Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/FuFk1abxIFK2Ejav-XvLTSDuMQw.roa
File: FuFk1abxIFK2Ejav-XvLTSDuMQw.roa (raw, json)
Hash identifier: 0xnqZLkHCC49vVlWKGLKg1BEJ0gcvfzLoWavQfMGkDg=
Subject key identifier: 16:E1:64:D5:A6:F1:20:52:B6:12:36:AF:F9:7B:CB:4D:20:EE:31:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01A08136B29D8FFE0620237BBDF1B69C5F10
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/FuFk1abxIFK2Ejav-XvLTSDuMQw.roa
Signing time: Tue 08 Sep 2026 13:30:40 +0000
ROA not before: Tue 08 Sep 2026 13:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2773
IP address blocks: 164.18.0.0/24 maxlen: 24
164.18.1.0/24 maxlen: 24
164.18.2.0/23 maxlen: 23
164.18.4.0/22 maxlen: 22
164.18.8.0/22 maxlen: 22
164.18.12.0/24 maxlen: 24
164.18.13.0/24 maxlen: 24
164.18.14.0/24 maxlen: 24
164.18.15.0/24 maxlen: 24
164.18.64.0/24 maxlen: 24
164.18.65.0/24 maxlen: 24
164.18.128.0/23 maxlen: 23
164.18.160.0/24 maxlen: 24
164.18.161.0/24 maxlen: 24
164.18.162.0/24 maxlen: 24
164.18.163.0/24 maxlen: 24
164.18.164.0/24 maxlen: 24
164.18.165.0/24 maxlen: 24
164.18.166.0/24 maxlen: 24
164.18.167.0/24 maxlen: 24
164.18.168.0/24 maxlen: 24
164.18.169.0/24 maxlen: 24
164.18.170.0/24 maxlen: 24
164.18.171.0/24 maxlen: 24
164.18.172.0/24 maxlen: 24
164.18.173.0/24 maxlen: 24
164.18.174.0/24 maxlen: 24
164.18.175.0/24 maxlen: 24
164.18.176.0/24 maxlen: 24
164.18.177.0/24 maxlen: 24
164.18.225.0/24 maxlen: 24
164.18.226.0/24 maxlen: 24
164.18.227.0/24 maxlen: 24
164.18.228.0/24 maxlen: 24
164.18.229.0/24 maxlen: 24
164.18.230.0/24 maxlen: 24
164.18.231.0/24 maxlen: 24
164.18.232.0/24 maxlen: 24
164.18.233.0/24 maxlen: 24
164.18.234.0/24 maxlen: 24
164.18.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:36:b2:9d:8f:fe:06:20:23:7b:bd:f1:b6:9c:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Sep 8 13:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16e164d5a6f12052b61236aff97bcb4d20ee310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:e9:d3:95:80:29:1a:ae:cd:23:81:4c:ff:
e3:62:2f:fe:f2:0d:f2:0f:5d:3d:75:7b:3d:a9:f3:
ed:d2:b8:28:84:98:d8:1b:47:e9:b2:bb:54:1f:90:
31:65:bb:63:c7:7f:c3:4b:d6:2a:ea:c2:8f:46:04:
6c:cd:86:48:e1:0d:7a:d0:24:c6:e6:ac:6c:01:3a:
df:14:6d:cb:e8:3c:37:2b:51:14:ed:b1:86:32:6a:
e8:45:10:3f:05:1f:51:ea:36:3f:3e:7c:cf:fb:07:
1d:27:70:d4:9a:72:13:44:5f:79:7f:44:e5:f5:b4:
9d:4c:fa:33:ea:0d:9e:e6:85:76:17:c7:a0:70:b1:
ad:c6:2e:11:b5:21:4b:11:e5:e6:65:7c:f4:d1:59:
fc:75:b0:ed:55:2e:ac:cd:a9:73:70:b4:92:c9:2f:
ff:e3:a7:f6:ce:3c:21:e7:fc:51:e2:d6:b1:94:09:
57:65:4b:a8:20:e0:b1:4e:26:3a:1b:4f:1b:01:b5:
48:2e:87:39:da:71:df:ff:58:e2:63:a8:28:0c:a1:
6a:87:2e:43:df:01:40:79:f0:18:2f:00:9d:ef:da:
ca:83:46:d0:3e:09:3e:2e:1c:a7:fc:73:64:f3:46:
9c:d6:10:41:5e:81:49:bc:81:f2:4d:c5:11:a9:15:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:64:D5:A6:F1:20:52:B6:12:36:AF:F9:7B:CB:4D:20:EE:31:0C
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/FuFk1abxIFK2Ejav-XvLTSDuMQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.18.0.0/20
164.18.64.0/23
164.18.128.0/23
164.18.160.0-164.18.177.255
164.18.225.0-164.18.235.255
Signature Algorithm: sha256WithRSAEncryption
40:ef:79:6f:36:a2:52:d7:9a:90:3e:25:14:54:2a:a2:81:02:
0e:32:c9:56:07:5e:36:08:18:84:7f:80:df:c2:dd:68:37:b3:
47:ca:2b:e0:94:d4:c8:ed:42:f8:d8:78:5a:cf:59:8f:38:c3:
f1:bf:11:ce:c2:27:4c:81:93:a2:bd:32:34:1c:f5:72:c1:1c:
f2:a1:cd:3f:60:b3:70:bf:44:f6:40:d3:6b:a7:cd:68:c1:9e:
6a:a6:8f:e3:90:2d:1b:ae:ee:6c:b5:47:cb:4d:e6:4e:06:be:
a0:e3:ed:ad:55:b6:5e:9d:59:9a:88:d7:1c:12:7b:aa:79:be:
01:f6:ff:30:6e:9f:6f:b7:b7:f6:46:68:f5:6f:c4:f6:f0:ca:
cf:b6:d9:4e:47:0a:f1:99:73:45:b1:f4:a0:c0:f3:d5:ef:c2:
e4:d9:dd:5e:f3:67:5e:ec:46:20:20:0b:b7:bd:01:8a:d6:b5:
ec:68:7a:aa:0e:b6:91:c5:0f:4b:1e:b8:1c:8c:05:1a:a4:89:
6a:8a:f7:af:49:dc:c6:4b:9b:aa:42:8e:76:1f:da:bb:df:b7:
1e:d8:c3:b4:51:f7:2a:dc:0f:0b:8c:29:7d:28:49:20:f9:7c:
5b:a4:74:78:46:84:c9:c1:13:8e:31:a9:cd:bb:95:50:b5:b0:
6a:67:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:25 2026 by rpki-client