Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/f_W3cs_ecWHdG6K3evMumWzr_vo.roa
File: f_W3cs_ecWHdG6K3evMumWzr_vo.roa (raw, json)
Hash identifier: J+lU3UAd31ssl7BE3T3uw9sHoucxFu+hegq+C0LD7U0=
Subject key identifier: 7F:F5:B7:72:CF:DE:71:61:DD:1B:A2:B7:7A:F3:2E:99:6C:EB:FE:FA
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0D879C65279FAEF1C27D663A0A20619A9
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/f_W3cs_ecWHdG6K3evMumWzr_vo.roa
Signing time: Fri 25 Sep 2026 12:10:54 +0000
ROA not before: Fri 25 Sep 2026 12:10:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:79:c6:52:79:fa:ef:1c:27:d6:63:a0:a2:06:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 25 12:10:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ff5b772cfde7161dd1ba2b77af32e996cebfefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:40:39:1f:c3:3b:c9:6d:c4:9d:47:4b:ea:
22:b7:74:0b:97:c9:c5:02:1f:f4:64:96:4b:4c:d8:
ae:4d:19:7a:a5:59:8b:71:83:f2:14:39:4b:aa:f7:
91:5d:5f:f9:14:da:75:e1:6f:d9:d9:bd:7f:5f:b0:
5d:81:27:a2:8f:fb:22:ad:82:8d:c3:2d:af:ae:6a:
18:d1:fe:bb:74:8d:93:60:77:ac:32:a7:89:da:2f:
65:59:0a:84:cf:95:8f:9c:5d:c8:36:00:59:0f:d1:
39:80:52:3c:e9:22:70:f8:62:e8:76:ab:39:3d:23:
71:09:1d:41:07:f9:51:00:f3:1a:3a:77:0f:98:63:
75:ae:b8:88:e0:7f:e3:00:c2:2b:df:f6:19:50:08:
79:7b:0c:4b:d7:0f:74:c5:ae:ea:08:6d:cd:01:5c:
76:9f:22:da:64:9e:e2:db:98:49:70:1a:4e:c2:d4:
37:7f:32:26:af:b8:56:04:f8:74:7e:5c:20:df:e5:
91:be:54:86:24:b4:f9:66:d3:3e:8e:8a:a3:e8:2f:
76:93:68:b2:ad:3e:94:5a:e8:55:92:3c:0e:e4:28:
79:ac:63:35:75:4b:17:16:98:2c:1a:2b:a9:71:f6:
fa:12:62:0e:36:33:e5:91:e6:ef:32:97:38:a1:65:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:B7:72:CF:DE:71:61:DD:1B:A2:B7:7A:F3:2E:99:6C:EB:FE:FA
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/f_W3cs_ecWHdG6K3evMumWzr_vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.14.0/23
185.87.120.0/24
185.254.236.0-185.254.238.255
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:1c:17:16:1e:aa:9d:48:0d:01:f5:0e:b6:8a:71:39:e2:64:
a1:cb:42:77:b4:6b:42:01:97:8d:04:28:b6:6c:5b:7a:21:5d:
fc:22:f7:ff:6f:85:86:72:59:83:b5:7d:ed:52:59:d4:85:ed:
18:af:26:40:fe:3c:db:af:64:ce:c9:13:7e:b4:ab:0f:c2:33:
bc:08:a9:cf:da:9e:7b:5c:6c:27:c2:ec:83:52:b4:96:2d:89:
75:be:23:1f:0b:5d:b4:1e:ad:bd:af:9a:11:9e:fc:55:a7:a4:
fb:eb:21:7d:fb:b1:8c:2b:51:6f:be:b9:15:8e:9f:ee:48:41:
ec:3e:c4:18:6b:7c:e1:33:dc:96:b8:7c:8b:15:f7:dd:52:69:
87:24:44:8d:0d:b3:d7:83:ee:9e:41:02:c9:fc:ef:99:83:cf:
32:8b:e3:2a:c0:f8:5f:36:b0:ea:7e:af:2b:8d:7a:32:c1:f7:
a0:ca:6b:4d:6e:84:67:8c:05:b0:fb:5c:22:26:ed:29:2b:0d:
9c:a4:1d:10:5a:9a:ee:a6:eb:c7:b1:1a:c7:6f:8e:e6:74:f8:
e5:31:1e:4f:89:10:68:90:a1:87:f2:0a:0b:0b:f1:ec:5e:a9:
5e:d6:4b:62:be:e2:3e:8a:42:77:30:84:6a:08:d2:b3:18:07:
0a:08:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:57:54 2026 by rpki-client