Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/0rvExH1QWKXziRTvvOcop6xMIwQ.roa
File: 0rvExH1QWKXziRTvvOcop6xMIwQ.roa (raw, json)
Hash identifier: YsN4DYQKnH+OtwgjwMbgWy2KQVampjXuc4aaV1ttU8U=
Subject key identifier: D2:BB:C4:C4:7D:50:58:A5:F3:89:14:EF:BC:E7:28:A7:AC:4C:23:04
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019FFCE97BF098882B480C26401D44C19EF0
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/0rvExH1QWKXziRTvvOcop6xMIwQ.roa
Signing time: Thu 13 Aug 2026 20:56:27 +0000
ROA not before: Thu 13 Aug 2026 20:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.159.0/24 maxlen: 24
137.31.165.0/24 maxlen: 24
137.31.166.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:e9:7b:f0:98:88:2b:48:0c:26:40:1d:44:c1:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 13 20:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2bbc4c47d5058a5f38914efbce728a7ac4c2304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:cb:d7:c8:0c:d1:f8:8b:21:de:9b:cd:5a:
cf:b7:0e:57:8d:23:29:98:82:c1:d5:ea:a1:d8:a4:
48:29:7b:a1:f9:e2:ba:62:a7:68:1a:1b:d3:a1:fa:
8a:44:80:5e:2b:37:8b:24:1d:3b:39:d9:21:3a:50:
3f:d0:9a:0d:57:e7:e8:00:2f:5b:4b:8a:d6:66:e6:
db:94:7c:6c:61:b0:2b:d0:a7:8a:e4:f7:3f:ee:e5:
05:55:2a:8b:b9:26:4e:ea:13:b1:41:09:bd:e7:1e:
2a:94:77:4a:96:ab:25:f2:c8:82:06:f2:58:ec:01:
bb:5e:92:27:24:c7:93:ef:84:60:d8:ca:06:eb:78:
7f:13:ad:a2:f9:ca:a4:28:b8:12:fe:c9:eb:d1:d1:
7e:b1:08:70:a9:3c:e8:32:4e:73:43:7d:f0:7f:e3:
f6:a4:b6:1b:1a:f4:39:97:7f:ce:98:db:1b:ae:9e:
de:a7:8a:4b:d5:92:f8:ab:d9:59:b4:93:00:e6:8f:
e5:56:16:8c:28:ad:d6:80:29:55:3d:f1:ee:8a:b0:
6a:1e:a5:72:e8:87:a1:a6:f6:1d:08:e5:5b:15:0e:
a9:79:d9:d5:51:ac:fe:18:20:94:e4:1d:e6:a2:73:
f6:88:e2:09:9b:84:79:a2:d5:e0:db:08:97:f7:42:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:C4:C4:7D:50:58:A5:F3:89:14:EF:BC:E7:28:A7:AC:4C:23:04
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/0rvExH1QWKXziRTvvOcop6xMIwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.159.0/24
137.31.165.0-137.31.166.255
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:b0:1f:de:ac:0c:87:af:79:cc:27:7f:51:55:91:fb:aa:9d:
4d:a4:4e:7b:86:4f:b7:da:e2:e5:0a:27:d0:55:e8:d2:16:a6:
98:6f:a3:0b:18:a6:57:36:bb:71:62:0c:a3:d2:aa:64:fa:4f:
00:8a:a8:b5:fa:40:a7:6c:93:86:6d:e3:77:23:1e:5c:fb:da:
56:44:7a:a4:22:47:4e:a1:76:61:56:23:cc:00:c1:3e:e8:be:
ea:0a:f6:ed:f8:33:35:7b:04:4a:7e:cf:97:d1:18:70:ed:c5:
5b:3b:ec:9d:3e:ba:fc:4c:f5:60:c8:d7:f2:b9:02:c2:8e:8d:
74:b3:87:59:57:a5:65:e0:e7:2a:25:63:74:d5:cd:0a:61:ff:
c9:9e:94:14:63:b4:80:51:d1:70:4b:5f:ef:a9:e0:db:41:76:
aa:ae:7a:a1:d7:84:a5:42:78:f5:d1:4b:bf:e3:7c:4a:ed:d2:
17:9e:9e:e9:2d:3f:07:f5:96:82:19:e0:f7:4b:d5:6c:e8:1b:
66:e7:5e:00:b4:2c:71:97:4d:85:29:7c:2a:cb:9f:40:54:74:
04:b7:51:87:c0:8f:a2:b6:0f:14:4b:f9:71:32:04:ca:cd:af:
44:a3:ee:be:44:be:40:73:61:42:f7:51:47:15:fc:3a:a6:4c:
5d:2c:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:06 2026 by rpki-client