Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_le96dqmavk9OXNnjYdHULuL978.roa
File: _le96dqmavk9OXNnjYdHULuL978.roa (raw, json)
Hash identifier: JFu2JYVtVek22kt3aWQK740Hd9ZBctXscufRT7+g1+8=
Subject key identifier: FE:57:BD:E9:DA:A6:6A:F9:3D:39:73:67:8D:87:47:50:BB:8B:F7:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0A455E70914FA73746838297B80794306
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_le96dqmavk9OXNnjYdHULuL978.roa
Signing time: Tue 15 Sep 2026 09:11:28 +0000
ROA not before: Tue 15 Sep 2026 09:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 09:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:55:e7:09:14:fa:73:74:68:38:29:7b:80:79:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 09:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe57bde9daa66af93d3973678d874750bb8bf7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:14:e0:01:19:5e:cf:23:23:02:7b:9b:96:
3d:25:da:57:fe:00:98:4f:9d:2b:a7:23:50:ef:46:
52:bf:d6:c1:66:da:00:15:1e:a3:a2:e9:54:2f:eb:
96:25:92:91:8e:70:6f:38:b1:71:0b:de:f1:45:df:
cb:52:23:f6:54:09:0d:3d:9c:96:9f:2b:99:32:ed:
26:27:db:31:1d:c8:3f:ef:06:d5:a4:30:31:aa:47:
12:9f:3c:74:9f:4a:2f:c5:59:22:16:9a:6d:a2:e5:
88:71:83:af:61:5b:31:fc:65:72:82:33:d9:3c:6c:
d5:6f:97:6d:e7:3d:d0:6e:ef:cf:f3:74:5b:37:c6:
b5:26:85:80:0b:f9:4f:24:54:9f:0e:33:27:df:11:
ed:0b:3d:ed:e7:c5:90:68:ad:3f:15:e0:97:c9:73:
9e:53:6c:b1:2f:be:c4:3b:41:8d:3c:8d:0f:d2:84:
a2:c5:8e:95:84:40:bc:ae:3b:72:df:2e:24:d5:e8:
12:cb:06:03:1c:06:59:8e:59:0f:c5:69:6a:72:38:
67:02:27:2d:30:24:4d:03:e0:93:0b:2c:5d:2a:7d:
5c:ee:40:57:6b:8e:0d:14:a8:22:6f:71:7a:6d:ad:
6b:d2:6b:73:dc:a9:9d:fb:f0:f4:08:f5:a8:f2:46:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:BD:E9:DA:A6:6A:F9:3D:39:73:67:8D:87:47:50:BB:8B:F7:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_le96dqmavk9OXNnjYdHULuL978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.209.133.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.218.139.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b7:60:05:a8:00:88:b3:8d:fd:8b:c8:2a:90:7b:5e:4f:c5:
f8:7e:b9:5f:da:93:42:93:0b:76:3d:f6:d7:e1:44:56:e2:c8:
ce:a4:72:17:cc:72:bf:a6:23:d2:50:d3:5b:b9:60:3c:9b:84:
69:bc:7c:fe:b7:52:db:14:c1:4b:ec:8e:d3:b1:7d:92:c8:c4:
dd:22:6f:9b:fa:3e:29:61:ff:00:95:d2:e7:3d:26:30:40:a4:
e1:95:6c:ed:45:1e:35:e9:10:3c:27:4c:a7:94:33:a9:af:07:
11:60:6b:5c:bf:85:ae:22:81:20:28:8c:6d:d5:4f:88:b7:68:
70:c4:05:80:d8:d7:4a:ef:0b:1f:95:e2:cd:04:ac:b9:29:d8:
86:f8:37:0b:ce:c2:d0:36:4b:94:c0:54:48:e6:10:e7:59:9a:
60:27:d8:50:2e:2e:92:76:d7:da:aa:9d:e7:70:f4:69:7a:f3:
1f:0f:b2:70:df:e8:aa:6d:6b:28:5d:8f:67:ff:50:4b:f4:6e:
76:90:0f:78:64:dd:e1:57:d6:43:7f:6f:2b:be:2d:49:a7:da:
78:a0:a3:f1:a3:bf:35:6c:81:d9:7f:55:48:8d:9e:8f:0f:e2:
9a:ef:2f:fc:61:75:af:27:c6:b4:18:bf:cb:6d:06:02:4b:ac:
c0:05:db:1d
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAaCkVecJFPpzdGg4KXuAeUMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwOTE1MDkxMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTU3YmRlOWRhYTY2YWY5M2QzOTczNjc4ZDg3NDc1MGJiOGJmN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7kU4AEZXs8jIwJ7m5Y9JdpX/gCY
T50rpyNQ70ZSv9bBZtoAFR6joulUL+uWJZKRjnBvOLFxC97xRd/LUiP2VAkNPZyW
nyuZMu0mJ9sxHcg/7wbVpDAxqkcSnzx0n0ovxVkiFpptouWIcYOvYVsx/GVygjPZ
PGzVb5dt5z3Qbu/P83RbN8a1JoWAC/lPJFSfDjMn3xHtCz3t58WQaK0/FeCXyXOe
U2yxL77EO0GNPI0P0oSixY6VhEC8rjty3y4k1egSywYDHAZZjlkPxWlqcjhnAict
MCRNA+CTCyxdKn1c7kBXa44NFKgib3F6ba1r0mtz3Kmd+/D0CPWo8kY4tQIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFP5Xvenapmr5PTlzZ42HR1C7i/e/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvX2xlOTZkcW1hdms5T1hObmpZZEhVTHVMOTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBAAF
/UMDBAAfDeYDBAAli4ADBAAtQuQDBAAtQucDBAAtWfcDBAAtW8IDBAAtgVUDBAAt
jZ4DBABPbjIDBABVHy8DBABV0YUDBAFV2YIDBABXeFcDBABXeH4DBABXeKYDBABX
eMADBABXeU8DBABXeXIDBABXed0DBAJbyMADBABc+TADBABc+TIDBABde20DBABe
mqMDBABenA4DBABenLwDBACTTmUDBAC52osDBAC53qADBAC59t0DBAC5/LEDBADC
MPsDBADCN7oDBADCqa8wDQYJKoZIhvcNAQELBQADggEBAA+3YAWoAIizjf2LyCqQ
e15Pxfh+uV/ak0KTC3Y99tfhRFbiyM6kchfMcr+mI9JQ01u5YDybhGm8fP63UtsU
wUvsjtOxfZLIxN0ib5v6Pilh/wCV0uc9JjBApOGVbO1FHjXpEDwnTKeUM6mvBxFg
a1y/ha4igSAojG3VT4i3aHDEBYDY10rvCx+V4s0ErLkp2Ib4NwvOwtA2S5TAVEjm
EOdZmmAn2FAuLpJ219qqnedw9Gl68x8PsnDf6Kptayhdj2f/UEv0bnaQD3hk3eFX
1kN/byu+LUmn2nigo/GjvzVsgdl/VUiNno8P4prvL/xhda8nxrQYv8ttBgJLrMAF
2x0=
-----END CERTIFICATE-----
Generated at Tue Sep 15 15:07:25 2026 by rpki-client