Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rG8sgKlcR_co060cLGFIgui5OUs.roa
File: rG8sgKlcR_co060cLGFIgui5OUs.roa (raw, json)
Hash identifier: htQfl8MEseiQmntk60qe7em849zL881OoDWkNKzAoNQ=
Subject key identifier: AC:6F:2C:80:A9:5C:47:F7:28:D3:AD:1C:2C:61:48:82:E8:B9:39:4B
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01994E29A33DC92EE78E1D6611CB642DB367
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rG8sgKlcR_co060cLGFIgui5OUs.roa
Signing time: Mon 15 Sep 2025 16:16:15 +0000
ROA not before: Mon 15 Sep 2025 16:16:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22616
IP address blocks: 147.161.128.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.62.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:29:a3:3d:c9:2e:e7:8e:1d:66:11:cb:64:2d:b3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 15 16:16:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac6f2c80a95c47f728d3ad1c2c614882e8b9394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:00:4f:81:cb:4a:c3:e3:99:8d:47:ac:fe:
ea:1f:b3:cc:56:fe:ea:d1:1b:98:c3:62:7d:cd:1f:
d8:81:d1:3f:00:5e:4a:5a:bb:ed:20:02:2b:40:ef:
51:7c:b6:fc:97:43:ee:86:37:3f:b7:cf:ba:a5:72:
30:a4:67:11:72:96:d1:99:89:bc:7a:b2:be:ac:5d:
81:28:48:e6:f1:cb:35:cb:bc:51:84:03:6c:57:29:
f0:7b:24:f0:35:44:9d:19:b8:5f:61:5c:a5:1a:61:
67:13:81:94:8c:22:66:06:57:1d:37:98:52:75:70:
f2:79:e5:09:a6:32:61:69:d0:41:88:e9:11:0f:8f:
f6:f9:46:78:ce:f1:92:20:77:da:0e:9a:6e:cc:77:
69:16:78:58:34:61:6c:b7:57:f3:42:20:a3:a8:0d:
ca:70:63:47:1b:65:9f:80:e0:80:0e:3b:ff:32:e8:
f9:2e:aa:e1:8e:b6:6d:d6:d5:ec:16:90:19:ce:24:
23:a5:1e:1e:7c:11:a8:96:02:e1:e8:2c:a4:48:f0:
62:de:b2:43:5b:d8:80:fa:63:4f:ec:78:4e:c7:12:
b9:13:aa:f3:d2:e1:c2:4d:df:11:d3:f8:f8:fe:0d:
60:24:8b:cf:24:34:a4:be:19:f7:cc:43:ab:4f:28:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6F:2C:80:A9:5C:47:F7:28:D3:AD:1C:2C:61:48:82:E8:B9:39:4B
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rG8sgKlcR_co060cLGFIgui5OUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.128.0/23
159.254.60.0-159.254.67.255
159.254.69.0/24
164.137.4.0-164.137.53.255
IPv6:
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:b8:f9:c0:a7:ff:f1:80:51:9f:03:57:d7:26:d5:eb:03:52:
a6:12:6d:3e:de:24:47:72:f9:67:33:61:2d:e2:86:eb:26:85:
fc:ea:e1:cc:70:30:84:17:54:52:5d:58:dd:ab:a7:86:6b:c4:
0c:ef:3e:d3:95:97:ab:08:5b:70:0e:60:d3:c7:8a:2d:b9:c0:
ca:bd:5b:9a:ac:19:09:de:d0:a9:08:be:36:bc:4b:ae:ce:e6:
a2:d5:58:67:c9:69:af:2b:39:6f:64:b8:3d:4e:8e:78:bc:0a:
a2:30:78:4e:63:21:cb:ea:db:cf:6a:9c:d9:db:9e:1c:92:9e:
c0:72:79:e7:db:8c:f0:8f:f8:ee:93:cf:e8:48:9c:64:ce:e8:
fe:b2:77:7d:31:b3:42:91:d4:47:dd:a3:e7:75:9c:54:7c:6b:
92:3d:98:b4:c1:87:44:f5:6d:4b:1e:f4:a4:58:26:c8:c1:01:
95:d9:b5:d1:21:94:d6:93:ed:3f:f1:ca:1a:d2:18:a6:4c:61:
2c:4a:c2:03:f5:ff:be:0f:8e:b8:16:36:9d:73:da:09:64:b3:
cf:3c:dd:77:b1:a7:13:55:6a:6f:88:96:d8:1a:d1:12:57:40:
43:ed:ba:d0:e3:03:37:3f:d7:31:30:0a:d7:d7:0f:e0:10:57:
16:5f:d4:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 16 06:35:07 2025 by rpki-client