Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lpV2UEkunet3sVHaSyQ4lTKCZCY.roa
File: lpV2UEkunet3sVHaSyQ4lTKCZCY.roa (raw, json)
Hash identifier: zogieIpP1UsQLG3ko0Ed4PFml/ZBgdsV/qXChDQ+QUA=
Subject key identifier: 96:95:76:50:49:2E:9D:EB:77:B1:51:DA:4B:24:38:95:32:82:64:26
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0D32950E89372753BE6B3A73DA4B57A4B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lpV2UEkunet3sVHaSyQ4lTKCZCY.roa
Signing time: Thu 24 Sep 2026 11:24:55 +0000
ROA not before: Thu 24 Sep 2026 11:24:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
94.154.160.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:29:50:e8:93:72:75:3b:e6:b3:a7:3d:a4:b5:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 24 11:24:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96957650492e9deb77b151da4b24389532826426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:f6:bd:74:24:41:47:60:c0:99:ad:f7:8f:
c6:29:b4:4c:dc:45:9e:6f:af:33:21:02:e8:3c:e3:
a6:0a:ba:d6:54:39:b7:36:55:8d:d0:98:eb:bb:81:
62:67:7f:0b:a5:48:78:ba:91:8a:76:ce:99:e9:d1:
2d:ce:01:96:67:06:99:b6:99:85:74:3b:63:f3:10:
56:5f:36:c8:49:b1:09:2c:9b:98:bb:3e:0f:b5:a9:
78:6d:d2:f4:fe:9c:53:7c:ec:70:17:f7:eb:89:5d:
4d:2a:90:11:82:ee:a2:02:e0:43:11:01:83:5d:5f:
ee:9c:94:08:6f:0b:3e:e5:4d:cd:fd:66:16:df:12:
0b:e3:67:1f:3f:6b:fb:bf:e5:9d:18:54:25:e3:21:
c2:56:e5:d9:6b:86:bb:4d:76:96:83:dd:48:03:0b:
b2:84:29:09:c8:50:6d:79:25:c4:6d:2e:df:c3:15:
85:3a:f3:57:7e:bc:6c:d5:ad:9f:97:c8:d3:18:f7:
df:c2:21:4a:de:fd:81:fa:df:f5:46:80:ca:ca:1c:
48:a0:80:a1:2d:f9:6f:8c:5a:d9:d6:b8:3b:2e:91:
ef:98:b2:9a:c9:87:05:55:19:d8:5c:55:0c:fe:09:
3e:ff:db:42:d4:e0:e9:16:86:55:49:0d:0e:50:2a:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:95:76:50:49:2E:9D:EB:77:B1:51:DA:4B:24:38:95:32:82:64:26
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lpV2UEkunet3sVHaSyQ4lTKCZCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.128.235.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.209.133.0/24
85.217.130.0/23
87.120.87.0/24
87.120.108.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.120.196.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.92.21.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.125.102.0/23
94.154.160.0/24
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
178.215.239.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e1:79:83:c5:f2:79:e5:53:fa:18:93:35:ac:37:9a:85:da:
02:39:8b:20:86:fe:56:b2:6c:2c:33:08:d9:4e:0c:65:96:30:
5d:43:d7:cb:20:c9:43:c6:09:90:38:f8:16:0f:af:70:cc:f2:
85:ee:a0:dc:00:80:15:2d:c0:98:df:24:d5:09:65:7f:13:8e:
42:6d:05:44:93:87:10:22:13:9f:19:1d:45:27:22:a6:46:48:
fe:48:12:cb:47:05:a8:bf:96:4b:89:9e:b9:f1:05:bf:8a:3f:
81:f3:b1:fa:45:95:cc:46:87:4a:69:63:b8:04:8c:e7:d2:6c:
2e:ac:dd:95:4e:40:93:e9:ce:85:08:3f:b3:1f:31:eb:a9:f6:
e8:45:cc:25:5a:f0:51:1a:b9:cf:d4:9d:da:85:35:5b:5d:ec:
8a:1c:84:5b:28:0b:8c:bf:92:3d:e8:53:df:56:0e:79:fe:14:
36:1d:fe:02:c9:b0:c2:44:95:bf:ce:18:12:4b:d6:5e:51:2a:
7a:41:05:6a:b5:5c:dc:c8:bf:b5:4f:10:e7:47:0e:aa:eb:fc:
5b:17:fd:01:1d:7c:c4:8c:c3:c2:dc:2f:24:64:ec:21:53:9c:
c5:ef:2d:cc:36:15:c4:bf:51:30:bc:ff:40:2a:00:ca:9f:bf:
fd:72:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:30:56 2026 by rpki-client