b:13:a8:4f:5a:b2:56:e5:
80:cc:35:b4:09:9b:dd:8a:54:97:53:78:5b:b6:72:34:2e:29:
e2:d6:77:f0:62:1a:d3:1b:dd:10:28:01:2c:66:61:9c:9d:86:
1f:70:a3:4e:5c:ce:9c:2c:9c:b2:ef:e4:55:e2:a9:c5:71:d2:
a9:3a:e3:d5:84:4b:80:08:70:c1:78:16:9e:62:18:bf:08:5e:
c0:ca:1f:42:43:1c:9d:cc:fd:a9:e7:c4:f1:0c:75:9b:c6:7a:
d8:6f:57:7c
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZ9AVRJiv5EMh+GE0vYRE5JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNzA4MDYwNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTU1MzA2ZTE5OTEwMWIzNWFkMTYyYWU5MDA3YTZjMmE3NjhkMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo36kiGAhJgqN77hZSkLazltRwxpm
Od0FNeOvU6i2pTmD5pNhAvn6bfM5BnANmnzA1pTM1RGJeJIWcMcb+L/L+mWWpk2z
EjFESot8BXciC4udu8ce4OX/epmTefFBx0ulw2/Mnxr0YMdnxK5o6djBXeIYuMWw
k3F6++JnX5CYy+CetnSkvEdba9jtzb6lYWIv9TIvwOyBx+5rcXmZs1oKFPuZXAZq
hNLRTpSvvRJiVDbXHGkokMUqpq8WX3DKsawvcUY6WZh/ga+BpcS1oT4lr1S/5cnH
aEFB+FXHhyZJVGmC2XnhpBMACCog7/cmGqFzSYARtb2cHzhs5zI6U+ssmQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFElVMG4ZkQGzWtFirpAHpsKnaNArMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvU1ZVd2JobVJBYk5hMFdLdWtBZW13cWRvMENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAAl
i4ADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtgVUDBAAtjZ4DBABRoe4DBABT
j3EDBABT22IDBAFV2YIDBABXeFcDBABXeH4DBABXeKYDBAFXeMADBAFXeT4DBAFX
eXIDBABXed0DBABc+TIDBABde20DBABenLwDBACTTmUDBAK52lQDBAC53qADBAC5
/LEDBADCN7oDBADCqa8wDQYJKoZIhvcNAQELBQADggEBAF10zmuQO17NHz2FS8+x
a4Qm7/q83bFLBA/+dlnqRRqZLstN458bQq6BT7nt04VkJT0myiwCjC1FlNJ/kY7K
uJ/P5f5/XCR2XmwhWFcZ8IipZc3E1cm8A5Z+pd0iHWDdI1Fk7QUsTeLw6OvyrG2T
aut7gD+J/c4+NAzrwAS29lre/kWrUgv95epZmuyWOhfdbHHHYc3rifdGsjMLE6hP
WrJW5YDMNbQJm92KVJdTeFu2cjQuKeLWd/BiGtMb3RAoASxmYZydhh9wo05czpws
nLLv5FXiqcVx0qk649WES4AIcMF4Fp5iGL8IXsDKH0JDHJ3M/annxPEMdZvGethv
V3w=
-----END CERTIFICATE-----
Generated at Wed Jul 8 13:13:39 2026 by rpki-client