Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ryU78GgiFiUQnSJRz1JHC14tK4s.roa
File: ryU78GgiFiUQnSJRz1JHC14tK4s.roa (raw, json)
Hash identifier: T0Y0ehTH8IVwBigJNMjEGcYLqje148lKdh83zu/3U4Y=
Subject key identifier: AF:25:3B:F0:68:22:16:25:10:9D:22:51:CF:52:47:0B:5E:2D:2B:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019ECF6AF990D77558C4FDD025B4962C743F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ryU78GgiFiUQnSJRz1JHC14tK4s.roa
Signing time: Tue 16 Jun 2026 07:52:34 +0000
ROA not before: Tue 16 Jun 2026 07:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:6a:f9:90:d7:75:58:c4:fd:d0:25:b4:96:2c:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 16 07:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af253bf068221625109d2251cf52470b5e2d2b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:11:e4:c2:dd:ee:27:0a:3c:73:35:95:27:
03:b5:99:12:fa:34:31:22:51:aa:86:42:83:83:9e:
f2:5f:db:92:52:1d:32:06:c1:9d:53:db:78:58:94:
99:c7:d9:13:5d:36:e8:4f:f1:a5:38:80:35:e2:a8:
6a:42:83:73:07:6d:2f:13:58:87:90:b1:ec:4b:9b:
ec:21:c1:39:6f:dc:74:1b:1d:d8:48:a0:41:e1:fb:
a2:96:6c:cd:bf:34:02:3c:a6:24:e5:76:c6:47:a9:
0f:45:cd:84:3f:06:d2:7b:44:d7:4e:f7:5d:8f:50:
2c:05:89:ae:cb:5a:70:26:b7:4e:a0:f6:58:c6:a3:
41:96:d6:49:ed:f2:6e:87:a3:09:bc:b6:04:a0:93:
48:d2:38:5e:b4:a8:bc:fe:ea:44:61:b0:ca:7d:84:
2e:6a:bf:68:d5:f5:5e:25:ba:d7:c0:b3:b5:64:3f:
ac:da:ec:7e:18:40:e4:ad:b0:2f:a1:73:15:b6:19:
7c:56:67:99:63:38:fd:09:28:86:f9:d8:3b:0a:a0:
7d:ef:26:0c:c3:7b:b5:a2:28:7d:39:24:f5:d7:47:
d3:53:72:b5:15:22:3f:18:2d:2d:ca:8d:64:91:f1:
bb:bf:92:6b:21:9b:5b:84:3d:07:e5:0f:d6:41:32:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:3B:F0:68:22:16:25:10:9D:22:51:CF:52:47:0B:5E:2D:2B:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ryU78GgiFiUQnSJRz1JHC14tK4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.121.221.0/24
91.92.21.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:26:0f:36:f0:78:1a:32:71:12:1c:b0:e2:85:21:47:d4:f8:
6c:3c:22:cc:98:5d:87:09:e3:d3:b9:9a:c5:59:1b:ff:b1:48:
30:94:ec:e9:e1:93:4c:91:5d:a2:39:b7:5b:78:f3:24:aa:37:
aa:12:14:f1:3f:fd:8c:40:f2:08:b4:0f:a1:80:fd:2f:fc:dc:
15:af:b5:86:bc:06:dd:d6:40:15:cc:f4:36:bb:71:5b:c3:d1:
a3:0e:d9:67:1a:c9:e6:52:70:13:25:02:4b:14:41:d3:d1:3b:
2d:b8:3f:6a:58:fb:b8:1c:50:2a:95:fc:84:bf:86:01:93:de:
f5:5b:ef:8a:99:c0:12:8b:5d:a6:93:a8:bd:8a:0f:cc:4c:28:
50:9d:7c:bf:ce:1a:2d:88:29:13:f3:ae:a9:e4:82:f3:5d:17:
56:d5:f7:bc:c3:3c:d2:d6:78:9a:65:b3:20:58:b1:86:ca:3f:
ab:5d:6f:35:4a:0e:7e:69:d3:bf:e4:e5:78:6a:1b:b8:ef:f2:
32:26:e9:8e:04:1b:0a:4e:ae:9e:5e:25:5a:a6:fb:c7:6f:fd:
20:62:1d:68:d2:f4:43:49:21:ab:c1:44:65:03:a5:ed:0e:3e:
4d:36:7f:df:0b:15:88:63:c4:f5:06:f3:42:6e:a4:f0:01:71:
30:0c:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 12:00:08 2026 by rpki-client