Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/USq_PbBFImqCUvsmyZhr-M-58ZY.roa
File: USq_PbBFImqCUvsmyZhr-M-58ZY.roa (raw, json)
Hash identifier: L7Vdkc3Ytx2vM7ApwTigvQ3Q6rZqh17pnCq2YZjN5bI=
Subject key identifier: 51:2A:BF:3D:B0:45:22:6A:82:52:FB:26:C9:98:6B:F8:CF:B9:F1:96
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019FFCE97CB3E74C594E15914D756595177F
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/USq_PbBFImqCUvsmyZhr-M-58ZY.roa
Signing time: Thu 13 Aug 2026 20:56:27 +0000
ROA not before: Thu 13 Aug 2026 20:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.159.0/24 maxlen: 24
137.31.165.0/24 maxlen: 24
137.31.166.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:e9:7c:b3:e7:4c:59:4e:15:91:4d:75:65:95:17:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 13 20:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=512abf3db045226a8252fb26c9986bf8cfb9f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:36:b2:92:44:ba:f3:c3:53:68:3d:3a:9c:
49:63:23:70:42:2b:f8:2b:0b:a3:2e:38:b0:71:d6:
49:fc:19:48:93:a7:c0:6b:53:9e:7e:8e:2b:6d:fe:
c3:69:0e:18:a4:cd:cb:2a:16:e1:f3:08:b1:ea:f5:
6b:3c:c5:06:9e:5e:9e:59:ef:cc:3b:32:03:6b:8e:
b8:c9:6f:80:1a:59:39:7e:5c:61:5c:a3:fa:c1:19:
97:e7:5f:86:f2:e0:df:c4:bd:b0:58:5a:5d:20:07:
ac:43:a1:d2:cb:2e:11:1c:7c:4f:17:9f:13:e4:06:
27:0e:41:76:a7:5c:ea:f3:54:c9:cf:e2:9c:0e:10:
f9:2c:cd:93:58:96:ac:8b:6f:01:3e:0d:0b:82:76:
bc:fd:03:62:71:17:00:9c:b9:e8:b3:fe:68:06:c7:
cd:07:ba:5d:b8:4b:6f:16:56:49:91:7d:cf:37:5e:
2b:df:d2:69:45:3f:a6:c7:fd:86:d5:b8:3d:58:77:
da:f5:75:93:38:9f:ba:c9:b1:b4:2d:1a:09:50:8c:
c4:8a:6c:62:dc:ed:e5:d9:e7:a7:f7:71:db:8e:fb:
62:57:87:3f:fc:f0:4c:83:25:c4:7d:e6:c9:5b:ca:
d6:01:05:0a:ff:8f:0e:fd:c7:f6:91:1a:46:53:2f:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:BF:3D:B0:45:22:6A:82:52:FB:26:C9:98:6B:F8:CF:B9:F1:96
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/USq_PbBFImqCUvsmyZhr-M-58ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.159.0/24
137.31.165.0-137.31.166.255
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:ee:48:94:2f:44:af:ab:ac:d9:8e:af:ce:ae:5d:d9:1f:05:
b0:ed:40:e2:a2:30:4b:d6:0c:31:d3:22:1b:ca:92:ab:64:f7:
2d:87:43:b5:2a:cc:76:e5:2a:d7:e7:5f:0b:04:b0:c0:bb:bf:
c9:52:56:b8:e6:26:c8:e3:2a:57:d2:28:f7:fb:de:49:3f:a4:
e6:dc:e8:7a:86:e4:98:86:3f:82:fc:88:fe:47:01:82:23:a4:
1a:03:54:20:aa:ba:a9:6f:7c:41:68:58:b9:12:6a:c4:a7:15:
88:2f:46:d7:cb:5e:b6:58:24:29:ab:ed:8d:b1:02:b7:a9:6f:
aa:af:5c:33:ad:5d:80:8a:f4:ad:6d:0e:98:d1:be:26:dd:0a:
93:6e:6e:da:fc:29:8b:ec:bb:cc:43:e2:d7:fc:d9:6d:4b:31:
22:fe:bf:d0:b2:03:ca:4a:01:77:89:49:17:d6:87:5f:5b:07:
aa:33:38:6c:ec:e4:ac:4e:82:96:21:48:81:54:29:bb:a1:16:
82:4f:f3:6a:e1:f1:e0:54:e2:0a:b7:7c:6f:04:9c:16:7b:85:
24:89:39:ae:a5:e7:f8:3d:9d:ea:71:9f:99:65:1b:d7:10:f3:
1e:c7:f2:8a:c6:d0:39:42:fe:45:56:68:40:30:c6:ba:3a:1d:
ad:da:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:54:30 2026 by rpki-client