Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ACS-__FqDyGCZcMy1HK2ewVMHGs.roa
File: ACS-__FqDyGCZcMy1HK2ewVMHGs.roa (raw, json)
Hash identifier: 5E2J6UJ1ya1aVDPkvOkHi2T03ZX+YD0dmb7LH7AD3CY=
Subject key identifier: 00:24:BE:FF:F1:6A:0F:21:82:65:C3:32:D4:72:B6:7B:05:4C:1C:6B
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A12CBC39558EDA6186D05F5E4F3811FA40
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ACS-__FqDyGCZcMy1HK2ewVMHGs.roa
Signing time: Sun 11 Oct 2026 20:51:35 +0000
ROA not before: Sun 11 Oct 2026 20:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51264
IP address blocks: 95.164.90.0/24 maxlen: 24
95.164.92.0/23 maxlen: 24
2a10:eb80:8::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:bc:39:55:8e:da:61:86:d0:5f:5e:4f:38:11:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 11 20:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0024befff16a0f218265c332d472b67b054c1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:d9:4f:ae:c3:cf:83:d4:31:79:06:15:f0:
9d:73:96:0c:c5:6e:70:bd:16:42:7b:82:88:9d:a5:
c4:86:1c:b2:20:a8:73:05:68:b5:64:fc:93:b0:74:
24:83:73:45:d6:e3:39:41:9c:1a:a9:ec:5e:76:a0:
93:7c:7a:5b:5d:7e:50:16:d2:d6:a4:97:78:01:43:
14:79:b8:33:4c:26:ad:af:ae:5d:89:95:93:17:4e:
c9:bb:e2:03:36:49:12:67:8f:10:85:f4:73:1b:4b:
66:9f:a9:7b:16:90:ca:ff:30:04:a3:18:2d:99:10:
87:a8:32:10:00:19:d8:d3:47:c3:5c:f1:38:26:29:
c0:1b:c3:92:3f:98:d6:4d:51:a9:43:eb:35:c6:ba:
0c:af:9a:8d:5c:0c:4a:18:0e:80:58:9b:a9:54:ab:
fc:a3:66:74:85:a2:90:01:fe:d0:53:c9:77:21:01:
95:35:6f:44:80:f1:4a:ec:6f:ff:da:93:13:53:c4:
29:af:df:5b:fb:0d:98:e4:d2:b9:18:11:cf:24:3f:
78:38:cf:47:fc:e2:9d:13:de:f7:60:20:db:89:b1:
0d:cd:91:ee:1d:1f:9e:e5:d7:0e:33:e7:2a:e2:54:
2a:28:ab:86:7b:f1:80:c6:57:31:ca:8e:a5:69:d5:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:BE:FF:F1:6A:0F:21:82:65:C3:32:D4:72:B6:7B:05:4C:1C:6B
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ACS-__FqDyGCZcMy1HK2ewVMHGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.90.0/24
95.164.92.0/23
IPv6:
2a10:eb80:8::/45
Signature Algorithm: sha256WithRSAEncryption
39:fa:34:de:73:66:b0:db:07:29:b9:7c:ca:fc:89:51:72:22:
e2:4d:89:b6:6c:1b:e0:f8:e8:a2:fc:c3:2b:de:fb:e2:17:a5:
0a:0b:53:76:47:07:a0:fd:82:39:cb:cd:9c:b8:5e:de:89:7b:
91:15:32:47:1c:3f:50:ee:b3:54:dd:4e:20:3e:05:4e:ff:35:
34:a7:37:19:40:ad:3d:2a:c0:bd:b0:d5:2d:15:53:b7:33:73:
06:73:a1:a8:98:ad:44:a3:9e:4f:d0:9b:99:86:94:88:bc:55:
9d:32:c0:92:ad:da:31:08:46:6c:ad:f0:92:de:5d:92:eb:94:
bd:51:05:8f:0b:3d:67:90:0a:a9:a7:90:05:9c:48:54:38:af:
04:cd:1d:dc:29:07:23:94:cf:17:0c:0d:a0:0f:0e:0f:5d:db:
28:be:84:67:aa:65:a3:45:ab:b3:e3:9e:ae:b8:7e:62:72:ef:
30:04:31:d2:58:f5:eb:7c:13:a0:f8:b3:f8:8f:53:e5:3f:75:
b3:9a:39:31:aa:12:9a:c3:cb:32:8b:7b:f6:8f:c4:89:b1:c5:
ec:5f:d4:eb:db:cb:2e:1e:6f:35:1a:bd:b7:21:fe:db:8d:5e:
a4:9d:86:b0:2d:fe:f3:bd:0a:78:ac:ca:15:73:bc:f2:d6:de:
c6:fa:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:51 2026 by rpki-client