Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1_TfKdEbyh0omy6djnyJdvYrEqc.roa
File: 1_TfKdEbyh0omy6djnyJdvYrEqc.roa (raw, json)
Hash identifier: EO8vxhqwUI30VFIImFKNsM60MhZca7K8cHIToGyX7Ks=
Subject key identifier: D7:F4:DF:29:D1:1B:CA:1D:28:9B:2E:9D:8E:7C:89:76:F6:2B:12:A7
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019F5F9FEAF3321FF00EBDC2AB64C6B6EA2C
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1_TfKdEbyh0omy6djnyJdvYrEqc.roa
Signing time: Tue 14 Jul 2026 07:55:43 +0000
ROA not before: Tue 14 Jul 2026 07:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:9f:ea:f3:32:1f:f0:0e:bd:c2:ab:64:c6:b6:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 14 07:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f4df29d11bca1d289b2e9d8e7c8976f62b12a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:82:5c:87:cb:1b:c9:87:c5:43:16:e9:ff:
82:c4:5c:c7:7d:93:02:1b:4e:1d:f9:d6:69:71:71:
14:c8:6e:fd:b4:f5:15:4b:34:46:9a:c5:03:29:49:
1a:5a:34:e8:93:a5:a4:14:00:d0:11:4f:29:16:bf:
4b:3a:ee:84:5c:cb:ec:61:6e:b0:55:e4:79:24:0d:
05:61:1e:0c:f3:5e:e4:8d:b5:98:a1:ba:bf:06:c5:
bd:bf:85:01:18:ab:85:ca:7b:29:0b:41:39:60:97:
f5:60:be:b0:dd:80:e0:49:09:a9:55:37:4b:81:52:
93:e3:2d:f8:d8:7e:7b:2b:72:8f:51:6d:59:21:18:
0e:dc:6c:00:cd:b7:94:85:74:2b:bd:a0:9b:f4:20:
20:0d:bc:c9:87:fe:6b:d9:cb:b6:b3:6d:1c:53:17:
f7:8b:19:c4:03:89:e8:61:e5:28:91:bf:96:50:24:
9e:0b:f4:f2:ec:59:9b:c7:63:0f:1e:7f:41:0c:a7:
24:e2:e3:51:08:81:74:65:58:ec:05:16:20:92:a7:
ba:77:d5:65:29:c9:3e:77:3d:25:8e:ae:d8:f3:91:
e6:aa:49:d9:97:b0:ee:c2:0b:bf:be:ad:2b:d0:77:
19:1b:d9:bd:43:39:9f:cc:be:22:f5:0e:3a:d3:76:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:DF:29:D1:1B:CA:1D:28:9B:2E:9D:8E:7C:89:76:F6:2B:12:A7
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1_TfKdEbyh0omy6djnyJdvYrEqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.159.255
91.92.34.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.218.255
93.152.222.0/23
93.152.226.0/23
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:81:bd:d3:cb:40:c1:de:06:a6:84:2b:c2:a7:e3:d4:04:c4:
31:4b:6b:c4:cd:ca:07:dc:91:c7:e9:93:0c:51:e5:c3:c2:12:
29:ab:b3:4c:74:b9:3f:25:a1:96:66:e4:07:7a:9b:96:5b:3a:
5c:09:06:bd:4a:c9:34:ce:ae:b6:c2:99:15:51:6b:3b:0a:6b:
a9:4f:be:53:65:16:df:e2:b2:62:1f:f5:82:8e:8b:08:68:34:
fd:c0:20:e6:7a:95:a5:ae:30:d8:11:09:ee:e7:a2:b3:0c:e1:
07:bf:2f:e1:58:0c:e3:28:7f:ab:b8:9c:ee:f3:c7:5c:cf:a5:
ec:90:97:a7:06:81:fb:5b:d0:88:e4:0a:5c:ea:40:5f:0b:15:
75:2c:2d:2c:ec:8d:56:6b:8c:7b:a1:f2:29:ae:3e:fb:76:60:
08:a9:49:0a:47:67:23:0f:51:b8:2b:73:54:91:04:f0:ba:46:
43:1e:b3:64:20:79:db:3e:d7:60:3f:cc:99:38:ac:7a:ab:74:
eb:a2:a8:37:a3:4b:75:5c:1a:1d:3c:41:4b:9d:ee:c6:af:2f:
7b:87:8d:5c:4a:24:34:37:ac:50:3b:8d:4f:ed:26:42:f5:2d:
42:41:be:a5:78:7e:01:bd:d9:17:f5:4d:3e:b6:3c:5e:09:6a:
29:94:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:04 2026 by rpki-client