Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/TIqSysADxONI-e4Fp_M_6SFBM2w.roa
File: TIqSysADxONI-e4Fp_M_6SFBM2w.roa (raw, json)
Hash identifier: A665VAKSazGUi81WSJfVeWUCAVUVIKN1Dr/P8sIzfrM=
Subject key identifier: 4C:8A:92:CA:C0:03:C4:E3:48:F9:EE:05:A7:F3:3F:E9:21:41:33:6C
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0632F038F893140B56F6DDCB2F9E206CA
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/TIqSysADxONI-e4Fp_M_6SFBM2w.roa
Signing time: Wed 02 Sep 2026 17:33:40 +0000
ROA not before: Wed 02 Sep 2026 17:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
137.31.4.0/24 maxlen: 24
137.31.5.0/24 maxlen: 24
137.31.6.0/24 maxlen: 24
137.31.7.0/24 maxlen: 24
137.31.96.0/24 maxlen: 24
137.31.97.0/24 maxlen: 24
137.31.98.0/24 maxlen: 24
137.31.159.0/24 maxlen: 24
137.31.165.0/24 maxlen: 24
137.31.166.0/24 maxlen: 24
137.31.192.0/24 maxlen: 24
137.31.193.0/24 maxlen: 24
137.31.194.0/24 maxlen: 24
137.31.195.0/24 maxlen: 24
137.31.196.0/24 maxlen: 24
137.31.197.0/24 maxlen: 24
137.31.255.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
159.254.80.0/24 maxlen: 24
159.254.81.0/24 maxlen: 24
159.254.82.0/24 maxlen: 24
159.254.186.0/24 maxlen: 24
159.254.187.0/24 maxlen: 24
159.254.188.0/24 maxlen: 24
159.254.189.0/24 maxlen: 24
159.254.190.0/24 maxlen: 24
159.254.191.0/24 maxlen: 24
159.254.200.0/24 maxlen: 24
159.254.201.0/24 maxlen: 24
159.254.207.0/24 maxlen: 24
159.254.208.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
2a03:eec0:3601::/48 maxlen: 48
2a03:eec0:3602::/48 maxlen: 48
2a03:eec0:3603::/48 maxlen: 48
2a03:eec0:3604::/48 maxlen: 48
2a03:eec0:3605::/48 maxlen: 48
2a03:eec0:3606::/48 maxlen: 48
2a03:eec0:3607::/48 maxlen: 48
2a03:eec0:3608::/48 maxlen: 48
2a03:eec0:3609::/48 maxlen: 48
2a03:eec0:360a::/48 maxlen: 48
2a03:eec0:360b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:2f:03:8f:89:31:40:b5:6f:6d:dc:b2:f9:e2:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 2 17:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c8a92cac003c4e348f9ee05a7f33fe92141336c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:03:10:5b:dc:55:51:44:e7:46:44:32:c4:
88:82:6f:b4:49:79:3c:d2:4c:1b:00:93:23:a8:e5:
56:e7:63:1f:c2:e0:a2:06:cc:8c:f5:8b:dd:99:96:
a5:49:bd:3c:f8:dd:b3:21:07:da:64:34:c5:b2:4b:
87:04:27:df:05:a5:16:30:c8:2b:45:04:a6:b5:6f:
e6:29:4f:d2:d1:e5:40:e3:c8:f5:16:69:3a:d5:54:
8b:20:5a:99:54:d7:d3:11:1b:46:fd:46:70:d7:76:
c9:5c:d6:d1:ec:20:63:ae:c4:c8:41:08:82:8a:9b:
9f:b5:ac:c5:73:e1:d5:83:9f:b2:e6:4b:df:f2:cc:
ad:1d:bb:e5:9f:93:bd:96:72:fa:34:b3:9a:38:4e:
75:ec:1a:c0:5d:78:e5:62:83:83:dd:67:1c:ed:f5:
b6:e0:c5:42:05:cf:3f:c9:70:ea:41:32:33:80:5a:
e3:6f:5c:24:89:d5:32:d9:a8:f3:62:e3:69:81:0a:
ee:70:df:30:ea:4a:99:32:15:31:a0:dd:69:07:1d:
ff:3f:fd:f2:8b:48:7a:3d:55:67:ee:21:3f:34:32:
b9:88:1f:b8:e2:c6:f9:b4:c7:56:dd:4e:cf:af:10:
55:be:fa:08:9e:cc:f7:bc:fd:b8:ad:a5:f7:7f:96:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:92:CA:C0:03:C4:E3:48:F9:EE:05:A7:F3:3F:E9:21:41:33:6C
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/TIqSysADxONI-e4Fp_M_6SFBM2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
137.31.4.0/22
137.31.96.0-137.31.98.255
137.31.159.0/24
137.31.165.0-137.31.166.255
137.31.192.0-137.31.197.255
137.31.255.0/24
159.254.0.0-159.254.12.255
159.254.80.0-159.254.82.255
159.254.186.0-159.254.191.255
159.254.200.0/23
159.254.207.0-159.254.208.255
194.9.116.0/24
IPv6:
2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:c6:58:a3:a8:75:ff:a7:35:41:d8:0a:d8:04:fd:70:be:92:
1b:0a:e2:8d:4c:f3:db:ac:41:40:cc:39:7c:87:dc:26:73:a5:
c2:39:55:4f:2b:c7:12:fe:96:eb:df:6c:26:26:b7:ea:a1:f6:
18:39:50:48:5a:ab:32:05:70:dd:db:1d:f5:bb:de:76:c7:3d:
4e:c3:f3:7e:3c:92:f0:88:bc:32:5e:9c:cc:3c:13:8f:72:30:
4a:2d:19:3f:bf:7a:31:b2:6d:b8:9d:dd:f8:d2:ca:eb:09:66:
66:5a:2b:42:f5:c4:55:71:ca:a7:2e:d5:67:85:ec:42:64:7e:
d1:f0:82:a6:cf:02:42:85:44:02:90:cd:a8:b7:d5:20:21:a8:
6b:0b:a7:5c:40:57:23:a0:c2:a0:f2:40:be:64:49:df:21:74:
70:4b:5e:3c:63:51:22:7e:b6:1e:9a:2c:4a:64:a4:b6:47:91:
25:71:4c:c5:8e:16:70:21:f1:32:89:f6:ce:8f:ce:cf:6f:5d:
65:9f:a6:0b:7c:0b:9f:0f:26:d4:d1:9c:71:d9:34:72:01:dc:
c0:93:5d:63:31:1b:ab:d9:89:77:05:64:4f:10:8b:d4:15:f0:
d6:0b:35:2b:d2:d6:54:a3:f1:b9:0d:e6:18:d0:7b:dc:cf:2f:
a2:ae:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:19 2026 by rpki-client