Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/16CYkQLw9Nw8aNtmfLiGrF8wgfg.roa
File: 16CYkQLw9Nw8aNtmfLiGrF8wgfg.roa (raw, json)
Hash identifier: xr/A4coHBTm8TU/3l/Dm4bORzyoYdyuKNh63jobLwEc=
Subject key identifier: D7:A0:98:91:02:F0:F4:DC:3C:68:DB:66:7C:B8:86:AC:5F:30:81:F8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0199639884C0C9C35F6C97FF2DF64C4E6492
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/16CYkQLw9Nw8aNtmfLiGrF8wgfg.roa
Signing time: Fri 19 Sep 2025 20:09:23 +0000
ROA not before: Fri 19 Sep 2025 20:09:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5431
IP address blocks: 147.45.66.0/23 maxlen: 24
185.103.100.0/22 maxlen: 24
193.233.74.0/23 maxlen: 24
193.233.80.0/24 maxlen: 24
193.233.165.0/24 maxlen: 24
193.233.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:98:84:c0:c9:c3:5f:6c:97:ff:2d:f6:4c:4e:64:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 19 20:09:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a0989102f0f4dc3c68db667cb886ac5f3081f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:4c:91:b0:73:2d:ac:44:13:8c:02:09:63:
23:9d:95:ac:57:03:95:23:33:aa:a8:b7:57:0d:ea:
12:a6:c4:8c:08:1b:b5:ee:4e:ad:d1:ae:2e:df:c5:
4d:ec:e5:17:89:9a:45:d1:4c:de:c3:69:27:90:7f:
15:d7:09:d2:92:6d:0f:c0:71:fa:54:10:e5:b1:7d:
61:e6:f4:c4:58:67:b9:25:ed:dc:e5:54:a9:fd:c7:
85:0c:d0:73:99:c8:47:ca:9d:26:bf:1b:9b:93:9b:
6d:cd:a6:e8:59:08:d7:e6:d6:4a:15:1a:25:09:f9:
ac:3e:d8:60:5b:41:27:6c:42:83:55:af:84:be:62:
e5:9d:49:00:81:36:71:76:72:77:24:c7:58:1c:38:
ff:11:94:9a:98:87:c0:c5:8e:93:0a:25:15:4e:8c:
39:b7:87:df:6d:b1:f0:71:18:8f:eb:7c:f5:4a:98:
5b:be:60:74:2f:c6:63:59:bb:49:d8:40:05:af:1d:
9c:3f:20:43:65:63:22:d1:12:ce:73:55:20:1b:90:
49:20:30:d5:64:99:1b:80:05:88:1b:3c:1a:96:21:
b1:43:bd:57:7b:74:ca:66:3e:0b:54:24:73:5f:59:
74:05:59:b3:5d:ec:d6:0b:b0:2a:d7:c2:87:ad:97:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:98:91:02:F0:F4:DC:3C:68:DB:66:7C:B8:86:AC:5F:30:81:F8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/16CYkQLw9Nw8aNtmfLiGrF8wgfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.66.0/23
185.103.100.0/22
193.233.74.0/23
193.233.80.0/24
193.233.165.0/24
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
73:a7:a0:b1:88:96:ae:77:34:77:5b:26:62:7f:17:cf:de:46:
72:45:30:99:62:8a:7a:bd:72:a1:9d:a1:98:52:24:22:f8:bf:
ae:df:1f:7f:95:c4:b4:72:0f:e0:ad:ec:ed:40:b4:ed:53:2e:
d4:37:e1:5b:bb:c0:76:cc:7b:30:0f:79:12:57:74:18:e7:fd:
80:9d:04:03:5c:53:f6:7c:11:aa:76:ca:52:95:cb:42:89:df:
bf:e5:c3:c3:2b:97:30:e0:f1:0f:15:9c:87:3a:01:a9:81:24:
74:85:d9:bc:db:41:71:72:61:b4:ec:cb:20:68:ce:6c:0e:90:
a5:b1:e8:82:6f:40:3d:10:7b:8f:b4:06:a4:aa:64:0b:9d:7f:
d9:f7:a7:db:cb:93:95:44:21:00:89:65:b3:89:d3:c1:6f:ed:
d4:83:8e:49:13:17:f3:f0:23:b6:d1:6b:d7:47:cf:ee:ae:d8:
0c:9f:78:7b:86:b1:64:94:9a:23:f2:03:c8:15:ef:af:10:1b:
a6:a9:84:07:5c:84:21:f7:de:65:77:42:d7:9e:fc:0c:af:a8:
e2:9c:7b:64:c7:5a:5b:b1:23:97:36:62:83:f6:de:5b:50:7d:
14:4c:0d:8c:4c:ba:e6:4b:8d:05:32:f0:53:92:25:11:51:e2:
8f:a5:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:54 2025 by rpki-client