Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rydoxZ5LyzI7ihm_RtkeMxofOqM.roa
File: rydoxZ5LyzI7ihm_RtkeMxofOqM.roa (raw, json)
Hash identifier: Oogi5n2s1uDFlTZBShOb7vrGQQZq57p5PUuXjre2+NQ=
Subject key identifier: AF:27:68:C5:9E:4B:CB:32:3B:8A:19:BF:46:D9:1E:33:1A:1F:3A:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FDB8C419FF484B8FEAE1A4B7118F6E142
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rydoxZ5LyzI7ihm_RtkeMxofOqM.roa
Signing time: Fri 07 Aug 2026 09:27:09 +0000
ROA not before: Fri 07 Aug 2026 09:27:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:8c:41:9f:f4:84:b8:fe:ae:1a:4b:71:18:f6:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 09:27:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af2768c59e4bcb323b8a19bf46d91e331a1f3aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:87:44:85:04:f6:84:ce:3e:0f:02:18:49:
02:58:75:c6:70:ea:ea:61:5a:82:4c:de:cc:8c:01:
f6:01:12:cd:87:6d:58:7b:52:af:25:eb:6b:80:6f:
fc:02:d2:6f:d0:8a:23:9a:a9:c5:ff:cf:67:c5:bf:
ec:e2:db:fe:80:df:b1:e4:d9:a6:ca:0c:8a:6a:a2:
d0:10:e4:ca:de:d6:3b:2e:70:26:d7:c7:fa:4b:eb:
37:b6:b9:7b:b2:49:12:a5:34:dd:1c:16:f5:b3:f5:
86:3b:f5:db:b4:76:72:0f:56:c4:ac:cb:20:bd:7f:
98:f5:7d:86:d0:d3:eb:61:46:8c:ec:44:95:98:d2:
2b:3a:7d:08:ee:8b:85:68:dd:0f:f4:59:ea:4c:b2:
57:6c:08:28:a4:ce:10:eb:3d:70:2e:1d:85:18:cf:
cd:f9:c0:88:49:5f:b0:6a:8d:c2:fc:9c:da:9a:73:
73:5a:70:36:19:d6:2e:1c:56:07:39:6f:71:da:34:
60:d1:fc:2c:43:9b:1d:b6:e5:25:61:0b:d4:3d:61:
dc:26:c7:e1:5b:33:09:d5:9b:9f:35:78:dd:a8:39:
e7:bf:36:75:eb:97:ae:a9:25:97:07:98:be:b6:63:
b2:b4:78:65:39:4c:20:17:57:dc:32:b6:65:bf:ed:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:68:C5:9E:4B:CB:32:3B:8A:19:BF:46:D9:1E:33:1A:1F:3A:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rydoxZ5LyzI7ihm_RtkeMxofOqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2e:ed:9f:91:e9:7a:6a:3e:58:b5:2a:45:77:a4:6b:1d:83:
8b:6b:2f:91:3a:e4:8f:8a:fc:b7:de:f7:9e:c4:8c:ed:de:9b:
be:a7:fb:09:d1:54:82:88:89:98:52:bc:50:bb:90:62:68:79:
5f:6e:99:84:00:f6:7e:58:25:ba:e2:c4:ad:5a:49:9a:0f:f8:
7f:8c:fa:b1:51:43:4c:92:34:fc:65:0d:a6:80:48:b8:33:5e:
6a:e9:1c:60:99:25:cd:06:ea:7c:fe:81:b9:f4:e9:59:fb:1c:
5a:79:ec:08:10:aa:38:a5:a7:84:3a:06:99:de:1f:89:4e:10:
4e:ac:a6:93:c2:02:3b:30:ed:eb:2a:b1:1f:5a:f3:37:92:b0:
65:47:33:ef:3b:57:30:a4:22:04:23:36:1d:91:e4:8a:11:07:
13:8a:2e:be:c9:3a:b9:a3:93:b8:07:5f:ec:23:e6:0d:0c:50:
eb:de:74:99:88:32:4d:e2:9a:2c:61:16:c7:40:12:89:1d:6f:
aa:68:25:28:87:54:a9:87:c1:ff:ab:2b:6e:b4:d8:bf:28:e2:
3f:52:01:94:f8:a9:3c:25:52:1b:c7:4d:1c:6f:38:93:c1:8e:
0c:6c:0a:9c:e2:de:a9:3b:85:0f:2b:f8:43:ab:ec:f7:5c:e8:
e9:38:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 16:22:53 2026 by rpki-client