Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/v6Pv-kEkRrfjzOCed_kUA65966Y.roa
File: v6Pv-kEkRrfjzOCed_kUA65966Y.roa (raw, json)
Hash identifier: CoHSYThzOG+8tdxTbQ2/cIgxRpJ0V5Salz29wa/zebQ=
Subject key identifier: BF:A3:EF:FA:41:24:46:B7:E3:CC:E0:9E:77:F9:14:03:AE:7D:EB:A6
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 01A0AE68428ACAE014FA8CE2EE48C2214214
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/v6Pv-kEkRrfjzOCed_kUA65966Y.roa
Signing time: Thu 17 Sep 2026 08:07:43 +0000
ROA not before: Thu 17 Sep 2026 08:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 145.11.16.0/21 maxlen: 21
157.173.16.0/21 maxlen: 21
157.173.16.0/24 maxlen: 24
157.173.20.0/24 maxlen: 24
157.173.21.0/24 maxlen: 24
157.173.25.0/24 maxlen: 24
157.173.26.0/24 maxlen: 24
157.173.27.0/24 maxlen: 24
157.173.29.0/24 maxlen: 24
157.173.30.0/24 maxlen: 24
185.207.136.0/24 maxlen: 24
185.207.137.0/24 maxlen: 24
185.207.138.0/24 maxlen: 24
185.207.139.0/24 maxlen: 24
188.137.152.0/24 maxlen: 24
188.137.153.0/24 maxlen: 24
188.137.154.0/24 maxlen: 24
188.137.156.0/24 maxlen: 24
188.137.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:68:42:8a:ca:e0:14:fa:8c:e2:ee:48:c2:21:42:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Sep 17 08:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfa3effa412446b7e3cce09e77f91403ae7deba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:6c:c9:30:1f:9b:7d:b6:74:de:1d:4a:0e:
10:54:db:eb:57:7a:c0:d2:45:69:d3:45:98:47:90:
52:d0:eb:5e:b0:09:ca:b1:22:95:19:81:45:d7:b7:
64:b8:f1:19:08:38:0a:ca:69:1d:1c:75:97:8e:13:
47:30:51:d7:be:f5:bc:97:3d:44:4b:e0:93:e0:73:
9d:2c:c1:72:03:a6:9b:3d:7c:83:ed:cf:a5:16:3d:
15:a9:c1:1d:0e:fd:be:86:ac:2e:a3:b3:09:83:87:
ab:67:ae:b5:d6:28:b5:29:56:71:8f:c4:0f:13:32:
1b:b8:5b:c9:f4:53:c3:cb:16:0d:5b:f8:c9:fe:89:
e0:83:d1:7b:16:6a:45:cc:ff:30:16:10:e2:fe:61:
46:b1:f1:49:0f:24:26:0b:99:2e:6e:d9:04:91:1b:
cf:e5:48:2b:d8:5b:a5:6f:cc:36:bc:b8:b1:cd:a7:
25:c8:bc:33:32:70:1c:0d:de:d1:26:97:05:c1:31:
6c:78:f6:93:6f:70:45:9b:81:a4:ab:23:ec:8f:3d:
f8:00:f1:80:21:c1:38:ce:9e:b6:bc:76:9d:5c:f3:
2d:05:3f:95:5e:25:01:57:23:d0:be:9c:37:e2:26:
16:2f:ee:05:03:4b:af:27:e9:04:ce:98:7d:a1:d3:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:EF:FA:41:24:46:B7:E3:CC:E0:9E:77:F9:14:03:AE:7D:EB:A6
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/v6Pv-kEkRrfjzOCed_kUA65966Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.16.0/21
157.173.16.0/21
157.173.25.0-157.173.27.255
157.173.29.0-157.173.30.255
185.207.136.0/22
188.137.152.0-188.137.154.255
188.137.156.0/23
Signature Algorithm: sha256WithRSAEncryption
73:e0:b4:23:15:36:82:a5:0e:35:2b:66:d4:7a:1f:39:ef:b9:
36:e0:cf:4d:3b:0c:1c:d4:2f:a3:7b:13:98:e8:c9:bb:b9:b4:
19:52:e8:69:38:28:23:20:ec:b4:01:1f:dc:51:18:eb:ef:45:
2b:b2:d6:f2:8e:bd:49:b8:3b:9a:f0:64:8c:f9:43:66:12:b6:
91:9d:d1:ec:0c:d2:80:15:b7:4c:43:1a:41:5a:43:10:7a:8c:
af:a2:64:4a:f5:5e:bb:e7:b0:f3:7e:84:44:da:93:50:fa:aa:
a3:f1:4b:b4:4a:73:39:aa:b7:4e:39:74:39:f6:a8:37:1f:86:
b8:90:6b:b3:fe:1f:c9:b5:7a:32:8a:e1:9a:d3:15:ab:19:e8:
84:a0:67:b4:f5:3a:b1:44:b6:a0:31:c2:08:38:ba:5f:23:60:
33:15:d4:2d:6a:81:b0:0a:14:2b:76:f2:18:6d:85:81:ce:7e:
8e:e5:d9:ff:d2:80:d1:cd:7b:88:10:eb:17:e8:d9:04:ca:df:
3b:7b:27:57:16:50:15:bf:87:09:21:d6:0a:95:7b:72:c4:d1:
b9:ea:ce:de:4f:69:bc:43:36:f5:ff:29:f6:c6:5d:14:bc:a2:
36:0b:32:e0:74:3c:4b:63:c5:4f:a4:f6:85:db:d0:03:ea:48:
61:41:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:56 2026 by rpki-client