Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ISJpVtr55T2A7VWoCJxaKOlLFN0.roa
File: ISJpVtr55T2A7VWoCJxaKOlLFN0.roa (raw, json)
Hash identifier: pw5o84QtaoIFraoDVVg6NBafiJtYMsPB0LQ9ZbkuLQA=
Subject key identifier: 21:22:69:56:DA:F9:E5:3D:80:ED:55:A8:08:9C:5A:28:E9:4B:14:DD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E3FE8BA5A7111D1C50B91CF2F0FD20725
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ISJpVtr55T2A7VWoCJxaKOlLFN0.roa
Signing time: Tue 19 May 2026 11:04:37 +0000
ROA not before: Tue 19 May 2026 11:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
82.108.58.0/23 maxlen: 23
82.108.74.0/23 maxlen: 23
82.108.108.0/23 maxlen: 23
82.108.112.0/23 maxlen: 23
82.108.158.0/23 maxlen: 23
82.108.160.0/23 maxlen: 23
87.82.214.0/23 maxlen: 23
92.244.174.0/23 maxlen: 24
92.244.176.0/23 maxlen: 24
92.244.180.0/23 maxlen: 24
92.244.182.0/23 maxlen: 24
92.244.184.0/23 maxlen: 24
92.244.190.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.95.0/24 maxlen: 24
109.204.101.0/24 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 23
195.40.26.0/23 maxlen: 24
195.40.28.0/23 maxlen: 23
195.40.30.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.100.0/23 maxlen: 24
195.40.114.0/23 maxlen: 24
195.40.116.0/23 maxlen: 23
195.40.118.0/23 maxlen: 24
195.40.162.0/23 maxlen: 23
195.40.166.0/23 maxlen: 24
195.40.180.0/24 maxlen: 24
195.40.188.0/23 maxlen: 23
195.172.98.0/23 maxlen: 23
195.172.102.0/23 maxlen: 24
195.172.110.0/23 maxlen: 24
195.172.112.0/23 maxlen: 24
195.172.124.0/24 maxlen: 24
195.172.134.0/23 maxlen: 23
195.172.204.0/23 maxlen: 24
195.172.212.0/23 maxlen: 23
195.172.214.0/23 maxlen: 24
195.172.216.0/23 maxlen: 24
195.172.218.0/23 maxlen: 24
195.172.220.0/23 maxlen: 24
195.172.222.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.134.65.0/24 maxlen: 24
212.134.72.0/23 maxlen: 23
212.134.78.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 23
212.135.5.0/24 maxlen: 24
212.135.10.0/23 maxlen: 24
212.135.174.0/24 maxlen: 24
212.135.178.0/24 maxlen: 24
212.135.190.0/23 maxlen: 24
212.135.236.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e8:ba:5a:71:11:d1:c5:0b:91:cf:2f:0f:d2:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 19 11:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21226956daf9e53d80ed55a8089c5a28e94b14dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:ce:77:44:e5:f7:7f:66:a6:bf:fb:71:e6:
a6:f9:29:a0:fc:e3:89:e9:e5:78:9c:7b:e9:9b:1e:
c1:81:51:f7:ac:25:92:f8:be:60:4d:ca:7a:88:0c:
1c:7e:7a:61:eb:f6:bb:55:a3:aa:3a:8c:97:85:a2:
63:cb:0c:5c:77:64:16:61:c1:58:fb:30:fc:54:4a:
0b:f9:3e:d9:ef:7e:8c:66:8e:a7:9d:c4:a1:83:39:
70:40:12:4a:18:8a:92:5e:ad:7c:36:8f:91:c6:f7:
ba:98:58:a0:df:47:b6:7a:1c:ea:18:47:9c:f0:46:
1d:6e:b8:46:f9:ff:14:ae:7d:70:8b:45:cb:6a:86:
ed:77:26:cd:57:eb:f7:64:04:85:0d:1b:06:fd:71:
23:a0:6c:94:d9:82:35:3e:0f:0a:dd:81:33:d3:4f:
83:45:b2:cc:45:2f:4e:a5:d2:01:22:2c:7f:f0:d0:
dc:8c:b9:4a:d1:15:76:a8:a7:e7:e7:09:6b:82:ef:
55:99:0b:39:8d:b1:61:f9:30:9c:97:28:3e:45:41:
fb:13:a1:9b:a6:f6:a6:e7:28:a4:46:db:07:1a:0f:
d0:93:a9:9e:a1:3c:3d:2f:ad:f0:99:11:03:c8:59:
9e:99:6d:c1:8e:4f:0c:80:87:af:19:32:30:21:7f:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:69:56:DA:F9:E5:3D:80:ED:55:A8:08:9C:5A:28:E9:4B:14:DD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ISJpVtr55T2A7VWoCJxaKOlLFN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
82.108.58.0/23
82.108.74.0/23
82.108.108.0/23
82.108.112.0/23
82.108.158.0-82.108.161.255
87.82.214.0/23
92.244.174.0-92.244.177.255
92.244.180.0-92.244.185.255
92.244.190.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.95.0/24
109.204.101.0/24
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
195.40.18.0/23
195.40.26.0-195.40.31.255
195.40.86.0/24
195.40.100.0/23
195.40.114.0-195.40.119.255
195.40.162.0/23
195.40.166.0/23
195.40.180.0/24
195.40.188.0/23
195.172.98.0/23
195.172.102.0/23
195.172.110.0-195.172.113.255
195.172.124.0/24
195.172.134.0/23
195.172.204.0/23
195.172.212.0-195.172.223.255
212.134.11.0/24
212.134.65.0/24
212.134.72.0/23
212.134.78.0/24
212.135.0.0/24
212.135.2.0/23
212.135.5.0/24
212.135.10.0/23
212.135.174.0/24
212.135.178.0/24
212.135.190.0/23
212.135.236.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
42:d2:89:61:bc:8b:18:af:fa:94:18:92:3a:c1:3d:81:dd:92:
6f:ad:b6:f2:b6:37:4c:03:da:d6:54:b7:d4:35:c9:95:34:13:
41:47:ca:a9:5f:19:ce:6c:94:3e:ca:32:86:d9:56:53:28:5b:
a2:3a:e6:72:7d:e4:a5:ab:09:80:61:06:48:23:ca:fc:d4:ad:
d7:2d:99:19:51:53:d1:5a:e8:7f:d1:03:2f:6f:84:3f:ca:38:
3a:73:60:8f:d7:55:2f:ec:17:d8:77:7b:50:2c:77:57:51:fd:
c7:f4:1e:62:8a:25:f1:29:d7:5f:43:a5:5d:a2:16:71:6a:44:
dd:b3:71:29:07:0f:e5:db:e9:10:d8:d0:56:8f:69:d6:55:c4:
f7:b7:06:3d:19:1d:06:0d:53:3a:8f:18:19:18:0f:9a:36:ce:
2f:b2:12:20:e7:64:c8:f4:c9:e9:49:2f:09:9a:90:6e:c4:44:
e9:33:d1:13:82:12:7b:00:84:e0:7d:24:27:82:91:2f:e7:3f:
28:ea:e0:fa:d5:c7:41:e0:04:bf:26:54:7a:23:28:e6:c3:26:
66:c2:46:92:40:7a:23:19:a9:a1:fe:d7:82:74:bd:5a:c7:0b:
9b:85:f4:88:98:62:3a:e5:c0:76:5e:79:90:da:f9:cf:f3:b2:
1c:72:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:40 2026 by rpki-client