Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntpz3h3MQMOFZteBYEXkkN1lW14.roa
File: ntpz3h3MQMOFZteBYEXkkN1lW14.roa (raw, json)
Hash identifier: M2XDP8giGGME1+98rvoc7q7QvqQ5iW2GkK49poYjpnE=
Subject key identifier: 9E:DA:73:DE:1D:CC:40:C3:85:66:D7:81:60:45:E4:90:DD:65:5B:5E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0B4AE7A0E5829DFEECBE90AF5F119D463
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntpz3h3MQMOFZteBYEXkkN1lW14.roa
Signing time: Fri 18 Sep 2026 13:22:08 +0000
ROA not before: Fri 18 Sep 2026 13:22:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:ae:7a:0e:58:29:df:ee:cb:e9:0a:f5:f1:19:d4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 13:22:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eda73de1dcc40c38566d7816045e490dd655b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:ed:58:39:c6:f3:fa:13:e8:54:dd:57:34:
f0:bd:0d:07:49:d7:28:20:79:cf:a5:43:2c:4d:85:
c3:43:29:d6:cd:46:e1:fa:07:39:e7:98:7e:90:5e:
e7:40:55:62:d1:0a:40:b5:09:08:2d:63:b8:28:be:
8c:9f:10:7f:0a:2a:05:f3:f6:12:3e:a4:e9:53:d6:
d1:42:02:3f:07:94:c2:4a:1e:a8:41:62:a2:2c:ea:
fc:96:f6:3a:05:af:0b:6e:94:6c:68:44:ec:5b:46:
31:36:51:ac:05:3c:34:8b:11:1f:14:b1:8f:4d:4a:
b8:f5:48:94:d2:ea:8f:50:fe:07:e9:86:9c:19:1b:
4d:16:a7:92:dd:c2:52:ef:fc:39:37:7d:c6:b9:9d:
fa:d8:fb:c9:8b:37:d6:4b:2b:43:76:aa:6a:20:97:
3e:e2:f0:3c:8e:b8:15:fc:ca:af:5a:33:27:0c:99:
1b:ef:61:06:25:77:99:74:76:d7:c8:b3:e7:d4:2d:
07:ca:a5:a4:e7:5c:3e:40:25:23:b8:9b:51:a8:cd:
ac:8d:1d:21:ed:7c:15:fd:66:38:2c:40:c0:19:a3:
36:57:18:aa:28:29:e9:c3:1b:d0:7e:51:cb:ad:94:
13:88:2f:da:3a:f9:f9:89:f4:2b:5e:01:76:b9:56:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:73:DE:1D:CC:40:C3:85:66:D7:81:60:45:E4:90:DD:65:5B:5E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntpz3h3MQMOFZteBYEXkkN1lW14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.209.133.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
79:16:81:c7:2a:0d:0b:99:02:d1:36:2c:3b:86:86:c4:a4:21:
86:34:f7:f7:a2:1c:13:55:06:9c:9b:eb:fc:bc:6d:70:38:7d:
2a:9a:89:43:1f:5c:ed:43:bd:38:25:a9:bc:3b:b1:f0:d7:7b:
8c:9c:f7:d7:53:4f:7b:fc:65:03:0e:69:68:bd:7e:2c:b3:90:
73:12:ea:59:98:3b:85:86:a2:59:e3:5c:5b:2c:d4:cb:bf:39:
86:ca:89:ae:91:69:01:a7:2c:a6:38:54:c4:d0:e7:75:72:84:
e1:68:84:93:c7:04:75:31:a5:2c:3d:df:1f:74:3f:ca:0c:15:
68:f6:4a:77:11:0e:7f:b0:ac:a0:c5:c5:1a:2c:c5:c6:63:e9:
fb:e4:2e:7a:dc:04:80:81:e9:06:45:43:c2:a1:a9:9a:b8:e0:
0d:5b:c5:43:86:64:0b:e1:04:37:05:56:09:a3:fb:8b:30:f6:
0a:d7:05:20:57:65:1a:f3:91:1d:77:52:60:cf:b0:0b:c5:83:
b5:3e:ea:49:9c:19:f1:55:14:34:e8:fc:18:57:d4:25:87:fe:
8e:c1:3f:58:68:ae:63:cb:c6:e3:e8:84:f4:c0:8d:64:60:35:
98:a1:dc:f0:58:91:17:2d:e6:14:93:85:c7:19:e9:e4:30:e1:
ce:e8:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:57 2026 by rpki-client