Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eSxuxcngrqxyhJdFU6voidnXtfw.roa
File: eSxuxcngrqxyhJdFU6voidnXtfw.roa (raw, json)
Hash identifier: 51ZTyIGjUNJOhk5/qtDDQ101ypWLtwGsrXkVZ/z6ag4=
Subject key identifier: 79:2C:6E:C5:C9:E0:AE:AC:72:84:97:45:53:AB:E8:89:D9:D7:B5:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A05B5C56DB2070A3741A30E2B517543EB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eSxuxcngrqxyhJdFU6voidnXtfw.roa
Signing time: Tue 01 Sep 2026 05:06:13 +0000
ROA not before: Tue 01 Sep 2026 05:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.68.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 05:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:5c:56:db:20:70:a3:74:1a:30:e2:b5:17:54:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 05:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792c6ec5c9e0aeac7284974553abe889d9d7b5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:11:96:84:6a:f5:4e:82:d3:cc:1a:90:20:
80:1a:29:c5:e8:49:d7:6e:b2:b1:10:77:0a:39:62:
8f:91:14:b6:55:a9:7d:ad:63:3d:58:e6:ed:b0:03:
55:91:5c:ff:4f:41:6d:b5:76:75:49:73:04:43:f3:
21:7c:6c:8e:f0:55:1e:53:a2:31:f2:f9:8b:2b:aa:
a4:7e:68:22:c4:46:ad:36:27:da:dc:90:30:53:b4:
d1:7c:47:1e:76:96:ad:1b:a1:44:9b:9b:b9:6f:ac:
bf:0a:ac:b8:01:5b:0d:1e:8d:c8:8b:fc:56:d8:0c:
e9:6f:fb:ba:6c:14:e2:c0:39:50:9c:b1:c2:a4:4c:
d9:b7:ad:26:34:a2:87:2f:b8:69:9d:fa:ba:25:52:
93:57:75:de:7e:05:45:55:15:dd:cb:7f:cf:e0:45:
c9:ec:7e:db:44:5e:1d:e6:20:fc:ed:e3:96:44:16:
5d:06:eb:a2:5d:72:82:c8:50:11:84:d6:57:9b:6d:
e6:e8:13:c5:8c:3a:6b:db:5f:11:4b:cd:c8:35:3f:
cd:e6:40:33:3f:88:91:51:13:51:7a:1b:8c:ad:d8:
f2:1a:69:01:97:b8:9a:eb:09:5f:b5:a7:93:1e:80:
ef:db:b2:f4:6f:9a:de:71:9d:75:16:bf:d5:ff:31:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:6E:C5:C9:E0:AE:AC:72:84:97:45:53:AB:E8:89:D9:D7:B5:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eSxuxcngrqxyhJdFU6voidnXtfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.217.130.0/23
87.120.68.0/24
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ce:98:cc:76:20:db:c2:69:85:f6:ab:18:bd:f2:c7:b4:ad:
86:7a:f8:9f:57:9d:4f:3a:5b:eb:11:fa:e1:5c:1e:ca:c2:c2:
e9:7b:79:1d:83:54:56:9d:3c:dc:a2:fe:a1:88:e5:e1:fb:c3:
b1:60:62:63:29:20:d6:9d:58:0f:b0:a4:54:d5:49:01:3a:4a:
90:d8:43:66:ae:5f:fd:49:09:88:1a:96:5d:c5:e6:7c:5e:49:
8b:cf:e8:ab:f3:72:79:13:ad:2e:92:49:cc:23:1d:df:54:62:
3e:a5:4f:98:12:e8:a5:59:c0:c4:b1:18:eb:17:70:de:b0:db:
2c:6b:2a:41:30:90:35:df:3e:1b:cb:3e:3e:66:c9:de:37:da:
ab:3d:e1:85:b4:04:00:49:70:be:c6:5e:7c:c8:51:c5:24:11:
fd:b0:0e:7d:1f:4c:a1:f1:6f:8e:f4:b6:f8:cd:59:c6:69:03:
76:61:ee:a6:7e:2d:91:3d:3a:05:ba:68:cc:63:c3:95:db:f0:
7d:a2:83:e6:f1:b3:77:0e:02:04:04:9a:e4:f8:0b:ce:24:50:
ea:1c:01:02:db:5e:4a:70:34:4c:b0:5d:2c:b9:39:7b:0b:fd:
7d:4f:4b:fd:f6:a9:43:f8:d4:3d:b5:41:a3:3f:fb:2f:ea:16:
d3:52:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 14:51:48 2026 by rpki-client