Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LfSFhUr7GAGOd_FHDHSGVTiIpo0.roa
File: LfSFhUr7GAGOd_FHDHSGVTiIpo0.roa (raw, json)
Hash identifier: 3iZmbDWaK3ZsB9zOVyT1PHVKHGo90KfT1p7KeyPVH6c=
Subject key identifier: 2D:F4:85:85:4A:FB:18:01:8E:77:F1:47:0C:74:86:55:38:88:A6:8D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FAC9C0A2A7BE1C1C96C41CCC6D2494808
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LfSFhUr7GAGOd_FHDHSGVTiIpo0.roa
Signing time: Wed 29 Jul 2026 06:42:15 +0000
ROA not before: Wed 29 Jul 2026 06:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:9c:0a:2a:7b:e1:c1:c9:6c:41:cc:c6:d2:49:48:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 06:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2df485854afb18018e77f1470c7486553888a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:5d:f8:86:f1:d8:47:56:a7:2f:31:04:1d:
4d:06:83:d9:1d:1a:09:06:d2:e7:52:73:cb:55:e4:
c4:03:81:af:ca:55:9a:33:f9:05:37:2e:95:e2:c6:
cb:06:81:8b:b1:2e:cc:ed:1b:f1:4b:2a:50:01:ad:
08:e7:74:e3:27:6c:64:c4:20:87:37:60:33:a7:3f:
9a:90:6d:9e:b8:86:5e:c5:6b:c0:2f:07:ca:fc:72:
da:6a:b0:05:a0:d8:ba:ef:c8:8e:84:86:7a:1c:d6:
14:7d:9a:24:7e:04:13:af:b9:e2:71:b0:0c:c2:8c:
7f:bd:46:00:4e:31:cd:f9:c2:40:dc:c9:8a:2d:e4:
9c:4b:43:86:11:09:9f:17:51:0b:d8:b2:d7:ac:e6:
e5:3f:26:96:e1:c3:37:ed:0a:39:91:04:e6:ea:d6:
27:cd:35:55:ec:d2:46:0e:ea:76:e3:20:42:bd:c4:
82:72:f0:09:50:b0:39:f0:d6:e6:d9:b0:8f:5e:f8:
e5:db:77:d7:94:33:f0:44:76:a6:e2:46:0a:f5:8b:
54:2d:02:6c:9b:f2:56:d7:6e:9a:56:df:8b:55:0f:
da:3d:e0:bb:c4:57:66:b4:85:12:2b:dd:65:ac:1b:
13:0f:d6:2d:dc:7f:e2:a2:3d:7b:c0:be:a1:61:ba:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:85:85:4A:FB:18:01:8E:77:F1:47:0C:74:86:55:38:88:A6:8D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LfSFhUr7GAGOd_FHDHSGVTiIpo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.63.0/24
87.121.79.0/24
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fe:44:18:43:34:46:9d:05:73:59:7f:3c:4b:1c:13:c2:7c:
e4:e2:fb:4a:35:fd:a0:ba:1c:b0:1d:f5:e1:e4:de:7f:55:4f:
29:06:bd:80:99:08:3c:ca:43:d1:59:d5:00:41:24:d7:61:e7:
64:df:88:b5:3f:e3:6e:8d:ae:f4:45:cf:a8:b5:e9:7c:8a:25:
25:f7:18:a2:f0:2d:f6:ea:55:5f:0d:5a:cf:96:87:4c:d2:b6:
36:59:54:a9:5b:1d:7b:80:f7:3b:d1:2c:77:44:1e:91:f0:9e:
d4:ce:43:87:27:e8:39:68:d4:4b:ff:0a:cd:b5:18:5d:87:ce:
18:11:f5:a8:7f:54:40:72:b8:2d:1b:cc:14:8e:52:f0:58:f8:
b5:dd:c2:33:4f:9f:86:c9:8f:b9:2c:ce:28:b7:ea:21:a1:65:
94:07:a3:08:a4:ba:30:fd:6f:4f:32:bc:c7:72:b9:1e:d4:1b:
0a:4d:67:2e:d2:a5:75:d8:bb:c8:7e:68:46:d4:83:4e:03:ee:
36:1d:42:95:4f:17:92:02:39:d0:56:cf:63:5b:13:b7:67:24:
e4:7e:10:0d:75:c3:03:b2:bd:39:a4:a8:66:d2:ce:10:92:78:
34:38:18:1f:19:d5:6a:c8:83:50:73:c7:11:81:51:b8:76:91:
ee:ec:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:48 2026 by rpki-client