Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hyFUSThd891ZHYsG8up74hB8Zto.roa
File: hyFUSThd891ZHYsG8up74hB8Zto.roa (raw, json)
Hash identifier: rMCoEX8aIpG2mXaOt377Jym8R269a6gXFgk9gAgx7Gs=
Subject key identifier: 87:21:54:49:38:5D:F3:DD:59:1D:8B:06:F2:EA:7B:E2:10:7C:66:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F9302B37983390A5C10A75EC40E682D31
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hyFUSThd891ZHYsG8up74hB8Zto.roa
Signing time: Fri 24 Jul 2026 07:24:15 +0000
ROA not before: Fri 24 Jul 2026 07:24:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
141.98.6.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:02:b3:79:83:39:0a:5c:10:a7:5e:c4:0e:68:2d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 07:24:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87215449385df3dd591d8b06f2ea7be2107c66da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:ac:96:af:ed:ee:b0:92:fa:52:68:96:69:
d8:9c:ad:80:6f:3a:84:a0:80:ee:9c:2e:36:6d:47:
ca:4f:8a:f0:5f:73:91:a8:eb:9a:5d:0b:f9:f5:23:
83:1e:f0:db:8b:9f:ba:19:59:46:71:69:62:86:47:
29:ee:7b:67:81:9d:f9:ea:59:77:ca:35:e1:16:2e:
ea:24:ad:1d:a3:f6:c0:f6:60:f1:1e:1d:46:c9:5c:
16:65:da:27:e3:01:e0:1a:71:bf:90:05:92:e2:2f:
da:5f:b7:97:0b:84:c7:f5:44:2b:ee:d6:e1:e0:b6:
47:10:be:49:ec:f2:a4:07:f1:ec:a8:65:0d:3b:22:
62:de:17:32:74:f6:eb:ca:59:d8:be:a3:5e:fb:17:
92:f2:3d:05:0a:92:86:d9:fd:52:55:4e:28:43:97:
ec:6a:d6:c1:51:c6:43:37:af:67:c9:31:5d:ab:5d:
82:0b:7e:12:dd:bf:71:84:69:a2:a3:9f:b8:5a:4d:
14:c8:16:21:66:ba:7d:0b:fb:b9:e3:ef:56:d0:42:
f0:66:94:b0:13:41:62:6d:50:cf:aa:7f:ad:c5:d4:
75:6b:e4:dd:ba:80:d5:9f:6b:ad:30:92:2c:a2:5f:
ab:05:35:cb:a6:2b:2f:43:fb:27:57:83:4b:dc:22:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:54:49:38:5D:F3:DD:59:1D:8B:06:F2:EA:7B:E2:10:7C:66:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hyFUSThd891ZHYsG8up74hB8Zto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
83.219.97.0-83.219.98.255
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
141.98.6.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b9:dd:5b:39:d6:de:99:d4:c3:64:ee:46:fd:b7:61:78:98:
5f:40:0c:cc:b0:e2:3e:81:0b:8f:ee:3b:2d:56:b3:f4:7b:85:
56:2f:6a:4b:96:ef:55:82:84:65:cb:f6:7a:96:00:a1:59:f4:
cc:ef:0c:05:68:b2:34:43:12:31:6d:44:c4:1c:15:e9:eb:16:
19:a1:d1:48:4b:c7:ca:6e:56:f4:4e:b9:0a:b1:ff:8a:73:3c:
d4:45:5a:9f:56:ac:d0:b1:3a:a4:8a:62:76:b7:5a:2d:62:37:
b8:21:f3:98:95:3b:3a:bf:c5:b3:70:69:f1:cc:be:19:22:1f:
8c:bc:80:50:89:d8:70:41:de:98:2a:97:fe:96:20:38:55:5b:
1f:39:8f:ec:81:73:be:31:29:64:73:77:e3:28:24:7e:12:80:
d4:f4:09:98:e2:5a:0a:fa:22:ee:29:e1:2b:e8:39:c0:1f:6a:
b8:c6:fa:78:6a:1b:13:84:65:77:ea:73:9a:71:b0:df:8e:5c:
e6:2a:6e:df:41:fa:e2:25:d4:c8:2f:36:b1:62:c7:42:05:d4:
a5:76:49:7f:08:9d:e3:39:11:83:58:ab:28:e7:ab:66:7f:5f:
dc:62:f2:4f:05:9f:79:c2:e2:a3:69:90:96:01:ba:f3:3a:ad:
43:4d:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:44 2026 by rpki-client