Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tC8UoA2k6LkAvyolmHlsAsD0Wdo.roa
File: tC8UoA2k6LkAvyolmHlsAsD0Wdo.roa (raw, json)
Hash identifier: g9M2DNgjtTsEGW+pGbswvz0eTv04I4btXSf7j7HvZr8=
Subject key identifier: B4:2F:14:A0:0D:A4:E8:B9:00:BF:2A:25:98:79:6C:02:C0:F4:59:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A04C03D0D0B289DB86040444607F0CD090
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tC8UoA2k6LkAvyolmHlsAsD0Wdo.roa
Signing time: Sat 29 Aug 2026 05:35:13 +0000
ROA not before: Sat 29 Aug 2026 05:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:03:d0:d0:b2:89:db:86:04:04:44:60:7f:0c:d0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 05:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b42f14a00da4e8b900bf2a2598796c02c0f459da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:a2:14:8d:c4:d3:91:95:52:f6:de:9f:05:
dd:78:75:a5:fb:95:1c:9c:de:cb:b9:e9:d2:9a:d6:
b3:f7:69:3e:38:72:41:78:bc:4d:4a:30:db:b4:81:
a2:b7:f2:96:8d:da:ee:76:27:bc:a7:0d:d6:55:65:
eb:c1:33:6b:41:f3:92:bd:01:b0:ac:0e:f1:7d:80:
4a:dd:7a:99:62:60:a7:25:04:d5:85:90:3b:7a:98:
c0:9f:cd:7f:9d:52:f5:95:b8:67:41:7e:2c:27:92:
74:13:85:30:ec:d7:18:02:15:0b:b6:c8:a4:36:e1:
a4:71:10:96:d2:a7:a6:44:27:88:ad:60:b3:2a:11:
c4:d3:9b:43:86:01:32:f4:44:e1:46:9e:7e:13:4a:
b2:62:23:2a:b3:06:3a:cf:c1:56:bb:fd:fc:80:0b:
38:75:91:b7:36:d7:21:aa:e3:04:c4:fb:ed:46:24:
1d:a5:1a:1a:b0:15:51:3a:91:d7:3e:9e:06:56:1b:
12:81:2c:cc:8f:e5:6e:e0:1a:f5:d8:59:9e:55:82:
d7:c6:12:3e:4a:78:a7:3d:10:6d:84:8d:3d:1f:b8:
a8:53:67:5b:b7:c2:63:c2:e6:17:18:1a:90:97:2b:
ec:89:04:3f:fd:ec:99:a0:fc:ae:fb:db:15:7d:6b:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:14:A0:0D:A4:E8:B9:00:BF:2A:25:98:79:6C:02:C0:F4:59:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tC8UoA2k6LkAvyolmHlsAsD0Wdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
60:68:a9:3a:e5:88:fe:ae:f1:ab:1d:c4:80:09:98:e4:f0:1e:
fd:c7:d4:a7:b0:7a:89:e7:55:61:c7:22:23:42:01:a4:bb:5c:
0b:2c:96:98:0a:d9:ef:de:a6:bb:b5:7b:14:f3:e3:6c:79:5e:
48:4a:93:12:00:2e:e7:c3:2c:58:69:a2:20:2f:90:8b:40:5f:
97:8b:ab:e6:52:fd:cf:0d:6e:cd:7f:9e:5e:79:b9:fd:04:9a:
e4:5a:ae:ae:20:8b:d8:ac:b0:69:be:c9:01:43:c6:34:de:8c:
24:36:54:a7:7c:a9:70:84:cc:0c:25:76:d4:53:3a:28:f2:cf:
da:17:97:cc:74:83:ee:e9:b5:66:94:d6:ab:d2:a7:3c:17:17:
4f:01:84:17:12:61:42:51:14:c6:64:4a:bc:4e:e0:bd:3e:88:
18:ba:9d:a8:7a:e2:39:9b:b4:c1:fa:a1:9c:05:71:91:7e:56:
8e:89:2f:d5:0f:df:14:97:0c:71:04:75:e8:49:a2:43:1e:98:
bb:c8:0f:4b:96:37:45:ad:8f:8e:47:76:bd:a4:d7:fc:56:ec:
e4:b4:93:c9:fe:44:60:3d:1f:0f:d7:ee:fe:27:44:74:00:b6:
7e:01:d3:25:a5:2e:91:af:5f:28:84:01:97:a3:11:c2:c4:47:
21:50:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 12:07:00 2026 by rpki-client