Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_1LnXAQWIrJiozQvmaIIi34Mghk.roa
File: _1LnXAQWIrJiozQvmaIIi34Mghk.roa (raw, json)
Hash identifier: H8DTu+um3tjqoFoR5t/D+JAxg4QCKYTbKCZBKyyvfeM=
Subject key identifier: FF:52:E7:5C:04:16:22:B2:62:A3:34:2F:99:A2:08:8B:7E:0C:82:19
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0334758D366187513469E3D3BF9F8EB8B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_1LnXAQWIrJiozQvmaIIi34Mghk.roa
Signing time: Mon 24 Aug 2026 10:18:28 +0000
ROA not before: Mon 24 Aug 2026 10:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.162.0/23 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:47:58:d3:66:18:75:13:46:9e:3d:3b:f9:f8:eb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 10:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff52e75c041622b262a3342f99a2088b7e0c8219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:67:ea:d0:ef:d7:dc:f7:fb:f3:21:bb:fb:
36:84:b0:ab:11:d5:2d:93:b7:d0:3c:a2:de:c8:22:
33:fa:3d:05:16:18:08:f3:50:d4:cf:aa:e4:cc:9a:
53:a9:5a:a6:81:e2:9a:ab:c4:af:35:3e:dc:d3:3b:
8e:40:e2:a5:7f:83:ed:e7:1e:75:0a:10:52:1e:06:
ed:af:47:db:9b:ea:da:d6:af:ec:65:9e:51:47:5f:
85:e3:d5:55:35:d7:ae:5f:43:20:31:8b:4a:25:44:
7e:b3:20:64:64:ae:0e:fc:cf:47:9d:31:8a:95:1c:
0b:55:27:5b:77:24:dd:ba:e8:8c:b2:af:37:22:c7:
56:92:49:72:f3:c0:6a:8e:eb:d4:e0:d5:75:66:df:
fa:c1:f2:29:94:b9:56:b1:8c:bb:3a:a0:43:8d:34:
23:cd:77:f1:6d:1b:0b:c1:03:16:3f:28:16:42:39:
2e:e5:eb:14:bc:d9:81:b7:46:08:d9:2d:49:83:3c:
9c:a2:a1:45:95:6c:88:e2:99:0c:1a:b7:de:6d:b3:
f9:8e:66:98:a3:c1:0b:1d:b4:47:0a:dd:c4:e9:b8:
1a:90:07:11:8b:28:40:1b:0b:fa:0d:26:cb:0f:4e:
43:ae:5e:e6:52:38:c5:1e:1d:35:d4:4e:d6:e8:a5:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:E7:5C:04:16:22:B2:62:A3:34:2F:99:A2:08:8B:7E:0C:82:19
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_1LnXAQWIrJiozQvmaIIi34Mghk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.219.96.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.163.0/24
87.121.221.0/24
91.92.26.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.162.0/23
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e6:e0:8f:fa:6e:94:c4:a6:5a:c7:3c:40:d6:9d:4e:82:eb:
ff:ee:83:8e:3d:05:2b:fd:da:c2:ba:52:60:4d:e3:b4:85:d2:
3b:fb:24:c1:5b:c0:df:ee:1b:d4:15:2c:92:bc:cf:74:4f:d9:
a4:97:e3:a2:7c:50:64:a9:65:d1:a8:b4:4b:fa:c3:be:71:3c:
a3:e3:61:6e:09:c7:6f:04:a2:39:f9:45:9b:9b:68:3b:c2:38:
b0:05:58:bf:ce:ce:ff:9f:db:ec:dc:be:ad:d2:e9:d1:c3:d5:
4c:d8:c0:86:d8:34:05:2c:ed:6d:e1:b3:45:57:18:ad:ba:70:
b1:f1:d8:4e:c8:36:ae:8c:4c:e2:d1:49:b4:8d:f6:9f:cb:c4:
ce:7a:d9:c8:4d:39:3d:62:8b:b1:39:cb:b2:e6:0d:26:7e:7c:
0e:cd:e8:c1:9a:97:f2:16:77:76:e7:6f:73:4a:b9:29:5a:68:
29:82:de:4d:5d:98:e4:75:de:38:52:d4:16:58:d5:2b:21:24:
e6:4b:ca:ac:42:35:03:fb:43:b9:8e:34:06:0b:21:d9:9a:df:
a4:5a:f8:db:db:79:86:a2:a5:f6:f7:dc:13:6b:1d:0c:fd:0d:
d5:1b:29:88:e6:11:47:ba:0f:6e:8f:f1:fc:a8:37:94:4b:d9:
d5:bf:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:16 2026 by rpki-client