Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_obFyXK5ioPZFSyLsWVES5tw6aM.roa
File: _obFyXK5ioPZFSyLsWVES5tw6aM.roa (raw, json)
Hash identifier: 8rdRJXlOeC0uzQnGUGOAxt47eBRp4+mvd/vkbB2PSsc=
Subject key identifier: FE:86:C5:C9:72:B9:8A:83:D9:15:2C:8B:B1:65:44:4B:9B:70:E9:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D775AA06B5D657D3BEBA41C6C948E4FC3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_obFyXK5ioPZFSyLsWVES5tw6aM.roa
Signing time: Fri 10 Apr 2026 12:25:21 +0000
ROA not before: Fri 10 Apr 2026 12:25:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:5a:a0:6b:5d:65:7d:3b:eb:a4:1c:6c:94:8e:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 10 12:25:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe86c5c972b98a83d9152c8bb165444b9b70e9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:02:fc:ed:cd:e4:9f:e4:c8:96:ff:9d:28:
c4:1e:89:73:54:bc:2c:10:a3:33:e5:87:3b:1e:5a:
3c:6e:3a:80:a7:f7:b8:72:56:e3:72:ef:72:fb:ff:
12:c2:39:44:b1:29:9b:27:d9:88:94:76:ac:42:64:
b8:49:17:bb:13:89:34:b2:3a:1a:79:25:e6:c1:db:
c6:9f:ec:42:47:b4:9d:ff:36:7f:d1:a2:1f:6e:af:
20:91:bb:50:93:fb:1a:93:b1:62:01:dd:5f:5b:37:
ab:7a:52:3d:81:d4:1c:9b:1e:8a:42:fe:3c:eb:b9:
96:05:0b:68:50:91:4c:a2:03:3b:fd:68:03:de:bc:
df:09:cd:09:3f:2e:5d:a9:f5:e0:e4:23:fb:16:d3:
48:ba:4b:9b:bc:58:c5:e6:88:2d:76:b5:67:8a:57:
f3:13:41:5c:68:2d:4f:ba:e4:e6:5e:e7:fc:78:da:
2b:22:f2:da:4c:da:07:86:69:a5:15:3f:9b:6a:cb:
3c:6c:ce:2f:a3:44:2a:c7:5e:37:61:cd:46:fd:f1:
c2:c5:39:28:82:04:a1:68:76:23:8b:7d:81:ef:1d:
4f:91:2c:7e:a0:f8:e3:46:18:3e:1b:4e:c0:8a:c4:
20:93:be:26:c9:cd:de:9a:23:0f:9b:38:6d:a5:b0:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:C5:C9:72:B9:8A:83:D9:15:2C:8B:B1:65:44:4B:9B:70:E9:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_obFyXK5ioPZFSyLsWVES5tw6aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.191.0/24
92.119.199.0/24
92.249.50.0/24
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
10:57:a5:df:14:fe:f5:eb:f9:e8:45:02:75:14:9d:c9:39:4e:
83:28:5b:0e:98:d8:52:dd:72:82:33:8d:56:a7:08:2d:1e:2b:
3a:7f:10:76:5c:6d:e6:06:59:dc:a5:c7:a9:24:74:37:36:d8:
95:d7:2e:4a:d6:d2:3b:f1:bc:2c:25:9b:dd:38:a7:81:6f:a0:
e5:e4:9c:d3:d8:69:cd:94:dd:ae:89:4c:8f:79:e9:29:b4:b4:
f8:9e:1e:8c:bb:5a:16:c1:e7:a5:5b:ce:a1:f1:71:3c:51:ef:
78:b7:7c:dd:bf:c7:d5:e1:4c:89:8e:e3:6f:32:7e:8c:1b:cb:
79:ab:89:db:9a:69:13:85:3a:3c:ed:51:b6:ec:b8:d4:72:5b:
e0:4e:5c:a1:8f:82:35:f1:2e:38:2d:b4:54:0c:19:68:bb:c9:
07:bd:60:29:57:a2:e3:d7:41:8e:ab:50:57:2c:ca:51:fc:be:
e6:89:f7:e6:45:85:80:5e:ea:6d:9b:ab:2b:10:63:9d:ea:44:
fd:e6:48:9c:fd:f8:f8:d7:e2:cf:e2:25:a7:f6:43:5f:15:f8:
3d:a4:68:15:b1:de:40:01:56:0a:09:16:f1:57:da:c6:c5:a0:
53:09:5c:c6:5e:42:45:ca:b2:c1:31:cd:8d:4b:c8:38:38:45:
2f:5a:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:53:36 2026 by rpki-client