Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gM79P_KyJDMZfPmv7Pu4MaeA2a0.roa
File: gM79P_KyJDMZfPmv7Pu4MaeA2a0.roa (raw, json)
Hash identifier: RqzLuUmWHViLernWWURsGmsYZYz0PTQuPaipXnOzdyc=
Subject key identifier: 80:CE:FD:3F:F2:B2:24:33:19:7C:F9:AF:EC:FB:B8:31:A7:80:D9:AD
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019CBE7A87300BE3A4ED28B6E027DDA56F95
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gM79P_KyJDMZfPmv7Pu4MaeA2a0.roa
Signing time: Thu 05 Mar 2026 14:50:26 +0000
ROA not before: Thu 05 Mar 2026 14:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:7a:87:30:0b:e3:a4:ed:28:b6:e0:27:dd:a5:6f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 5 14:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80cefd3ff2b22433197cf9afecfbb831a780d9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:59:9c:67:b4:27:28:53:87:cc:05:e6:77:
05:dd:8a:c1:f8:6f:08:0a:f8:7b:f9:2c:e7:bf:6c:
2d:c6:a5:0c:7d:c3:65:b9:34:a6:c4:ba:89:81:0a:
39:30:38:ce:f5:df:b3:5e:19:d9:cb:32:86:51:7a:
3c:7d:55:e1:d7:e2:68:bb:94:4a:ae:2e:0c:f9:7b:
96:2c:72:8a:c3:a5:56:06:02:7d:d4:9f:a0:60:de:
69:07:54:02:d7:09:dd:71:63:b3:24:d2:cf:75:ac:
d8:57:d8:a8:1e:82:2c:67:ed:50:43:48:dc:81:1f:
f6:dd:a4:f9:bb:f9:f4:7e:1d:56:98:bf:2d:ec:cf:
4e:de:57:aa:08:e1:ed:e7:99:88:cb:ce:39:c9:e9:
a6:16:c5:38:f4:69:ed:a3:92:53:7d:c7:bb:83:cd:
49:cf:13:57:1b:69:e5:78:e3:ce:3b:77:e5:c4:50:
8f:2a:88:fb:4b:d0:bd:99:ba:fe:ca:ad:cb:2d:70:
b9:01:19:64:a7:3a:c9:50:bb:34:ae:e6:8a:4f:8a:
0a:56:38:8e:cf:b3:8b:c0:d8:ee:55:dc:f2:87:1c:
86:80:d3:d4:9c:30:ad:ea:79:92:63:9f:fa:8f:6a:
85:e8:87:e1:fc:c4:75:4c:29:62:7e:62:a4:e1:a5:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:FD:3F:F2:B2:24:33:19:7C:F9:AF:EC:FB:B8:31:A7:80:D9:AD
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gM79P_KyJDMZfPmv7Pu4MaeA2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.234.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0/24
91.92.42.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.207.0-93.152.208.255
93.152.210.0/23
93.152.214.0-93.152.218.255
93.152.221.0-93.152.224.255
93.152.226.0/23
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5a:74:04:f6:4f:59:55:83:35:4a:88:95:60:df:32:97:e8:
0a:74:a1:96:30:17:8a:46:df:b8:b2:b3:24:ab:9f:b8:41:85:
f7:4d:bb:12:0c:2c:e4:45:0a:d8:eb:14:e1:6c:02:05:65:5f:
fb:39:0f:a8:cb:1e:11:24:98:07:b3:57:e7:52:c9:2f:ac:99:
ba:9b:38:6b:76:62:98:d6:1f:be:88:f0:e5:f2:4f:7f:0c:ad:
46:0c:f4:7e:bb:1f:1b:e4:3b:76:76:d9:34:2b:af:5f:ad:d6:
fd:49:72:b4:08:87:74:ed:50:53:be:fe:d8:0d:1a:43:98:05:
39:43:69:2c:dd:91:ee:45:b8:57:5d:7f:8e:0b:21:81:68:89:
69:54:fa:30:db:18:c8:fd:ca:63:f6:23:0a:98:4d:69:10:94:
6c:56:fb:38:0f:d9:19:04:ba:e1:00:d5:ce:c9:60:06:b7:fa:
0d:56:14:00:36:d1:74:63:e1:09:eb:43:6d:5c:92:ee:ee:48:
cd:cd:f7:13:bf:94:8d:4f:13:04:23:4d:a8:55:7e:a4:15:62:
19:39:60:a5:49:65:1f:e6:3a:63:e6:77:6c:ed:88:66:2d:f6:
a5:05:69:aa:6b:63:92:32:dc:3d:9a:70:7b:cc:92:8e:5f:2d:
1d:c1:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 11:43:22 2026 by rpki-client