Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UTMo9QWJOL50sXhalGFdVlcz8wA.roa
File: UTMo9QWJOL50sXhalGFdVlcz8wA.roa (raw, json)
Hash identifier: rOz1aNLRLKUbgtooJ/DDMdfbw72mT44yQrZH1ga/j7E=
Subject key identifier: 51:33:28:F5:05:89:38:BE:74:B1:78:5A:94:61:5D:56:57:33:F3:00
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A12434B1D52EBF66C99B8E11E274A33BA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UTMo9QWJOL50sXhalGFdVlcz8wA.roa
Signing time: Sat 10 Oct 2026 05:06:35 +0000
ROA not before: Sat 10 Oct 2026 05:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
85.217.166.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.112.0/24 maxlen: 24
93.123.115.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
94.154.160.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:34:b1:d5:2e:bf:66:c9:9b:8e:11:e2:74:a3:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 05:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513328f5058938be74b1785a94615d565733f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:30:60:38:fa:c9:ba:1d:b0:1d:92:35:9c:16:
8e:fe:cb:df:d3:de:95:45:59:df:00:19:cd:97:c4:
22:c5:8d:a3:51:e7:08:af:73:41:7e:16:11:1e:85:
28:c8:8e:16:7f:8c:8e:5f:4c:50:83:a3:15:40:75:
2e:46:88:9f:6b:ec:d6:f3:f7:43:0b:52:f2:4e:31:
3c:66:56:1e:30:c5:6f:3e:52:8a:66:64:fe:27:b9:
8c:a5:02:04:44:e2:44:8b:62:7b:89:4e:c9:71:ec:
56:84:12:38:04:de:44:74:9f:6c:8e:b2:3a:f9:ef:
9a:59:ad:84:01:48:9b:44:5b:ab:db:9d:f7:b4:5c:
9d:1c:1b:f7:21:fd:67:2d:d0:03:d2:65:90:d5:6d:
cd:a2:c1:78:64:e4:9b:c6:5d:35:ac:2f:49:56:f1:
db:29:3f:ec:a9:74:80:df:28:8a:c9:bb:34:4a:f8:
0d:67:53:45:9c:1c:46:aa:36:72:6d:41:45:80:7d:
e7:44:a5:c4:0b:f5:2e:31:62:b2:0c:34:81:60:6a:
c8:ce:a6:13:af:6d:8f:ca:f4:9f:10:f8:c5:15:89:
4c:c9:c1:a5:9e:35:ab:59:6f:96:ef:c9:10:b8:26:
8f:25:5a:83:58:1a:a7:ea:59:0a:9d:9a:42:da:5e:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:28:F5:05:89:38:BE:74:B1:78:5A:94:61:5D:56:57:33:F3:00
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UTMo9QWJOL50sXhalGFdVlcz8wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.128.235.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.217.130.0/23
85.217.166.0/24
87.120.87.0/24
87.120.108.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.120.196.0/24
87.121.114.0/24
87.121.221.0/24
91.92.16.0/24
91.92.21.0/24
92.249.50.0/24
93.123.24.0/24
93.123.109.0/24
93.123.112.0/24
93.123.115.0/24
94.125.102.0/23
94.154.160.0/24
94.156.113.0/24
94.156.188.0/24
147.78.101.0/24
178.215.239.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
31:40:ea:b6:d2:1f:77:cd:e8:77:e2:65:b0:2a:b9:5f:4f:12:
a7:b3:cd:60:62:32:66:15:b3:6f:ac:63:c0:4c:06:32:46:cc:
82:ae:67:1d:73:b3:1e:37:4f:00:6d:bc:88:0f:cb:d7:1b:3f:
b3:0b:e4:5a:5f:5a:21:0b:f6:36:07:10:c4:4b:1f:b0:47:1b:
ff:d4:77:84:cb:9a:9e:16:b8:44:73:c4:15:b9:3c:68:9e:2d:
09:98:cc:6b:00:65:31:c9:d2:94:a8:20:e5:81:b0:ad:89:23:
c7:e6:7a:58:f7:89:6a:8c:bd:6b:f6:5c:47:13:47:ec:fd:a0:
97:ba:57:9d:55:e9:1b:db:84:2e:66:10:00:df:20:28:b9:db:
cd:2d:94:b3:a7:59:bb:08:88:f3:92:ce:b8:64:a0:9c:7d:80:
3a:5d:bb:98:1c:fb:2f:1a:10:80:b2:41:f8:28:f6:6a:5e:09:
8b:0e:01:c5:51:99:29:1a:01:03:24:e9:20:52:80:48:e2:4d:
61:2a:44:11:f4:c8:a9:94:57:8c:be:c4:25:1d:a2:43:8a:6e:
44:e2:99:d0:ee:48:77:a7:31:7f:f6:29:7e:de:62:0d:b5:52:
c4:3b:3c:67:ee:ca:66:ac:f9:71:2f:fc:4a:b8:bf:67:c2:2d:
63:4f:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:37:03 2026 by rpki-client