Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/biWXtyY1M7bctbBG1ZBpvA4KyCk.roa
File: biWXtyY1M7bctbBG1ZBpvA4KyCk.roa (raw, json)
Hash identifier: Sj17pauKak48igW+0NVikKcLp6VBHblwi60s2YO3Llk=
Subject key identifier: 6E:25:97:B7:26:35:33:B6:DC:B5:B0:46:D5:90:69:BC:0E:0A:C8:29
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FA8EC2183469ED72AA8C135223EF86830
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/biWXtyY1M7bctbBG1ZBpvA4KyCk.roa
Signing time: Tue 28 Jul 2026 13:31:15 +0000
ROA not before: Tue 28 Jul 2026 13:31:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:ec:21:83:46:9e:d7:2a:a8:c1:35:22:3e:f8:68:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 28 13:31:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e2597b7263533b6dcb5b046d59069bc0e0ac829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:c6:2e:14:ef:f3:67:1b:47:5a:74:18:99:
dc:42:38:9f:26:93:21:6b:1b:fc:a5:a0:3e:c4:5d:
1c:ee:6e:20:f5:46:6e:3f:8f:d6:45:b0:29:07:a4:
db:17:79:b4:ec:cd:fb:aa:53:4b:b0:27:0e:b0:23:
e3:3c:a5:d0:d0:5b:8d:ad:e2:9d:37:af:c6:12:cd:
8f:dc:f7:90:37:3d:34:47:cb:10:97:2c:6a:0e:ec:
0d:1a:a6:80:30:e9:00:8c:cf:36:89:51:c1:fe:25:
d3:65:e2:88:51:71:e1:0e:10:a4:7d:a3:cb:5e:92:
f7:25:1f:8c:0e:22:31:5d:e8:d7:c2:02:13:8d:79:
17:e0:67:2d:09:56:d3:a3:4f:0a:5f:fb:fa:3a:c6:
a0:15:3c:0c:1a:a4:f7:62:32:76:90:f8:42:a8:f4:
5a:5f:f7:54:5c:b9:7b:f6:8f:26:11:4c:32:98:ee:
ac:60:62:d8:00:27:b6:e9:54:4b:75:7e:f8:60:ae:
d4:af:e8:f1:0a:b4:6c:c2:35:03:cc:6b:2d:da:54:
45:7d:54:81:61:41:f8:e9:4f:42:f1:de:d9:33:6d:
3a:56:97:53:f7:d4:a1:5d:87:3f:85:a5:c7:51:61:
ee:3a:3a:f6:c3:5f:91:aa:6d:40:d9:9f:e2:16:63:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:97:B7:26:35:33:B6:DC:B5:B0:46:D5:90:69:BC:0E:0A:C8:29
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/biWXtyY1M7bctbBG1ZBpvA4KyCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
81.161.238.0/24
83.143.113.0/24
83.219.98.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.62.0/23
87.121.114.0/23
87.121.221.0/24
92.249.50.0/24
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f0:72:58:b8:64:9c:8a:42:3e:cc:54:57:6a:5e:3c:ab:e2:
e0:f6:80:c3:9f:5f:34:f1:78:8f:23:2c:6b:11:b6:3b:21:04:
f6:11:78:4f:f9:bd:a2:7e:08:b4:d6:f4:fa:d7:e0:0b:cd:c7:
5e:e5:34:55:08:55:e3:5f:71:b3:ac:47:12:8b:13:b7:7d:15:
18:c4:59:26:a0:62:a1:92:d7:08:26:d7:dc:6c:9e:99:5c:cc:
f7:20:78:60:b9:5c:8c:d9:b9:94:1b:f8:74:b3:d9:81:11:0f:
d6:e6:56:da:12:95:70:74:14:af:be:65:96:6e:bd:0d:c4:97:
b8:1e:a3:c2:0b:36:27:06:88:42:1f:dc:2a:25:58:ca:38:4e:
ba:2a:11:5a:c1:d5:bd:f3:62:9b:1b:15:33:d3:24:a3:a2:c9:
e0:ed:c7:7a:35:d6:00:d0:b6:1d:cd:6b:c2:34:60:bb:22:04:
28:86:d6:7f:66:83:7a:2f:72:72:15:44:ea:3b:44:6f:19:db:
ad:6f:e5:a7:05:f0:b1:f7:b6:53:21:2e:b0:7f:1c:81:65:80:
ab:33:14:f1:bc:74:c0:e8:1b:4a:41:da:c8:de:3f:69:69:a9:
96:42:4f:2e:62:19:4c:3f:4f:ba:10:7b:bf:3a:b5:aa:cc:21:
51:97:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:05:28 2026 by rpki-client