Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/f3-tfuqoyiXbg1KDLx164rg17Lk.roa
File: f3-tfuqoyiXbg1KDLx164rg17Lk.roa (raw, json)
Hash identifier: ML9ptM8QJcrLGx/ZiPUqG8iJAB+dZYrvpwX9jjgMmzY=
Subject key identifier: 7F:7F:AD:7E:EA:A8:CA:25:DB:83:52:83:2F:1D:7A:E2:B8:35:EC:B9
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019CF67B7907B00FA74D327E279037A159FF
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/f3-tfuqoyiXbg1KDLx164rg17Lk.roa
Signing time: Mon 16 Mar 2026 11:50:12 +0000
ROA not before: Mon 16 Mar 2026 11:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 84.232.28.0/24 maxlen: 24
86.104.25.0/24 maxlen: 24
88.148.24.0/23 maxlen: 24
88.148.54.0/24 maxlen: 24
88.148.56.0/24 maxlen: 24
88.148.60.0/24 maxlen: 24
88.148.61.0/24 maxlen: 24
88.148.84.0/24 maxlen: 24
94.24.35.0/24 maxlen: 24
94.176.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:7b:79:07:b0:0f:a7:4d:32:7e:27:90:37:a1:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Mar 16 11:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f7fad7eeaa8ca25db8352832f1d7ae2b835ecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:09:4f:9c:64:0d:84:85:be:52:56:33:b9:
bc:3c:51:50:b7:65:db:6c:d0:71:db:8e:ce:00:88:
2e:c0:2c:38:ef:09:16:92:d3:2e:18:65:b2:7d:89:
26:25:c1:e1:64:92:06:3d:5e:22:b6:b4:54:c5:5d:
d4:5d:79:20:2c:da:2c:39:dc:4e:f4:a3:c7:cb:cb:
7d:24:bb:93:f0:d2:82:ea:3b:8c:ee:70:72:c3:a8:
8a:f7:e0:82:a5:ce:3a:cd:18:ea:90:70:ad:9f:ab:
69:98:a8:f3:13:24:bc:d8:86:97:12:29:53:ad:c2:
9c:d9:80:f9:a7:14:e8:12:13:26:76:bc:19:be:07:
54:3e:84:bc:eb:6d:0b:0b:dc:1f:55:22:2a:58:47:
15:58:c4:1a:23:5e:ca:c0:4a:c9:9b:d0:04:88:6f:
c8:4e:75:1a:5f:a9:f1:e1:db:61:92:e9:cd:6d:dd:
89:e4:0b:e0:7e:bb:f5:ea:5a:3b:3a:22:ae:f8:0f:
5a:60:ae:05:06:82:a9:26:7e:a5:48:c5:2a:3b:a2:
d3:84:2b:a6:04:6f:12:05:74:5a:ea:8f:b6:b4:32:
6f:59:30:e9:8d:fe:72:e0:af:06:ef:8c:61:09:cf:
c3:60:ee:b0:fd:13:42:7c:d1:9e:06:82:a8:1b:a4:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7F:AD:7E:EA:A8:CA:25:DB:83:52:83:2F:1D:7A:E2:B8:35:EC:B9
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/f3-tfuqoyiXbg1KDLx164rg17Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.28.0/24
86.104.25.0/24
88.148.24.0/23
88.148.54.0/24
88.148.56.0/24
88.148.60.0/23
88.148.84.0/24
94.24.35.0/24
94.176.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bd:ed:52:1e:e6:c4:e0:bd:66:17:4f:eb:0e:13:5e:20:e2:
10:40:26:7e:d5:a3:55:bc:a3:48:f6:49:bc:3e:6f:76:8b:72:
df:a5:63:4d:ed:e7:ac:c9:78:d4:e6:23:66:ce:a4:c4:7f:98:
dc:8e:54:b1:e6:b2:72:85:27:07:ac:8b:02:5d:64:54:34:1b:
6e:a8:b9:07:d1:ae:57:cc:ce:7f:e7:5e:5f:cc:91:35:1c:2d:
b1:ee:07:db:aa:cc:ad:cc:bb:33:ba:52:08:2e:5c:ff:37:b2:
25:41:11:11:69:0c:36:74:44:72:f8:eb:aa:66:90:3b:cc:21:
48:7b:bc:00:51:90:27:52:f0:f1:9b:83:17:97:30:2c:f9:b8:
04:0b:4d:ac:93:b1:e3:5a:02:35:64:f8:c5:8f:0f:74:b9:5d:
a2:81:38:8c:61:91:c1:63:2b:d6:08:e7:98:fc:50:18:14:88:
71:67:15:c4:0b:93:78:b5:80:c3:2c:4c:be:54:bc:8b:e6:a4:
55:31:31:44:cb:bb:bd:a0:ce:a0:65:1e:ff:42:40:01:f7:dd:
34:03:66:63:9a:49:a6:f1:33:c7:94:5a:43:fb:ab:a3:27:d0:
97:06:cc:a6:d8:9b:1d:27:fb:b9:c3:d1:67:c5:e0:d1:f4:0f:
90:f0:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:24 2026 by rpki-client