Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i57bzvwx5YBrLccxnbFphZyLzHE.roa
File: i57bzvwx5YBrLccxnbFphZyLzHE.roa (raw, json)
Hash identifier: ubneaJ8eHkaL8SwCpxTeNdmU+3e1DA8oK3lPH5AhETI=
Subject key identifier: 8B:9E:DB:CE:FC:31:E5:80:6B:2D:C7:31:9D:B1:69:85:9C:8B:CC:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A032359AE224B8E11E956232C7CDA9DB41
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i57bzvwx5YBrLccxnbFphZyLzHE.roa
Signing time: Mon 24 Aug 2026 05:19:28 +0000
ROA not before: Mon 24 Aug 2026 05:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 81.161.229.0/24 maxlen: 24
87.120.158.0/24 maxlen: 24
87.120.159.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:35:9a:e2:24:b8:e1:1e:95:62:32:c7:cd:a9:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 05:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9edbcefc31e5806b2dc7319db169859c8bcc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:e1:3c:e6:ab:1b:0f:b5:f9:0f:e0:9b:3f:
98:1e:d5:54:97:5a:e5:19:2c:ae:f0:9a:9a:14:e0:
b3:26:ea:0b:ab:d9:dd:d7:c8:2c:75:a0:ca:af:2c:
46:09:56:69:1e:6b:cd:26:1a:89:ce:85:56:5b:e9:
38:3e:74:de:52:c0:58:39:f6:98:12:2d:9b:23:d3:
d8:54:25:a6:b0:d4:5b:38:b6:1b:e4:1c:06:24:d7:
59:b0:2d:06:44:21:75:1a:52:48:cb:39:70:3b:55:
e9:d0:69:2a:25:1a:dd:83:cc:93:f8:ad:1a:4b:6e:
5d:1d:6c:2d:44:32:28:c4:db:f6:79:69:19:ec:4e:
1b:01:37:bc:42:a7:ff:ab:9b:b4:5e:c9:1f:6c:b8:
9b:37:fe:7e:f0:f7:95:88:01:05:e8:c9:f7:45:f3:
a3:e0:95:5d:26:1c:ae:95:3a:a1:c8:c0:21:bf:9b:
93:c7:c0:27:a7:0d:09:5a:00:34:ca:5b:53:c6:03:
82:d6:38:95:62:8a:10:6d:2d:a4:82:4d:a0:82:4d:
96:be:b9:15:76:28:73:f2:eb:ba:35:c7:e3:c8:b2:
e1:f3:42:fe:70:4a:3b:b6:5e:74:43:fc:73:3b:2f:
4d:3a:80:81:a5:94:e7:73:45:de:7f:67:ff:7c:7a:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:DB:CE:FC:31:E5:80:6B:2D:C7:31:9D:B1:69:85:9C:8B:CC:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i57bzvwx5YBrLccxnbFphZyLzHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
87.120.158.0/23
87.121.115.0/24
87.121.146.0/23
87.121.161.0/24
93.123.81.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7b:32:80:46:bf:ef:8f:a0:46:03:a0:fd:2c:a9:8f:58:cb:
b3:e8:f6:2b:c8:28:b2:9a:6b:a7:cd:d6:6a:c3:37:fa:2d:2a:
f0:8c:97:93:84:fe:6d:b7:49:e7:86:8a:fb:03:8d:7b:70:76:
c3:37:f2:46:dd:4c:2b:59:68:a2:25:05:d7:05:5f:95:2c:69:
29:f0:69:3f:18:37:c6:56:49:2f:12:fa:ca:27:e8:ac:8f:a8:
e6:48:1b:d7:fe:6b:c3:0c:a5:52:47:db:0d:27:6f:63:c4:33:
9b:0e:18:1d:64:30:66:4e:1c:43:f8:61:99:0a:f9:3e:b4:ef:
5e:7d:02:4b:d0:d4:6b:19:4f:41:d1:35:95:67:10:fd:89:e1:
bb:37:66:d6:a6:eb:40:23:70:b5:9f:cd:6b:5f:49:73:19:29:
22:b3:bc:8d:bc:97:4c:70:97:e3:10:43:6c:69:9c:73:f9:a5:
d7:a1:9a:32:8f:80:cd:5f:60:e9:f4:22:c4:28:46:d9:04:11:
e9:84:9c:d0:fd:34:0a:bc:12:e2:d4:ea:78:e2:35:e6:9e:38:
90:e4:2c:1f:f6:e3:61:66:8c:79:c1:59:b3:72:e1:f7:82:44:
c5:75:fd:f1:f3:46:12:44:63:11:39:5a:b2:61:fc:21:ca:7a:
5f:74:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:22:32 2026 by rpki-client