Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/aMuOdBeqRBY8SAGLRcxT1xggdoY.roa
File: aMuOdBeqRBY8SAGLRcxT1xggdoY.roa (raw, json)
Hash identifier: QLozRKCqs5dAN53gNJOiC4S5oT/abaFPv21C2YpIKB0=
Subject key identifier: 68:CB:8E:74:17:AA:44:16:3C:48:01:8B:45:CC:53:D7:18:20:76:86
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019DC0F18628479051525F113BC22B8F19D5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/aMuOdBeqRBY8SAGLRcxT1xggdoY.roa
Signing time: Fri 24 Apr 2026 19:22:27 +0000
ROA not before: Fri 24 Apr 2026 19:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 147.45.65.0/24 maxlen: 24
147.45.196.0/24 maxlen: 24
147.45.197.0/24 maxlen: 24
147.45.222.0/24 maxlen: 24
193.233.16.0/24 maxlen: 24
193.233.85.0/24 maxlen: 24
193.233.171.0/24 maxlen: 24
193.233.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:f1:86:28:47:90:51:52:5f:11:3b:c2:2b:8f:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 24 19:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68cb8e7417aa44163c48018b45cc53d718207686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:21:00:19:8f:9a:3e:da:bd:05:07:ff:6c:
bb:3f:a5:4d:14:b6:92:76:68:25:05:aa:66:37:e3:
75:29:74:fe:e7:3a:ba:a0:42:9c:0f:31:e3:5e:8f:
58:26:6e:0a:ad:8f:b1:03:bc:38:b9:6e:fc:5c:ca:
dc:ac:95:7a:33:86:b1:6a:d4:d8:a0:75:44:23:de:
62:d0:06:2e:cc:c6:89:5b:27:9a:fb:f7:74:c0:06:
b0:d4:5b:2c:c2:87:65:af:39:33:e5:48:dc:49:1b:
3b:bf:58:ea:ce:4f:c8:e0:5e:c6:92:19:7e:46:4f:
5f:59:61:41:25:2c:b7:97:19:98:b9:ab:ef:cf:32:
cf:2b:c1:ce:cb:0f:80:f8:f4:a3:ef:e4:42:5f:4e:
40:79:ff:56:ba:10:bc:6d:97:15:ea:97:5f:da:9c:
ae:6d:65:37:ce:7e:d9:6f:08:a2:82:54:f1:f5:f8:
76:51:53:01:0f:c9:5d:52:9e:da:27:48:39:64:c0:
95:b6:ce:bc:e9:d0:d3:12:54:32:25:01:15:85:a5:
85:92:20:12:ab:44:86:45:da:6e:f4:5a:ef:98:2a:
2e:c2:02:a4:b9:5f:d7:94:34:7b:15:08:e5:ad:5a:
24:33:e3:22:6f:76:2f:01:f6:7f:59:77:ec:91:a9:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:8E:74:17:AA:44:16:3C:48:01:8B:45:CC:53:D7:18:20:76:86
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/aMuOdBeqRBY8SAGLRcxT1xggdoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.65.0/24
147.45.196.0/23
147.45.222.0/24
193.233.16.0/24
193.233.85.0/24
193.233.171.0/24
193.233.175.0/24
Signature Algorithm: sha256WithRSAEncryption
20:55:fd:17:8c:56:50:38:5c:71:3c:6b:c4:5d:bb:49:35:f8:
49:f1:d0:db:82:d0:65:b7:68:26:ad:44:8c:cd:de:5a:38:eb:
2a:e6:fd:b5:dd:36:a7:b8:e2:78:ab:a3:2e:95:66:45:ec:a7:
eb:46:3f:9e:aa:cf:f2:44:52:16:4e:7d:19:48:2f:03:05:f2:
f8:cd:f4:e9:16:c5:97:94:08:a6:9f:c5:24:9d:93:fc:82:32:
5b:c8:9a:fb:80:03:d9:23:30:f4:46:e2:e5:9e:72:41:13:9e:
83:3f:ea:eb:da:78:e6:79:8f:bf:40:4f:4b:99:4f:8c:8a:c5:
91:4a:4d:2d:f1:c4:4f:f4:5d:d1:99:c7:e1:7e:07:4c:84:f8:
55:72:8e:cc:42:16:5d:91:7e:2d:7c:c2:75:a7:c1:c0:cc:25:
42:b6:30:11:37:d0:3e:75:e9:77:ff:96:f4:d4:6e:e8:95:79:
e6:2b:dd:b8:02:cb:0d:d8:d2:95:c1:07:59:63:38:2c:5b:01:
69:de:e3:27:f8:12:40:39:95:80:07:fc:12:30:3f:f1:dd:5a:
32:4a:8b:7f:9e:38:9c:7f:33:68:f9:26:c2:07:d3:c4:63:2e:
3a:2d:d1:eb:d0:4b:67:dc:95:93:34:b6:ef:08:b4:4d:8c:59:
7a:b1:f8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:54 2026 by rpki-client