Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/9jc69vVsdWk6bDgFshwFaPkQiW4.roa
File: 9jc69vVsdWk6bDgFshwFaPkQiW4.roa (raw, json)
Hash identifier: vJY4PURpp9zlGE8vkcu9TTy5SV3ZXYUmKNEh03HjHbE=
Subject key identifier: F6:37:3A:F6:F5:6C:75:69:3A:6C:38:05:B2:1C:05:68:F9:10:89:6E
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019F400AE59115703196AA600CE758DEBBEB
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/9jc69vVsdWk6bDgFshwFaPkQiW4.roa
Signing time: Wed 08 Jul 2026 04:44:43 +0000
ROA not before: Wed 08 Jul 2026 04:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48359
IP address blocks: 45.155.192.0/24 maxlen: 24
45.155.193.0/24 maxlen: 24
45.155.194.0/24 maxlen: 24
45.155.195.0/24 maxlen: 24
91.213.172.0/24 maxlen: 24
185.47.48.0/23 maxlen: 23
185.47.48.0/24 maxlen: 24
185.47.49.0/24 maxlen: 24
185.47.50.0/23 maxlen: 23
185.47.50.0/24 maxlen: 24
185.47.51.0/24 maxlen: 24
185.82.64.0/22 maxlen: 22
185.82.64.0/24 maxlen: 24
185.82.65.0/24 maxlen: 24
185.82.66.0/24 maxlen: 24
185.82.67.0/24 maxlen: 24
185.121.56.0/22 maxlen: 22
185.121.56.0/24 maxlen: 24
185.121.57.0/24 maxlen: 24
185.121.58.0/24 maxlen: 24
185.121.59.0/24 maxlen: 24
185.125.20.0/24 maxlen: 24
185.125.21.0/24 maxlen: 24
185.125.22.0/24 maxlen: 24
185.125.23.0/24 maxlen: 24
185.137.60.0/22 maxlen: 24
185.137.60.0/24 maxlen: 24
185.137.61.0/24 maxlen: 24
185.137.62.0/24 maxlen: 24
185.137.63.0/24 maxlen: 24
185.142.92.0/22 maxlen: 22
185.142.92.0/24 maxlen: 24
185.142.93.0/24 maxlen: 24
185.142.94.0/24 maxlen: 24
185.142.95.0/24 maxlen: 24
185.142.124.0/22 maxlen: 22
185.142.124.0/24 maxlen: 24
185.142.125.0/24 maxlen: 24
185.142.126.0/24 maxlen: 24
185.142.127.0/24 maxlen: 24
185.212.192.0/24 maxlen: 24
185.212.193.0/24 maxlen: 24
185.212.195.0/24 maxlen: 24
185.221.192.0/22 maxlen: 22
185.221.192.0/24 maxlen: 24
185.221.194.0/24 maxlen: 24
185.221.195.0/24 maxlen: 24
185.238.44.0/24 maxlen: 24
185.238.45.0/24 maxlen: 24
185.238.46.0/24 maxlen: 24
185.238.47.0/24 maxlen: 24
193.246.174.0/24 maxlen: 24
193.246.175.0/24 maxlen: 24
193.246.200.0/24 maxlen: 24
193.246.201.0/24 maxlen: 24
195.8.112.0/24 maxlen: 24
195.8.114.0/24 maxlen: 24
195.191.22.0/24 maxlen: 24
195.191.23.0/24 maxlen: 24
195.191.44.0/24 maxlen: 24
195.191.45.0/24 maxlen: 24
