Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kI8Ml5sXghUb5THD7BR-h8pVuU0.roa
File: kI8Ml5sXghUb5THD7BR-h8pVuU0.roa (raw, json)
Hash identifier: sdLFsYlZOWtbbekdfbj2cvBxxlErPw24a2gldQpdTJg=
Subject key identifier: 90:8F:0C:97:9B:17:82:15:1B:E5:31:C3:EC:14:7E:87:CA:55:B9:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DCDB5F5DEBD514F5A36422A57B3629F22
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kI8Ml5sXghUb5THD7BR-h8pVuU0.roa
Signing time: Mon 27 Apr 2026 06:52:27 +0000
ROA not before: Mon 27 Apr 2026 06:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:b5:f5:de:bd:51:4f:5a:36:42:2a:57:b3:62:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 27 06:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=908f0c979b1782151be531c3ec147e87ca55b94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:be:58:a8:1b:35:25:a9:1f:51:3c:dc:02:
a6:37:81:5e:68:b1:41:8a:8f:13:ea:12:93:93:0b:
89:da:09:93:43:bc:12:b5:4f:c0:9c:8c:df:a5:e2:
95:bc:61:68:70:e3:0d:a6:36:a0:ba:9c:47:cc:0f:
76:1e:c4:87:e5:8a:6f:2d:f5:5f:92:84:b0:b5:e4:
d6:79:80:2f:a7:01:74:92:f9:8a:1e:64:28:35:69:
2d:8b:bc:19:12:16:e8:b2:6c:af:43:4a:ec:57:6d:
c8:3e:63:a1:91:79:41:75:0c:9f:b2:4d:8c:dc:2a:
49:d5:a8:75:1e:f1:d7:cf:33:b5:de:8a:ff:88:bc:
92:b6:d7:3f:4f:2e:35:a5:22:fc:c6:93:ce:67:4d:
06:59:bb:bf:be:52:a8:e5:08:fe:a5:7d:a3:1a:0c:
20:79:e7:0e:a6:0b:24:a6:80:35:7a:4c:23:4b:88:
34:fd:7b:f5:49:b6:f5:8a:ec:b1:99:6e:77:2e:ed:
29:14:69:aa:11:e9:8a:8e:fd:b6:31:6f:b5:19:7e:
bd:e5:83:d4:1d:03:36:ab:ed:ec:b3:3c:8f:9c:99:
93:82:1c:46:77:f5:a0:43:a8:c7:7c:2e:6d:c8:54:
68:96:43:b5:d5:eb:fa:9f:e3:99:8a:ba:cf:8b:04:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:0C:97:9B:17:82:15:1B:E5:31:C3:EC:14:7E:87:CA:55:B9:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kI8Ml5sXghUb5THD7BR-h8pVuU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.191.0/24
92.119.199.0/24
92.249.50.0/24
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
193.37.44.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:97:16:c1:12:88:30:d4:93:95:a8:e6:f1:6f:cc:6b:a7:e3:
1c:29:bd:c7:2e:c3:66:82:3d:38:c9:31:43:05:df:36:50:69:
8b:e4:8b:90:be:42:0c:63:5f:4d:ac:e5:c1:52:03:c1:04:14:
38:15:9d:36:94:71:54:58:a8:af:46:a3:22:6a:d4:9e:8b:5c:
1d:49:b7:52:a1:cb:de:65:a8:bb:e4:72:6e:d5:33:eb:c8:43:
f2:72:37:80:e9:46:14:f8:9c:77:af:74:fa:a0:c6:61:2e:07:
46:a4:4c:56:bf:9b:82:0c:c9:1a:ba:3d:f1:8a:13:bd:9e:c5:
1a:d2:36:2a:ef:9b:25:a4:c4:c1:fc:5e:66:2e:aa:d7:1d:a6:
0f:ae:a6:d3:ec:16:05:d7:2b:af:70:6d:88:09:41:33:1e:dd:
1b:3e:eb:ad:2d:a4:7d:ea:73:55:24:51:94:c6:7a:a7:87:15:
81:5d:2c:5a:10:3c:9d:a8:d4:b1:29:96:c7:d4:66:d3:3f:31:
39:69:2a:57:34:6c:7f:da:fc:b6:c2:b5:8e:00:4c:7e:43:18:
1b:c1:a9:84:c7:f5:dc:15:a4:93:22:f8:49:3e:4d:17:2d:dd:
45:19:8b:8e:61:fc:54:5c:a9:b8:91:19:be:df:e0:1a:9c:87:
67:51:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:44:31 2026 by rpki-client