Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/C-g37o81zdQC9_zopBXPpyRUrjU.roa
File: C-g37o81zdQC9_zopBXPpyRUrjU.roa (raw, json)
Hash identifier: 2ZRtUbahVnYhC9Kf/nNbZfgsN5/nT4ars1+NMI+6Czk=
Subject key identifier: 0B:E8:37:EE:8F:35:CD:D4:02:F7:FC:E8:A4:15:CF:A7:24:54:AE:35
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 019E922B46A2D9F8D6921C8C22C155DB806D
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/C-g37o81zdQC9_zopBXPpyRUrjU.roa
Signing time: Thu 04 Jun 2026 10:26:09 +0000
ROA not before: Thu 04 Jun 2026 10:26:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49544
IP address blocks: 66.22.196.0/22 maxlen: 22
66.22.200.0/22 maxlen: 22
66.22.204.0/22 maxlen: 22
66.22.208.0/22 maxlen: 22
66.22.212.0/22 maxlen: 22
66.22.216.0/23 maxlen: 23
66.22.218.0/23 maxlen: 23
66.22.220.0/23 maxlen: 23
66.22.222.0/23 maxlen: 23
66.22.224.0/23 maxlen: 23
66.22.226.0/23 maxlen: 23
66.22.230.0/24 maxlen: 24
66.22.231.0/24 maxlen: 24
66.22.232.0/24 maxlen: 24
66.22.233.0/24 maxlen: 24
66.22.234.0/24 maxlen: 24
66.22.235.0/24 maxlen: 24
66.22.236.0/24 maxlen: 24
66.22.237.0/24 maxlen: 24
66.22.238.0/24 maxlen: 24
66.22.239.0/24 maxlen: 24
66.22.240.0/24 maxlen: 24
66.22.241.0/24 maxlen: 24
66.22.242.0/24 maxlen: 24
66.22.243.0/24 maxlen: 24
66.22.244.0/24 maxlen: 24
66.22.245.0/24 maxlen: 24
66.22.246.0/24 maxlen: 24
66.22.247.0/24 maxlen: 24
66.22.248.0/24 maxlen: 24
2a0e:5940:20::/44 maxlen: 44
2a0e:5940:90::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:2b:46:a2:d9:f8:d6:92:1c:8c:22:c1:55:db:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jun 4 10:26:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be837ee8f35cdd402f7fce8a415cfa72454ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:15:e9:f9:bd:03:ee:04:ed:ad:a9:5b:71:
47:38:75:be:16:f8:fa:ea:b9:2c:8d:02:da:f2:62:
9a:7b:d9:1d:be:e6:74:0c:ae:b4:76:10:a6:17:76:
c7:4d:a2:e5:ef:39:03:bc:d8:76:46:48:55:03:74:
75:1b:85:49:06:8c:2a:1d:77:af:7f:99:13:fe:78:
b6:38:21:6b:e0:b1:1d:2d:7a:e3:5e:c2:c9:09:46:
05:22:26:3b:34:9a:47:cb:3e:06:e8:b3:b0:fe:3a:
3f:81:ca:28:c0:9d:93:a3:c0:97:52:56:4c:5f:12:
96:21:b8:76:61:79:62:15:76:18:72:e1:1b:09:78:
56:36:30:b5:ae:99:49:bb:b3:ba:9e:e7:3d:52:e2:
c5:a3:2e:7b:0f:0f:01:39:1a:06:6b:cf:0c:05:65:
9e:e7:54:cb:86:62:73:f0:e9:3c:4a:df:00:ae:00:
84:40:ff:5e:cf:33:44:2a:9a:29:2f:a8:5a:49:73:
d2:28:fd:59:63:4c:6a:69:1d:91:8f:32:6f:49:42:
2e:dd:31:f6:f4:e9:05:56:7c:d2:3d:14:97:78:c9:
e5:29:09:ea:55:7e:76:cc:63:e8:58:f2:c1:e0:ca:
14:2f:82:a6:40:fb:b5:b6:3d:35:23:ff:93:73:c5:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:37:EE:8F:35:CD:D4:02:F7:FC:E8:A4:15:CF:A7:24:54:AE:35
