Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/kw9CUacJaHnXXDA6SiegmShaBgg.roa
File: kw9CUacJaHnXXDA6SiegmShaBgg.roa (raw, json)
Hash identifier: 5fFQ4oxcoXjsXkXsvEeSalm4fLE5QxvAQY7+dMRnCk4=
Subject key identifier: 93:0F:42:51:A7:09:68:79:D7:5C:30:3A:4A:27:A0:99:28:5A:06:08
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A145BDFC067B487F869712A15CAB8D3951
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/kw9CUacJaHnXXDA6SiegmShaBgg.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.159.0/24 maxlen: 24
137.31.165.0/24 maxlen: 24
137.31.166.0/24 maxlen: 24
137.31.192.0/24 maxlen: 24
137.31.193.0/24 maxlen: 24
137.31.194.0/24 maxlen: 24
137.31.195.0/24 maxlen: 24
137.31.196.0/24 maxlen: 24
137.31.197.0/24 maxlen: 24
137.31.218.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fc:06:7b:48:7f:86:97:12:a1:5c:ab:8d:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=930f4251a7096879d75c303a4a27a099285a0608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:9d:2a:da:7e:a3:7e:74:cf:8e:2f:b4:85:
41:14:ad:f7:5a:ad:43:a0:4a:95:29:44:0f:99:57:
6d:e0:1a:21:23:ae:bb:d3:fa:3e:48:91:b6:88:46:
48:4b:c3:b4:f8:a2:d8:1c:47:e2:bd:0b:a1:1d:88:
30:d9:38:05:8f:25:ea:93:9e:8f:d7:f2:c1:fa:f8:
91:d6:36:cd:48:54:aa:94:66:60:ed:7d:d0:50:ad:
29:51:16:da:91:13:a2:65:f7:c6:78:51:ee:ae:da:
93:93:fe:d2:0a:26:fc:77:be:72:85:aa:2a:55:93:
74:61:6d:39:e8:b8:65:93:fb:16:94:12:3e:73:e2:
9e:d4:a5:92:b5:bd:85:a3:a3:64:05:a3:58:04:ca:
ca:fa:90:4c:8c:79:25:87:67:38:7a:38:eb:1a:0c:
a4:43:75:6a:16:40:7b:db:ed:1f:9d:75:cb:36:94:
b8:13:34:a7:dc:7e:95:0a:ff:2a:ba:dd:cb:21:83:
95:be:2c:a9:24:ef:41:16:3d:9e:3a:58:38:a1:25:
6a:c4:1e:0a:99:ba:a0:bb:44:bd:62:8e:8f:a9:6d:
05:7d:70:05:a4:8b:87:9e:9e:de:f8:84:e0:fa:0d:
22:e6:8e:79:03:66:90:04:e7:55:d9:d2:7c:f9:62:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:42:51:A7:09:68:79:D7:5C:30:3A:4A:27:A0:99:28:5A:06:08
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/kw9CUacJaHnXXDA6SiegmShaBgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.159.0/24
137.31.165.0-137.31.166.255
137.31.192.0-137.31.197.255
137.31.218.0/24
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:6e:46:d4:76:be:3c:e5:d2:ec:4a:1d:7a:cb:60:17:d2:7e:
e5:4b:3e:61:31:f7:ac:cb:f9:f5:f7:f2:78:f5:77:ef:02:dd:
33:ec:fa:64:95:25:78:52:91:c5:23:27:75:a7:8a:02:f1:21:
ae:03:f2:88:82:7b:2f:15:c4:9d:68:46:c3:a4:15:9a:4c:7f:
0a:73:ba:cb:b3:cc:f0:a7:eb:46:66:43:f3:07:d2:2d:7d:b5:
eb:b3:ec:05:67:b6:8e:62:ea:4a:9b:ca:df:41:11:ad:b1:bc:
72:8a:fe:3c:c8:34:d0:1f:58:70:69:b8:0e:11:2b:27:9d:4e:
bf:33:af:2f:c4:78:9b:5b:a4:38:70:30:fe:e5:1c:58:d1:81:
d3:77:d7:e6:34:31:ec:88:ab:88:dd:38:8b:4c:a2:f6:a1:80:
43:15:e9:a3:38:81:a2:c7:5d:b9:74:6a:93:55:3a:43:31:1d:
84:b1:44:5b:2e:34:a2:e0:96:fc:83:01:69:b9:5c:11:0f:66:
fc:d3:6b:5f:5f:36:89:51:c2:64:ad:76:8c:b0:0b:d5:1f:f1:
45:ff:f7:62:b2:18:40:e3:69:8b:85:ca:c1:f5:34:e3:bc:c2:
cc:dc:f3:9f:dc:15:7a:35:0d:55:3b:e1:0d:d6:8a:f2:52:9c:
74:5e:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:13 2026 by rpki-client