Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r7TqWSFQxGmw-HzcTQRedtjn44s.roa
File: r7TqWSFQxGmw-HzcTQRedtjn44s.roa (raw, json)
Hash identifier: QgMW5hhTuacXP51wmuUrxDymfWuLfebg9JlI9txv/ww=
Subject key identifier: AF:B4:EA:59:21:50:C4:69:B0:F8:7C:DC:4D:04:5E:76:D8:E7:E3:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019CB786C0D80106374E0BAA4EEEE09CF56F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r7TqWSFQxGmw-HzcTQRedtjn44s.roa
Signing time: Wed 04 Mar 2026 06:26:27 +0000
ROA not before: Wed 04 Mar 2026 06:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.165.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:86:c0:d8:01:06:37:4e:0b:aa:4e:ee:e0:9c:f5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 4 06:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afb4ea592150c469b0f87cdc4d045e76d8e7e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:85:94:11:ee:23:07:16:24:ef:3d:2c:73:
ac:62:15:75:b9:51:dc:07:57:f2:66:eb:b0:20:f4:
dd:68:c7:4c:20:a8:57:43:67:5f:7e:0b:0f:29:59:
13:b6:9f:68:62:aa:19:a3:93:a5:3d:98:f5:6b:c2:
24:bb:ca:08:b4:ed:85:72:6d:0b:88:c2:ab:ac:dc:
cc:ce:da:59:02:e2:20:4c:83:42:f9:e2:03:f4:05:
cb:01:1e:74:cf:59:52:f1:17:c2:82:e9:b3:12:85:
39:16:ec:a8:99:3d:31:a8:07:ff:ac:08:7d:f0:5d:
e4:43:45:30:3c:78:b7:f0:9c:85:f4:d5:4a:99:82:
74:ec:eb:08:42:78:d5:34:20:d7:70:da:ce:e4:08:
f5:00:e3:5d:c5:cf:34:4a:af:ac:90:f5:4e:18:5e:
0c:f1:da:45:27:20:f6:f7:b7:ae:6f:5a:e6:3c:62:
61:0e:a2:7a:25:0b:be:3f:aa:1c:de:4c:08:0c:43:
93:a5:3a:e4:d7:cd:15:eb:c7:b6:39:aa:8c:66:bc:
06:f5:88:eb:b4:5f:d8:b9:9d:09:7e:3c:3f:8f:60:
4b:61:1d:0e:2c:d5:5e:f6:4e:8f:76:8b:31:88:18:
14:b0:34:1a:2d:47:85:ea:71:f5:3b:92:4b:26:14:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B4:EA:59:21:50:C4:69:B0:F8:7C:DC:4D:04:5E:76:D8:E7:E3:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r7TqWSFQxGmw-HzcTQRedtjn44s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.121.60.0/23
87.121.165.0/24
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
147.78.100.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
193.47.61.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0d:eb:c4:c1:8c:c0:99:1f:3d:6e:02:aa:7b:b9:bb:e3:02:
94:af:23:5a:75:aa:96:b9:58:0e:51:82:63:9e:84:c6:c8:f0:
86:e7:ee:2a:8d:ef:8b:3c:7f:d7:33:e3:63:f8:18:62:a7:53:
2c:66:bb:d1:b8:5b:5d:85:9e:23:5f:54:b8:44:cb:bd:d0:42:
77:8d:83:63:9c:29:19:41:3c:2d:96:0d:da:29:b0:2e:d4:74:
e8:7e:76:d3:78:82:3d:29:fc:be:4b:3f:09:1f:45:2b:6c:90:
f8:4f:0c:2c:a7:d1:d9:12:e0:42:43:34:a3:63:a2:e5:8c:39:
da:1b:a4:31:c6:45:07:b1:4e:6c:89:88:27:33:44:55:e1:68:
4c:f5:a7:63:f1:33:3f:27:a1:0a:6b:fb:07:47:0b:7f:9d:16:
a6:6d:fd:af:ab:dd:c4:d1:b7:e6:8c:e6:99:89:c3:c9:84:34:
e7:b1:53:b1:43:ff:d0:7e:ef:8d:ea:25:e0:6f:ed:37:21:e7:
05:46:e0:91:8e:9c:5d:f7:d0:75:60:2d:15:c7:ec:4b:b3:20:
ad:1d:ba:9c:bf:b1:d9:bf:d2:14:8c:82:9e:9b:a6:7a:6a:ce:
d1:2f:0a:81:f8:a8:d3:1b:b9:5c:9f:b9:92:dd:64:73:fd:53:
39:7d:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:06:43 2026 by rpki-client