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/C-g37o81zdQC9_zopBXPpyRUrjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.196.0-66.22.227.255
66.22.230.0-66.22.248.255
IPv6:
2a0e:5940:20::/44
2a0e:5940:90::/44
Signature Algorithm: sha256WithRSAEncryption
07:f2:88:15:80:2b:9a:46:55:88:63:d0:8b:3f:91:fd:de:81:
2c:d5:7f:aa:de:84:3e:11:59:c0:17:c8:f2:df:57:0a:e9:37:
3b:30:ef:1d:e5:dd:7e:bb:8d:00:d1:5b:8a:96:9a:ac:93:5e:
98:12:fd:49:7f:6a:38:20:6b:23:8a:18:4c:8f:41:0c:c8:e5:
0d:ea:15:6c:fa:18:43:4f:fa:5b:36:05:d6:59:a6:c0:19:74:
e7:e2:69:3f:2e:f9:c7:bc:78:fb:a4:6f:05:0a:f9:e9:54:d2:
55:b1:0c:68:8f:09:e8:78:e6:07:41:57:13:24:6e:da:a3:88:
d4:32:1a:07:8b:f1:de:2e:88:26:cd:4f:52:a1:ae:c2:fa:69:
3d:c1:1f:1f:ba:ea:11:a7:a3:ff:8f:70:65:e6:81:48:8a:5e:
f0:5a:00:04:cd:9b:cb:bc:91:34:be:48:34:02:38:1c:83:41:
3b:65:13:02:6d:5d:b1:ed:f3:b2:91:72:dd:77:9c:c2:3b:4b:
b6:57:ef:c6:ed:3c:79:c7:bc:ac:c1:33:20:31:7a:98:e8:90:
67:9c:bf:92:62:2a:80:1f:69:6e:6e:8a:16:ff:8f:63:2c:15:
fe:84:0b:bf:a8:54:f6:f6:26:ec:ee:ca:14:19:dd:3e:e0:a8:
d6:b1:75:98
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ6SK0ai2fjWkhyMIsFV24BtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh
ZjJiYjEwHhcNMjYwNjA0MTAyNjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmU4MzdlZThmMzVjZGQ0MDJmN2ZjZThhNDE1Y2ZhNzI0NTRhZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRoV6fm9A+4E7a2pW3FHOHW+Fvj6
6rksjQLa8mKae9kdvuZ0DK60dhCmF3bHTaLl7zkDvNh2RkhVA3R1G4VJBowqHXev
f5kT/ni2OCFr4LEdLXrjXsLJCUYFIiY7NJpHyz4G6LOw/jo/gcoowJ2To8CXUlZM
XxKWIbh2YXliFXYYcuEbCXhWNjC1rplJu7O6nuc9UuLFoy57Dw8BORoGa88MBWWe
51TLhmJz8Ok8St8ArgCEQP9ezzNEKpopL6haSXPSKP1ZY0xqaR2RjzJvSUIu3TH2
9OkFVnzSPRSXeMnlKQnqVX52zGPoWPLB4MoUL4KmQPu1tj01I/+Tc8VgawIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFAvoN+6PNc3UAvf86KQVz6ckVK41MB8GA1UdIwQY
MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt
YjUwY2Y1ZjJhYTIyLzEvQy1nMzdvODF6ZFFDOV96b3BCWFBweVJVcmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy
LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAiBAIAATAcMAwDBAJCFsQD
BAJCFuAwDAMEAUIW5gMEAEIW+DAYBAIAAjASAwcEKg5ZQAAgAwcEKg5ZQACQMA0G
CSqGSIb3DQEBCwUAA4IBAQAH8ogVgCuaRlWIY9CLP5H93oEs1X+q3oQ+EVnAF8jy
31cK6Tc7MO8d5d1+u40A0VuKlpqsk16YEv1Jf2o4IGsjihhMj0EMyOUN6hVs+hhD
T/pbNgXWWabAGXTn4mk/LvnHvHj7pG8FCvnpVNJVsQxojwnoeOYHQVcTJG7ao4jU
MhoHi/HeLogmzU9Soa7C+mk9wR8fuuoRp6P/j3Bl5oFIil7wWgAEzZvLvJE0vkg0
Ajgcg0E7ZRMCbV2x7fOykXLdd5zCO0u2V+/G7Tx5x7yswTMgMXqY6JBnnL+SYiqA
H2lubooW/49jLBX+hAu/qFT29ibs7soUGd0+4KjWsXWY
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:03:52 2026 by rpki-client