Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uMVxQpNgrauDRAM0r0dh6pfxbg0.roa
File: uMVxQpNgrauDRAM0r0dh6pfxbg0.roa (raw, json)
Hash identifier: 6rV7/lSlPtB3pDUfTqpTeB2TbkhV2tkfLv13sxKFiPg=
Subject key identifier: B8:C5:71:42:93:60:AD:AB:83:44:03:34:AF:47:61:EA:97:F1:6E:0D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A04774405ACFCC755C75BCC85179488B06
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uMVxQpNgrauDRAM0r0dh6pfxbg0.roa
Signing time: Fri 28 Aug 2026 08:19:55 +0000
ROA not before: Fri 28 Aug 2026 08:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.162.0/23 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:74:40:5a:cf:cc:75:5c:75:bc:c8:51:79:48:8b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 28 08:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8c571429360adab83440334af4761ea97f16e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:c6:a3:44:88:f1:1e:04:cc:91:73:a3:40:
52:50:84:8e:4f:de:bf:ef:82:cf:62:db:1c:60:81:
ce:6f:5f:f1:75:20:98:89:aa:ff:da:84:81:fe:cb:
ed:db:37:c0:68:b1:04:05:89:22:b3:59:83:ed:96:
38:77:c7:2e:e5:f6:75:d4:0a:c4:2e:52:81:45:ce:
d1:a8:b1:a9:46:90:33:3d:f1:ae:8a:42:03:9c:6c:
c2:79:3d:df:02:dc:23:5e:ff:34:77:7b:1d:7a:8d:
f5:21:71:29:10:c8:0c:4a:17:8b:44:db:91:09:eb:
11:6c:b3:8a:e2:f4:3a:1b:86:e3:0c:46:19:97:eb:
39:8c:ea:29:c3:31:52:95:85:b4:0c:cc:75:fc:d0:
a5:0a:a7:d5:d8:bb:80:f3:b7:87:68:11:a7:07:bc:
ea:19:47:f1:e3:b9:fa:fc:dd:08:33:d8:4f:05:10:
57:46:f2:9d:53:b9:9c:73:db:92:58:6c:62:95:bd:
44:bf:22:e7:ed:31:15:66:21:f4:8f:e9:51:ec:7e:
0b:f3:b3:b2:21:75:30:c9:13:a6:a5:bf:2b:f4:f3:
45:86:8c:cf:7b:04:2b:28:42:55:e2:91:08:79:ab:
b0:0d:3e:6b:f9:66:b4:87:6a:d8:c1:68:ef:3b:af:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C5:71:42:93:60:AD:AB:83:44:03:34:AF:47:61:EA:97:F1:6E:0D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uMVxQpNgrauDRAM0r0dh6pfxbg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
83.219.96.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.163.0/24
87.121.221.0/24
91.92.26.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.162.0/23
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
47:49:35:83:d9:8c:b5:38:10:5d:6c:fa:14:24:97:0b:94:3f:
8e:d1:53:ef:b4:d7:ca:d8:74:31:15:a5:4a:45:b7:0f:a1:96:
db:82:14:ab:3c:80:18:90:f2:f4:2c:94:84:c0:11:38:03:e4:
10:92:80:7f:be:ff:af:13:4f:d3:51:39:7c:9e:89:ab:4b:e1:
28:27:51:d7:98:3b:e4:7c:c8:61:41:fe:9a:9b:4d:6b:58:70:
72:08:25:e2:e1:ab:84:50:b9:d4:c6:86:b6:c9:7c:43:4c:76:
75:8a:25:a1:03:0d:56:d3:23:2a:14:39:1b:ad:e3:54:e7:d8:
71:f5:9a:de:36:29:de:38:06:3e:51:53:a6:78:d9:bd:f5:3e:
a5:e2:42:e3:2e:b2:96:d4:ca:be:69:59:7a:9f:e1:90:bd:48:
ef:b5:8e:1d:05:ca:2b:44:72:b2:3f:3a:0d:28:8f:e4:17:4b:
8e:2a:57:0f:c4:7c:89:3d:9b:52:c4:8f:01:ea:4d:70:2a:eb:
81:1a:04:bb:2e:11:4e:ac:af:5a:a7:57:bd:5c:e4:0c:d1:12:
7a:6d:6c:69:69:0c:5e:15:92:2e:93:e2:f4:62:55:e3:c4:5a:
e7:e0:91:56:ef:75:e8:ea:09:6f:d6:5e:31:8e:19:26:b0:85:
47:95:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 10:32:13 2026 by rpki-client