Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ACGjb0Mhintf3niShjVz5gjFo7k.roa
File: ACGjb0Mhintf3niShjVz5gjFo7k.roa (raw, json)
Hash identifier: OY3tMeUgCFAya5AYL9vylvvV1EQ2iWlJKOpYWshTRwk=
Subject key identifier: 00:21:A3:6F:43:21:8A:7B:5F:DE:78:92:86:35:73:E6:08:C5:A3:B9
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01A1888A57D024F51F8E318228E067577D99
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ACGjb0Mhintf3niShjVz5gjFo7k.roa
Signing time: Thu 29 Oct 2026 16:42:10 +0000
ROA not before: Thu 29 Oct 2026 16:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.136.184.0/22 maxlen: 24
62.106.75.0/24 maxlen: 24
62.133.34.0/24 maxlen: 24
77.75.225.0/24 maxlen: 24
79.110.231.0/24 maxlen: 24
91.213.17.0/24 maxlen: 24
146.19.112.0/24 maxlen: 24
178.212.76.0/24 maxlen: 24
185.255.54.0/24 maxlen: 24
212.23.197.0/24 maxlen: 24
213.232.238.0/24 maxlen: 24
2a0b:4080::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:8a:57:d0:24:f5:1f:8e:31:82:28:e0:67:57:7d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 29 16:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0021a36f43218a7b5fde7892863573e608c5a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:9e:23:c2:61:d2:f9:32:9e:f9:32:e2:e1:
f0:d1:f5:00:09:d2:40:12:e8:7e:08:ea:2d:9f:10:
12:d5:e2:e4:bd:af:ca:b8:03:bb:0d:8d:2f:c8:a2:
9d:ca:fe:e4:4e:1c:a1:46:ae:a0:11:91:42:52:72:
ab:a2:01:6f:3d:5b:7c:cb:32:9c:8d:85:87:f3:a7:
8c:33:33:8e:36:5d:ab:44:0a:9b:d0:c4:e4:1b:79:
6e:0d:a5:3e:a6:15:3c:02:7d:ad:f3:e7:31:c9:1f:
6e:d6:16:bb:36:10:4d:9e:0e:76:02:35:3e:37:25:
7d:51:cb:cb:82:b8:6b:53:7d:7e:dc:8d:3f:e1:e5:
d4:04:b6:39:02:93:c0:f1:73:a5:57:1d:95:c7:ec:
a9:31:9a:6f:f0:c8:94:9b:95:72:16:05:7d:24:4f:
83:08:39:b4:f0:e6:50:97:f4:cf:5f:a1:73:b2:f6:
85:f9:66:7c:c5:d5:3a:35:b5:72:cc:8d:a7:d7:35:
73:a3:d9:48:86:f4:b8:cf:e7:ca:80:55:6e:e0:85:
9c:a9:81:69:7d:72:45:bb:05:bf:69:94:89:38:d2:
9e:da:46:54:6a:1e:ae:c9:a4:a1:a0:74:dc:7e:7a:
67:fc:ac:8d:df:3e:4f:9f:9f:43:b0:43:fb:6d:e2:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:A3:6F:43:21:8A:7B:5F:DE:78:92:86:35:73:E6:08:C5:A3:B9
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ACGjb0Mhintf3niShjVz5gjFo7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.184.0/22
62.106.75.0/24
62.133.34.0/24
77.75.225.0/24
79.110.231.0/24
91.213.17.0/24
146.19.112.0/24
178.212.76.0/24
185.255.54.0/24
212.23.197.0/24
213.232.238.0/24
IPv6:
2a0b:4080::/32
Signature Algorithm: sha256WithRSAEncryption
90:96:4c:42:2f:a6:bc:cb:34:99:c3:7e:54:57:ca:c7:d9:e4:
96:a7:5d:77:78:d0:0a:c9:d7:66:df:57:b7:90:3e:a1:77:56:
b9:f4:29:99:01:8f:29:ae:be:1a:29:b2:01:93:d7:a7:38:de:
50:0b:45:2e:33:b8:8e:56:0e:c4:ac:5d:fe:cb:46:71:53:3a:
ea:11:cc:55:1f:39:57:d8:bd:ea:1e:8e:70:11:3f:40:8f:b5:
0c:8f:5e:ed:fb:c1:8e:ee:c9:07:51:f8:7f:9e:6d:ae:05:fd:
51:aa:fa:2d:ab:2a:c0:a0:bd:bd:e2:1b:58:21:5d:b0:a3:d8:
fb:c1:65:39:78:dc:64:b4:84:50:67:95:25:22:65:09:30:86:
4e:1c:09:c4:0d:65:f7:f9:cb:ad:57:81:94:50:dc:14:d0:9d:
58:dc:96:05:11:e0:63:c8:bf:ca:a4:11:6d:ad:04:ec:b3:8e:
69:a8:0d:fc:5d:92:8a:6d:7c:09:d1:f9:56:49:03:ae:38:bf:
3a:7d:ee:17:0f:81:27:23:d9:8f:ad:87:ec:98:73:99:7c:22:
c1:f2:8e:7e:fe:6a:96:83:5d:6b:b5:6c:c6:1a:77:e3:bf:2e:
7f:4c:48:c4:42:50:16:81:c7:8e:03:59:ca:7b:c1:a5:48:38:
65:5c:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:52:10 2026 by rpki-client