Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/lRU8wDW4-0iVJJtLo44chFkRx8E.roa
File: lRU8wDW4-0iVJJtLo44chFkRx8E.roa (raw, json)
Hash identifier: 0Pbc57UJG9ycSR4zmKHD340x0t+fwY5oZ1MAnj7Pi4k=
Subject key identifier: 95:15:3C:C0:35:B8:FB:48:95:24:9B:4B:A3:8E:1C:84:59:11:C7:C1
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019F187B0A2D32EC31288FD91E50B24A2DF9
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/lRU8wDW4-0iVJJtLo44chFkRx8E.roa
Signing time: Tue 30 Jun 2026 12:22:24 +0000
ROA not before: Tue 30 Jun 2026 12:22:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58172
IP address blocks: 45.133.232.0/23 maxlen: 23
45.135.131.0/24 maxlen: 24
80.173.160.0/24 maxlen: 24
80.173.161.0/24 maxlen: 24
80.173.162.0/24 maxlen: 24
80.173.163.0/24 maxlen: 24
80.173.164.0/24 maxlen: 24
80.173.165.0/24 maxlen: 24
80.173.166.0/24 maxlen: 24
91.213.49.0/24 maxlen: 24
94.131.60.0/24 maxlen: 24
94.131.61.0/24 maxlen: 24
94.131.62.0/24 maxlen: 24
94.131.63.0/24 maxlen: 24
94.131.224.0/24 maxlen: 24
94.131.225.0/24 maxlen: 24
94.131.226.0/23 maxlen: 23
94.131.226.0/24 maxlen: 24
94.131.227.0/24 maxlen: 24
94.131.228.0/24 maxlen: 24
94.131.229.0/24 maxlen: 24
94.131.230.0/24 maxlen: 24
94.131.231.0/24 maxlen: 24
94.131.232.0/24 maxlen: 24
94.131.233.0/24 maxlen: 24
94.131.234.0/23 maxlen: 23
94.131.234.0/24 maxlen: 24
94.131.235.0/24 maxlen: 24
94.131.236.0/23 maxlen: 23
94.131.236.0/24 maxlen: 24
94.131.237.0/24 maxlen: 24
94.131.239.0/24 maxlen: 24
153.56.200.0/24 maxlen: 24
153.56.201.0/24 maxlen: 24
153.56.202.0/24 maxlen: 24
153.56.203.0/24 maxlen: 24
153.56.204.0/24 maxlen: 24
153.56.205.0/24 maxlen: 24
157.22.232.0/24 maxlen: 24
157.22.233.0/24 maxlen: 24
157.22.237.0/24 maxlen: 24
157.22.238.0/24 maxlen: 24
157.22.239.0/24 maxlen: 24
185.191.212.0/24 maxlen: 24
185.210.139.0/24 maxlen: 24
193.148.60.0/24 maxlen: 24
194.35.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:7b:0a:2d:32:ec:31:28:8f:d9:1e:50:b2:4a:2d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Jun 30 12:22:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95153cc035b8fb4895249b4ba38e1c845911c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:cc:93:14:a1:fc:c9:32:68:99:b4:e3:26:
f4:73:a9:08:bd:3c:68:4f:12:8e:32:cf:62:4d:10:
30:29:ac:70:7d:a0:99:98:9f:ee:9b:f4:f4:48:cd:
e5:31:f5:80:4f:8b:56:85:71:a9:15:bb:68:ca:46:
9c:57:8d:af:62:71:f2:5f:b4:64:bd:22:27:a7:fb:
c9:a8:f8:3c:6c:47:ac:17:28:18:df:05:7f:75:db:
bb:d6:28:d0:34:e0:a6:04:af:61:11:47:03:04:5c:
de:73:06:1f:a1:45:77:5d:32:60:a7:19:7c:fd:a6:
66:25:00:e3:9d:d7:53:24:de:ee:5f:32:f2:1f:e3:
04:fa:10:2b:eb:9d:f0:2d:86:57:36:14:07:d9:f4:
40:ef:2d:14:04:82:8d:8c:70:d1:81:9a:09:5e:93:
9c:63:41:85:27:60:c0:e4:0d:9b:df:70:95:36:17:
ab:9d:00:d0:e7:cc:96:fc:b7:94:54:43:a4:a8:4d:
9b:0a:57:1b:73:66:be:23:90:df:d1:fd:a1:53:ab:
e4:85:3b:04:ce:ef:ee:ca:92:d5:c9:f4:7a:be:59:
fa:c9:98:cc:74:67:81:19:88:8a:33:35:81:01:d7:
91:0b:42:3c:77:8f:7d:65:48:3e:eb:c6:10:cf:f3:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:3C:C0:35:B8:FB:48:95:24:9B:4B:A3:8E:1C:84:59:11:C7:C1
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/lRU8wDW4-0iVJJtLo44chFkRx8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.232.0/23
45.135.131.0/24
80.173.160.0-80.173.166.255
91.213.49.0/24
94.131.60.0/22
94.131.224.0-94.131.237.255
94.131.239.0/24
153.56.200.0-153.56.205.255
157.22.232.0/23
157.22.237.0-157.22.239.255
185.191.212.0/24
185.210.139.0/24
193.148.60.0/24
194.35.124.0/24
Signature Algorithm: sha256WithRSAEncryption
08:bb:aa:c4:51:84:17:c0:5d:05:22:31:fc:d8:d1:59:47:54:
80:e2:ee:79:90:c1:5d:ef:31:4b:3d:86:60:96:a5:b6:68:e9:
d1:23:08:97:c7:5d:aa:1a:5a:e3:25:b3:04:9b:2c:1b:f4:7c:
7c:f3:d1:7e:73:8f:d3:12:e3:2a:72:75:19:e5:d6:8c:00:34:
b1:46:bd:3c:45:c6:b9:0a:68:d3:c1:2f:9f:5b:98:f9:92:e2:
d3:ea:1c:89:57:d4:e8:ab:da:6e:86:f9:e7:03:11:5b:9e:ff:
ae:9f:db:d5:c8:97:9a:54:99:33:b5:8b:a9:d3:71:e6:42:a4:
0a:eb:07:4a:cf:9c:bf:91:08:2d:51:f9:8f:a2:0e:02:a9:ce:
5f:df:e9:b1:6e:9d:59:78:e2:5f:b3:59:bb:96:b1:4a:a9:cb:
ec:12:fc:d8:78:04:05:f5:dd:b4:02:fc:a2:e6:d3:25:d5:2b:
d8:44:ce:e4:9a:85:fe:77:69:2d:1f:9e:33:99:eb:ae:63:f4:
d7:46:ba:66:5b:b8:38:79:f9:83:0f:95:9f:3c:dc:e5:d6:87:
32:4f:ea:94:ae:f5:6c:e2:78:0d:c5:c0:cd:5c:01:ca:78:6c:
6e:49:8c:02:37:df:84:ac:aa:4f:c4:32:5d:2d:01:f2:2a:eb:
61:4a:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:54:57 2026 by rpki-client