Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vw7UUrU1IqIK_OR0pT9KQqp8_q0.roa
File: vw7UUrU1IqIK_OR0pT9KQqp8_q0.roa (raw, json)
Hash identifier: zCUDjAbA4571MQhoDtoFytJpak3Vvi3HZbaBlq3hz80=
Subject key identifier: BF:0E:D4:52:B5:35:22:A2:0A:FC:E4:74:A5:3F:4A:42:AA:7C:FE:AD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FF087632AB8FA3C341E1DD8AD698C7466
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vw7UUrU1IqIK_OR0pT9KQqp8_q0.roa
Signing time: Tue 11 Aug 2026 11:13:52 +0000
ROA not before: Tue 11 Aug 2026 11:13:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:87:63:2a:b8:fa:3c:34:1e:1d:d8:ad:69:8c:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 11 11:13:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf0ed452b53522a20afce474a53f4a42aa7cfead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:ce:ed:49:16:52:5b:73:63:ef:0a:b6:2d:
fc:e6:cc:60:c6:cc:7c:ae:2e:6d:ed:41:22:83:1a:
3d:6d:6a:44:44:4d:1c:51:85:11:cf:d4:a7:94:ff:
64:ac:87:e9:b2:38:f6:70:87:f9:45:47:c4:1c:f9:
1a:48:81:93:98:43:b1:f6:ea:43:c5:b0:2c:1e:fe:
be:62:52:bb:92:58:f2:25:cb:89:1f:d7:5b:6d:4f:
a3:23:bc:52:ef:d0:39:9a:4a:a5:62:2b:f1:07:94:
f0:96:c2:36:3e:20:ff:6e:b9:1c:06:47:ce:f9:a8:
f3:45:97:45:6f:0f:54:79:12:5f:79:c5:eb:6f:ac:
c8:a0:86:e9:d5:81:ff:bd:7f:34:de:76:7b:fa:56:
a5:ef:84:e8:3a:e0:4e:9c:21:a6:57:da:92:a2:6a:
0a:76:46:2f:de:83:2f:31:de:b9:0f:1e:62:90:7d:
1d:f8:ba:7e:f9:85:8d:70:2c:39:1a:97:a6:04:33:
aa:d0:8e:39:a4:30:db:b4:75:2d:b7:e8:6b:98:42:
bc:d4:a9:e4:6e:91:7d:9a:08:c8:fb:9c:34:f0:23:
58:ab:d4:e3:28:c5:ee:99:4b:b1:32:59:30:77:21:
8a:31:6e:5b:a7:79:23:02:4e:90:a8:93:bf:65:40:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:D4:52:B5:35:22:A2:0A:FC:E4:74:A5:3F:4A:42:AA:7C:FE:AD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vw7UUrU1IqIK_OR0pT9KQqp8_q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
85.31.47.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8e:56:b8:a4:de:d3:4a:1e:18:39:cf:79:08:9d:44:1d:e8:
cc:95:bc:1b:9f:6e:d1:57:fd:41:bc:de:66:36:18:d5:60:04:
e1:d0:ae:b2:2c:17:f4:c2:03:d2:fb:79:6e:5b:99:61:4a:8b:
21:dc:f7:ac:41:83:0a:e7:21:48:0f:ff:61:0b:7d:85:20:a6:
16:2d:3b:0f:d7:d1:3b:55:16:ad:80:f6:f3:8f:d4:4b:a7:92:
8b:94:33:2d:74:3d:88:72:cc:a7:71:8b:5c:d9:ba:3d:e2:17:
7b:25:c2:8a:1b:91:4d:7e:b9:15:31:9f:81:41:86:50:f4:e3:
14:8b:62:36:c4:d0:0f:41:91:95:c2:aa:d9:d3:2f:50:b6:28:
cc:37:75:07:e1:1e:b0:3e:79:92:1f:b7:99:de:1c:fb:f0:dc:
bf:f7:8c:c6:b9:f0:87:37:0b:c1:7b:76:3f:f1:41:51:d3:cd:
02:0b:d0:07:0c:9b:e0:bb:1e:46:3b:eb:c8:a8:78:cb:28:05:
74:ce:a4:2d:92:85:81:87:92:32:d9:bf:2d:6b:77:c4:a9:14:
f2:97:91:0a:1a:b8:ab:7e:79:47:a2:79:c0:89:2b:92:3a:e8:
bd:a5:c4:0e:ec:2e:8f:06:c0:81:b6:58:ac:42:09:9b:d6:70:
5d:ca:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:35:57 2026 by rpki-client