Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GgggIPfkYS-aCaS6_RUFK4D44XM.roa
File: GgggIPfkYS-aCaS6_RUFK4D44XM.roa (raw, json)
Hash identifier: 8khK10+/3wPqQcz0jrSLo0lEKngm2aOdiKH0v96hFAw=
Subject key identifier: 1A:08:20:20:F7:E4:61:2F:9A:09:A4:BA:FD:15:05:2B:80:F8:E1:73
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A17CFEA6BF24C0642790E7A8275E4B14CC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GgggIPfkYS-aCaS6_RUFK4D44XM.roa
Signing time: Tue 27 Oct 2026 10:53:45 +0000
ROA not before: Tue 27 Oct 2026 10:53:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.60.0/24 maxlen: 24
147.45.66.0/23 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.126.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
147.45.217.0/24 maxlen: 24
147.45.220.0/24 maxlen: 24
147.45.221.0/24 maxlen: 24
193.233.74.0/24 maxlen: 24
193.233.83.0/24 maxlen: 24
193.233.127.0/24 maxlen: 24
193.233.198.0/23 maxlen: 24
193.233.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:fe:a6:bf:24:c0:64:27:90:e7:a8:27:5e:4b:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 27 10:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a082020f7e4612f9a09a4bafd15052b80f8e173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:5a:3e:09:cc:f3:46:73:58:1a:09:55:95:
de:9d:58:d9:21:40:36:5b:d5:20:d5:0c:d5:42:b5:
26:77:5b:5b:67:b5:be:a6:da:77:99:ba:4e:bb:86:
d3:52:43:36:6b:d4:5b:1b:98:89:06:4d:dc:18:72:
63:12:d7:8d:1a:21:45:b2:86:b8:32:cf:c7:39:f9:
21:04:a3:b0:94:a9:82:ba:9d:6f:b5:5e:6b:c1:56:
d8:27:98:bc:51:33:a4:73:60:9a:bf:c0:0a:e7:73:
d6:57:44:8e:63:e1:6d:84:cc:3d:a2:d3:15:85:1a:
e2:27:71:13:58:36:89:26:9f:f8:f5:9b:ee:32:73:
c1:67:bf:cd:6b:d2:5f:46:16:1b:b2:a8:b4:bb:c8:
2b:e4:c1:20:cc:ed:5f:c5:29:ab:9c:e5:09:7a:d7:
98:e7:91:fd:d8:1e:18:29:6e:83:cc:fc:c2:a7:5d:
f4:1f:6d:8d:89:54:be:23:b7:64:8a:93:fa:15:9f:
f8:4a:89:81:0e:4f:45:16:49:e2:b4:88:c0:ae:19:
75:28:10:aa:6d:24:39:3d:5b:42:01:19:58:2e:b4:
54:95:0b:46:06:31:57:cc:7f:79:81:63:e9:53:76:
2c:c8:1b:b3:6a:35:c5:ea:78:34:07:e6:48:f7:5f:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:20:20:F7:E4:61:2F:9A:09:A4:BA:FD:15:05:2B:80:F8:E1:73
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GgggIPfkYS-aCaS6_RUFK4D44XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.60.0/24
147.45.66.0/23
147.45.84.0/22
147.45.116.0/24
147.45.126.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
147.45.217.0/24
147.45.220.0/23
193.233.74.0/24
193.233.83.0/24
193.233.127.0/24
193.233.198.0/23
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
97:23:39:14:b9:66:82:bd:6a:4d:d8:44:36:59:b6:c2:81:80:
ec:98:9e:a4:2d:70:53:a2:79:9a:ec:75:91:9a:26:6b:c6:17:
8e:fb:47:b1:72:55:ad:71:c8:80:b1:e0:c0:f5:bc:02:db:e4:
e8:66:36:64:00:bf:d6:41:97:5a:de:e1:b8:52:92:db:07:ab:
6f:27:0a:5c:0f:39:ba:4e:fc:18:d2:04:59:af:98:93:7c:ee:
6f:c9:f7:44:d3:d2:b0:25:2f:6a:39:54:67:dd:60:fc:26:99:
8d:c2:0b:59:84:e0:3e:f9:a0:b8:b8:e5:f2:2e:ff:bc:85:32:
91:38:37:73:8b:17:37:a3:b8:b6:ac:ee:99:30:a7:2a:fe:73:
c7:3d:f8:a9:55:a3:a3:d5:10:47:09:1c:95:61:f2:e9:54:48:
3c:4b:64:ec:3d:4c:f2:08:b1:ce:e6:f9:37:5b:78:6a:40:82:
cd:ee:fa:b5:15:c9:a9:a6:a2:2c:b5:3c:68:56:dd:8b:29:dd:
38:16:5b:21:f0:e7:59:1b:13:80:fa:77:eb:49:f9:78:f0:6d:
3e:71:0a:f9:7e:9e:b2:50:e1:17:cd:91:51:10:75:c5:6c:5e:
eb:a6:ed:03:16:06:9f:70:30:a3:be:29:07:f4:2e:e2:64:19:
ab:2d:6a:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:49:08 2026 by rpki-client