Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/IsMsXLfSs2vsgsxtfMoL7ji94OY.roa
File: IsMsXLfSs2vsgsxtfMoL7ji94OY.roa (raw, json)
Hash identifier: Ped2jsIPE2DeVXNb46SdOVwPkO1Se/uZIcMprT51uN8=
Subject key identifier: 22:C3:2C:5C:B7:D2:B3:6B:EC:82:CC:6D:7C:CA:0B:EE:38:BD:E0:E6
Certificate issuer: /CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Certificate serial: 019F2368F96959D35AAB088D8B76E4B013ED
Authority key identifier: EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/IsMsXLfSs2vsgsxtfMoL7ji94OY.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50316
IP address blocks: 45.135.24.0/22 maxlen: 24
45.147.236.0/22 maxlen: 24
46.234.192.0/19 maxlen: 24
46.234.198.240/30 maxlen: 30
185.10.188.0/22 maxlen: 24
185.43.164.0/22 maxlen: 24
185.74.188.0/22 maxlen: 24
185.96.96.0/22 maxlen: 24
185.121.32.0/22 maxlen: 24
185.142.122.0/23 maxlen: 24
185.157.24.0/22 maxlen: 24
185.158.140.0/22 maxlen: 24
185.193.252.0/22 maxlen: 24
185.219.44.0/22 maxlen: 24
185.219.45.64/30 maxlen: 30
185.245.120.0/22 maxlen: 24
193.3.245.0/24 maxlen: 24
193.5.31.0/24 maxlen: 24
193.5.39.0/24 maxlen: 24
193.5.41.0/24 maxlen: 24
193.5.120.0/24 maxlen: 24
193.38.132.0/22 maxlen: 24
193.47.52.0/22 maxlen: 24
195.184.74.0/24 maxlen: 24
213.187.0.0/19 maxlen: 24
2a00:1f48::/29 maxlen: 56
2a01:6d60::/29 maxlen: 56
2a05:4a00::/29 maxlen: 56
2a06:9c80::/29 maxlen: 56
2a07:a2c0::/29 maxlen: 56
2a07:adc0::/29 maxlen: 56
2a0a:41c0::/29 maxlen: 56
2a0a:c180::/29 maxlen: 56
2a0b:e040::/29 maxlen: 56
2a0d:5780::/29 maxlen: 56
2a0d:e540::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f9:69:59:d3:5a:ab:08:8d:8b:76:e4:b0:13:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22c32c5cb7d2b36bec82cc6d7cca0bee38bde0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:7e:8b:d5:f1:3a:f7:15:37:d9:2b:fd:2a:
20:4f:0f:29:c2:3a:af:74:97:04:36:bb:6d:fd:c1:
d6:d3:18:99:1f:01:64:70:c6:ed:34:d3:6d:40:8c:
d6:4c:20:c7:eb:7b:ef:a5:f4:58:08:3c:67:b2:23:
b0:f9:a5:f7:69:1c:05:2d:bc:6a:af:57:c0:98:81:
b8:dd:b1:08:e2:f8:33:a4:66:98:0a:61:45:3e:0a:
95:b1:b5:25:5b:71:74:55:2f:27:5f:a7:67:88:11:
0c:ca:18:dd:84:69:84:f3:83:8e:cc:89:fd:6a:cb:
76:07:6c:86:2e:bd:4f:e8:59:21:a5:6a:a2:5b:f3:
33:2f:dd:35:1b:2a:d9:7d:ae:ba:55:9e:c8:cf:0f:
f6:de:0f:9c:1a:f2:b6:d1:18:81:68:f4:a0:01:54:
e2:8a:81:ab:2f:6d:57:ad:40:29:53:24:a0:36:73:
5c:2b:a3:ed:78:53:a1:cc:e5:56:b0:f6:25:d9:af:
72:8c:ca:28:cd:52:30:a3:2a:ce:2b:01:d8:09:32:
3e:42:7a:71:3e:20:75:ae:29:d2:b0:15:06:fb:ff:
fa:8e:26:98:16:be:77:06:64:51:aa:83:f1:ef:66:
17:b4:b4:76:7c:e8:95:39:ee:5a:0f:f1:b6:de:4a:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:2C:5C:B7:D2:B3:6B:EC:82:CC:6D:7C:CA:0B:EE:38:BD:E0:E6
X509v3 Authority Key Identifier:
keyid:EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/IsMsXLfSs2vsgsxtfMoL7ji94OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.24.0/22
45.147.236.0/22
46.234.192.0/19
185.10.188.0/22
185.43.164.0/22
185.74.188.0/22
185.96.96.0/22
185.121.32.0/22
185.142.122.0/23
185.157.24.0/22
185.158.140.0/22
185.193.252.0/22
185.219.44.0/22
185.245.120.0/22
193.3.245.0/24
193.5.31.0/24
193.5.39.0/24
193.5.41.0/24
193.5.120.0/24
193.38.132.0/22
193.47.52.0/22
195.184.74.0/24
213.187.0.0/19
IPv6:
2a00:1f48::/29
2a01:6d60::/29
2a05:4a00::/29
2a06:9c80::/29
2a07:a2c0::/29
2a07:adc0::/29
2a0a:41c0::/29
2a0a:c180::/29
2a0b:e040::/29
2a0d:5780::/29
2a0d:e540::/29
Signature Algorithm: sha256WithRSAEncryption
4c:77:96:71:db:2d:cf:99:d7:4a:0e:0e:b0:26:42:0e:b4:3a:
c0:77:be:7b:5d:17:66:a3:ec:75:80:0b:32:74:f0:89:60:86:
3a:c9:e4:93:70:b6:a3:f5:8a:c7:63:d6:47:db:bd:49:b9:f5:
35:e0:37:5a:d6:3c:03:07:46:23:62:9f:b4:27:bd:4a:68:9a:
b8:cf:64:7f:83:31:cc:b2:0e:cd:ad:55:9f:78:5e:a7:62:b7:
be:63:a3:98:ba:bc:05:a9:5c:3f:45:a6:9d:ab:13:b5:e7:9b:
25:5e:f1:66:9c:ae:2b:48:d8:45:96:50:51:90:c7:09:23:ba:
cf:c2:db:7d:c0:92:44:5b:30:5d:d5:4f:5f:0c:83:8a:5a:06:
aa:ac:a2:09:34:f2:0d:19:67:69:28:d3:3c:e8:ee:1d:f8:67:
b2:ee:b9:74:d0:c1:dc:20:ae:5e:5e:b7:d4:1c:3f:40:f8:6f:
71:e3:81:3c:cf:81:17:20:97:91:23:74:a8:f4:79:76:6e:d1:
84:be:71:1e:1c:1d:68:43:a9:ab:cf:8f:0e:9f:ce:a1:e8:f0:
d7:5b:d0:94:5e:9f:b2:73:01:34:e2:ec:01:9d:db:cd:70:e8:
f6:09:76:d3:81:71:82:7b:da:08:07:a3:f3:06:96:aa:fa:43:
13:40:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:54 2026 by rpki-client