Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/csfPgB1cieJEgsP8zdNg-jR0zPU.roa
File: csfPgB1cieJEgsP8zdNg-jR0zPU.roa (raw, json)
Hash identifier: NwXWlOOVHIFuU8N726VN8HgrfmQqOO/EhuPLqRZP3Bs=
Subject key identifier: 72:C7:CF:80:1D:5C:89:E2:44:82:C3:FC:CD:D3:60:FA:34:74:CC:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0250DD06BB38A8755BE597FAC0D5AF4A7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/csfPgB1cieJEgsP8zdNg-jR0zPU.roa
Signing time: Fri 21 Aug 2026 16:00:57 +0000
ROA not before: Fri 21 Aug 2026 16:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.162.0/23 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:0d:d0:6b:b3:8a:87:55:be:59:7f:ac:0d:5a:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 21 16:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72c7cf801d5c89e24482c3fccdd360fa3474ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:1d:5a:c7:f6:e3:21:14:18:00:5f:41:16:
9d:43:4d:60:e5:14:84:bc:27:73:16:d7:2b:96:92:
29:fb:95:96:cc:3b:5f:0a:a2:0f:7e:62:b2:7f:1e:
2d:eb:db:4c:79:85:1b:e8:ed:eb:76:a0:ee:c4:5d:
ab:06:01:ae:45:80:b2:c8:af:63:de:e2:ac:17:95:
60:9d:69:d1:f5:fa:a3:cf:c4:82:1e:99:57:6a:f4:
20:f4:ab:b4:e7:d7:22:e3:d8:15:1a:e3:da:5b:ec:
3d:74:37:d4:db:b5:7c:ad:3c:27:70:3e:e1:e3:f0:
03:f1:66:7b:19:b0:81:d8:8f:7b:a3:6a:31:6e:7e:
ff:22:50:6a:f9:7e:15:b3:99:cc:79:2d:68:c3:ea:
4f:76:49:ff:b5:82:07:f9:dd:eb:0e:15:34:ab:e6:
9a:74:78:96:77:1d:e9:42:64:ae:f2:5b:88:c7:b2:
49:d9:0e:c1:13:9a:c6:0a:e7:dc:46:3f:03:55:00:
e6:8f:e1:8e:94:1a:f1:db:ae:28:57:fc:e6:44:c0:
f3:a3:1c:a3:62:0d:a6:60:2d:08:9d:ba:82:32:4d:
38:23:63:f5:76:12:6d:5b:63:bc:33:37:ff:2c:52:
58:dd:fc:98:e1:ad:65:9c:ac:ea:b7:b8:01:23:a2:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:CF:80:1D:5C:89:E2:44:82:C3:FC:CD:D3:60:FA:34:74:CC:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/csfPgB1cieJEgsP8zdNg-jR0zPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.96.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.98.0/24
87.121.114.0/24
87.121.163.0/24
87.121.221.0/24
91.92.26.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.162.0/23
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f8:20:7b:47:43:60:3c:80:fa:70:59:12:a2:93:c6:47:5b:
31:d1:5c:e6:c9:cf:a4:68:b9:75:67:67:c0:18:6d:17:7f:fa:
f4:e8:bd:68:23:23:7b:d7:ce:bf:79:59:0e:b8:0c:18:a8:c2:
ac:8c:43:40:79:e2:fd:5f:73:6b:1a:32:a3:ae:f9:c7:a9:b1:
f5:59:63:33:83:b6:30:9b:bc:06:dc:bf:1c:28:23:76:7c:46:
af:7f:db:bf:de:97:f8:93:a9:88:25:c9:12:c4:66:81:0b:cf:
f8:52:d6:18:7b:af:81:79:3e:cc:c1:08:12:60:20:36:ad:e1:
b2:91:64:92:d7:4c:f3:71:82:9c:d2:7d:cc:89:20:77:3b:27:
27:61:3a:7e:bf:ce:a3:1c:32:d2:fb:59:80:8c:76:e7:8b:99:
69:ee:93:f1:10:26:d3:56:9e:57:47:62:6a:8c:b7:49:05:fe:
99:12:72:79:e5:d7:00:3d:27:67:44:0c:f0:19:94:d6:aa:dc:
03:7c:7e:6d:14:e8:3d:8e:c8:ee:23:20:9c:6f:e1:44:d2:64:
36:17:f4:1b:75:1f:23:dc:40:73:8e:e8:f4:23:e2:f3:8e:68:
34:8d:be:74:94:be:8d:20:f4:98:87:a5:1d:8c:76:03:a5:0e:
06:08:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 20:00:36 2026 by rpki-client