195.230.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:0a:e5:91:15:70:31:96:aa:60:0c:e7:58:de:bb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jul 8 04:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6373af6f56c75693a6c3805b21c0568f910896e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:22:29:6f:9d:27:86:ca:da:d9:4d:b0:8c:
bf:b2:ed:0d:f9:47:1d:41:84:61:c3:54:1a:94:a5:
8d:85:fa:2d:80:1a:44:6d:f3:de:6b:fd:a4:0f:d0:
f3:b5:21:d1:60:3b:7a:ca:7e:8d:f4:74:dd:43:70:
4b:82:61:e1:91:3e:57:2d:df:fa:38:ad:1c:04:79:
4b:fd:d0:a4:31:4e:27:f5:29:88:99:af:c8:6a:23:
d6:7a:e0:88:ff:e4:ac:9b:23:b2:fd:9e:ce:fd:78:
27:22:2a:fe:b7:60:eb:5a:d5:8f:54:dc:3f:fe:0d:
3e:b2:8d:c7:da:42:ab:ef:6e:07:74:80:0d:39:12:
04:67:de:29:31:c7:ff:93:db:91:dd:44:89:04:82:
a4:ba:dd:ad:48:63:a6:a7:dd:96:c5:a3:8f:28:f1:
77:8b:f5:a5:8c:e5:23:b0:97:d8:8b:87:24:c6:a5:
a4:e8:7e:4f:3c:f8:bc:a9:47:37:fc:4f:f3:9c:80:
3f:73:02:ac:7e:ba:5a:b4:b4:cd:fa:f0:04:50:4c:
2b:aa:30:ad:56:bd:3f:e7:1a:eb:b2:d2:19:91:a0:
c2:5b:f9:f3:45:04:8d:eb:5a:32:d5:40:fb:cf:79:
34:2e:81:a0:c9:2b:04:51:71:88:15:18:ac:1e:98:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:3A:F6:F5:6C:75:69:3A:6C:38:05:B2:1C:05:68:F9:10:89:6E
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/9jc69vVsdWk6bDgFshwFaPkQiW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.192.0/22
91.213.172.0/24
185.47.48.0/22
185.82.64.0/22
185.121.56.0/22
185.125.20.0/22
185.137.60.0/22
185.142.92.0/22
185.142.124.0/22
185.212.192.0/23
185.212.195.0/24
185.221.192.0/22
185.238.44.0/22
193.246.174.0/23
193.246.200.0/23
195.8.112.0/24
195.8.114.0/24
195.191.22.0/23
195.191.44.0/23
195.230.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d4:96:40:5b:27:13:40:3a:74:aa:30:00:f7:42:47:05:d6:
28:44:f7:27:5b:92:09:1b:58:42:a8:7a:8a:44:83:0e:bb:e6:
33:c7:b6:4b:e8:e2:00:33:40:dd:39:0f:d0:bb:ef:1c:ee:da:
33:61:8a:a5:57:b4:96:2f:fb:94:0f:3d:19:07:52:c4:75:45:
56:1c:e0:fc:fa:52:ca:25:96:74:c5:13:f1:6a:c2:82:db:90:
d9:0b:96:19:bb:8d:44:ae:d1:9d:f9:a6:a4:2a:8f:3b:21:b3:
c8:48:01:f3:16:50:c6:cd:82:67:b7:a9:a6:4a:cb:5b:1a:a5:
cf:f1:db:56:18:66:dc:27:df:d9:4c:c5:40:66:6d:1e:26:3e:
90:ce:62:8f:87:f9:ef:5d:61:d7:ef:d1:f4:6c:fa:b4:34:d3:
6a:60:0b:fd:c6:e2:47:f5:ab:9c:6e:bf:d9:ca:b2:28:ea:1f:
23:82:be:b3:28:92:a5:c9:86:f6:9a:46:7b:c8:36:d5:8a:40:
ef:c8:5b:48:cd:97:d1:6c:fb:fd:9c:a9:35:c4:a3:0d:bd:c4:
c8:1a:e1:ca:57:7c:98:32:83:79:0b:3e:e3:8b:cc:a3:25:8b:
c9:c4:aa:75:ab:a7:bb:32:0d:6d:1d:65:d6:69:69:b3:bc:4b:
65:1a:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:46 2026 by rpki-client