Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HtxGNTT3emxPG2rrFUZZA7dXB0.roa
File: _HtxGNTT3emxPG2rrFUZZA7dXB0.roa (raw, json)
Hash identifier: IWv/MnznoRvGmT/yHt1q7xM7glShx1Hlj0az0pEdAy8=
Subject key identifier: FC:7B:71:18:D4:D3:DD:E9:B1:3C:6D:AB:AC:55:19:64:0E:DD:5C:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DC08580BCBB19ADFFBC4AA0C823169CB1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HtxGNTT3emxPG2rrFUZZA7dXB0.roa
Signing time: Fri 24 Apr 2026 17:24:27 +0000
ROA not before: Fri 24 Apr 2026 17:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:85:80:bc:bb:19:ad:ff:bc:4a:a0:c8:23:16:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 17:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc7b7118d4d3dde9b13c6dabac5519640edd5c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:1f:c7:63:cb:62:f7:45:4e:05:4e:f1:16:
57:c2:f6:0e:f2:64:ec:1b:0d:6b:2a:44:a8:f6:92:
07:cc:98:8c:54:9b:c2:08:a3:e3:6c:70:cc:cc:9b:
d7:ea:3d:f3:66:96:92:55:3d:da:14:37:62:47:8c:
5f:85:ba:71:8e:7e:12:b2:e3:a7:a4:ec:55:ff:bf:
dd:86:7f:d6:f7:6f:22:c9:ab:d4:00:1f:c1:13:f4:
cb:11:e0:c7:f3:fd:a9:16:54:e1:8c:cf:aa:d0:b9:
66:c5:bc:89:49:ce:88:28:a5:a2:5a:5e:e3:18:83:
0c:5d:5a:7e:1f:b5:44:98:9e:eb:be:08:31:f0:6d:
a5:53:6f:76:53:6c:9c:fb:89:6d:24:56:71:12:2f:
88:05:98:10:a8:79:02:44:5e:20:4f:f9:b9:38:85:
6b:e2:a7:07:dd:16:7a:93:bd:91:7e:7a:81:4a:ba:
b3:08:67:7d:8b:e6:50:93:eb:cd:58:c8:48:ef:f7:
ea:19:87:5c:44:8a:af:fa:0e:c1:4e:d1:75:80:f2:
ce:75:87:69:27:e3:ea:49:e6:80:28:18:73:8a:51:
e7:43:4a:f7:c5:f2:50:0b:dc:4a:81:1c:b2:3e:a5:
dc:54:c2:f8:3a:87:ba:36:60:68:8e:ce:0e:d8:91:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7B:71:18:D4:D3:DD:E9:B1:3C:6D:AB:AC:55:19:64:0E:DD:5C:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HtxGNTT3emxPG2rrFUZZA7dXB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.191.0/24
92.119.199.0/24
92.249.50.0/24
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
193.37.44.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
15:38:34:71:cb:ad:9e:16:eb:cf:7b:a9:c8:44:70:ea:c5:d1:
63:87:f4:f7:33:45:17:d0:e1:69:59:da:0a:06:7a:33:7a:bb:
09:eb:be:01:8b:a5:f2:a3:eb:d1:1e:20:16:3d:e0:24:46:9c:
26:d5:02:42:e7:88:31:06:74:81:a7:ad:48:3a:52:9f:ae:2c:
1d:9f:2c:d2:77:88:1e:8a:ee:60:b3:23:93:2c:14:8c:73:cf:
69:c9:88:76:4f:63:2b:1c:95:9a:1b:c0:2f:2c:c3:18:ee:2e:
fb:31:d2:f5:1c:06:90:76:07:3e:a8:b1:8d:b8:51:1e:5a:4c:
26:86:86:e4:d1:ae:e5:3e:0f:be:90:2c:d8:ab:2e:af:3e:2e:
de:e4:63:fb:b2:f6:1e:d4:21:58:5b:00:af:fb:f0:00:59:71:
10:0d:7c:da:22:28:b4:4c:c2:af:bd:ed:9d:e4:16:e0:e8:1b:
41:fb:be:c8:ca:bd:34:e4:45:5a:76:76:b2:15:33:42:27:65:
2f:2c:02:68:bc:41:fd:11:6d:63:e1:eb:c3:1e:04:6a:a9:8f:
12:33:26:24:68:9c:3a:fb:53:54:ee:a5:8b:b6:0c:12:a0:89:
fd:3f:c6:05:9e:9d:46:65:d1:5f:4e:01:98:13:ef:ea:44:a7:
52:5b:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 23:56:04 2026 by rpki-client