Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa
File: FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa (raw, json)
Hash identifier: 36QLoZ8Ws2gB6YZ/mvzOniygiDV4ui/NvR252z7lSOc=
Subject key identifier: 16:57:0A:53:A7:E0:7A:D3:AD:9C:42:92:5F:2E:D7:7F:99:D8:69:16
Certificate issuer: /CN=da079e43fc726e1655c8a75554f5fbc18b204545
Certificate serial: 019F23689E699C6444F3CB389CA2871B6A35
Authority key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34785
IP address blocks: 80.80.240.0/20 maxlen: 20
185.72.136.0/24 maxlen: 24
185.72.137.0/24 maxlen: 24
185.72.138.0/24 maxlen: 24
193.186.72.0/21 maxlen: 21
193.186.80.0/22 maxlen: 22
193.186.84.0/23 maxlen: 23
193.228.112.0/21 maxlen: 21
193.228.120.0/23 maxlen: 23
193.228.122.0/24 maxlen: 24
2a01:af80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9e:69:9c:64:44:f3:cb:38:9c:a2:87:1b:6a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16570a53a7e07ad3ad9c42925f2ed77f99d86916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:a6:85:40:9e:2f:ee:d4:51:30:26:26:91:
1c:74:b4:ad:8a:b4:34:b8:24:1d:cb:de:48:cb:6f:
99:57:0c:f1:e4:94:72:c1:1c:4b:84:1a:9d:25:7a:
50:6e:85:03:a5:5b:8c:9c:7f:fe:16:70:57:1c:c4:
e8:98:26:66:6a:61:15:d9:81:e7:68:28:ba:01:b5:
9c:d7:75:c6:04:cc:c1:fa:4a:de:a8:e6:64:e7:e5:
8e:e3:43:4b:18:41:9d:69:cb:e7:25:1e:3d:67:13:
c9:8f:08:a6:58:9d:c8:36:a2:7d:f1:0f:77:33:59:
e6:af:66:ff:05:83:cf:d5:ed:ad:67:a5:f7:ba:94:
43:06:6b:64:5b:66:08:4a:3c:2a:e8:44:0d:14:7c:
70:21:c8:1f:59:c9:be:36:7c:9d:65:68:b6:ca:0d:
22:ca:de:fc:89:be:db:ec:5a:87:04:a9:5a:89:a1:
95:e1:72:5a:f1:d7:c3:a1:93:9d:07:9c:3c:46:94:
a0:cc:64:b9:8b:79:b6:8d:70:19:58:f3:af:3b:90:
eb:99:22:fa:2f:d0:b6:53:53:4f:06:f7:1f:1a:b3:
e1:1f:59:0e:64:2b:a2:41:33:50:67:8c:24:f2:12:
2f:ca:d4:6a:71:31:7f:48:66:89:52:fc:25:c5:1a:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:0A:53:A7:E0:7A:D3:AD:9C:42:92:5F:2E:D7:7F:99:D8:69:16
X509v3 Authority Key Identifier:
keyid:DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.240.0/20
185.72.136.0-185.72.138.255
193.186.72.0-193.186.85.255
193.228.112.0-193.228.122.255
IPv6:
2a01:af80::/32
Signature Algorithm: sha256WithRSAEncryption
a8:f8:aa:a4:aa:ec:9c:3d:59:28:57:de:f1:57:3c:7e:90:7a:
bd:75:39:fb:7a:ab:b3:4c:83:66:26:40:6a:22:71:d1:e3:31:
cc:43:c6:b6:81:bf:3e:0d:08:21:12:b0:9e:2a:6a:4d:87:0c:
e4:ff:2f:45:eb:4f:c0:0b:d4:ba:ca:0c:e5:d7:9e:0d:28:59:
97:57:48:44:52:b5:2a:cc:43:1c:c6:d5:a7:6f:f2:72:f9:97:
61:5d:a6:15:80:6c:8b:18:c9:a9:d7:01:cc:92:07:fc:33:0e:
fa:1c:83:fc:40:06:a4:30:b6:08:54:f0:2e:99:61:40:1c:5b:
1b:ab:63:b0:3f:b7:ef:45:90:67:07:7a:33:ed:af:d0:ba:5b:
a7:f9:2c:a6:53:cb:9c:84:a9:95:c5:98:7e:58:04:fa:e1:f3:
63:18:b1:5e:8f:6c:f9:6c:8f:34:85:b1:ed:0c:a6:53:a0:06:
f6:1d:19:ff:d8:9d:a6:cd:89:46:1e:76:1f:8f:d4:88:2f:17:
95:e9:34:1f:a7:70:e1:c1:5b:69:db:a0:51:ba:99:bd:44:b5:
a5:b1:93:58:5f:dc:c2:5a:2f:52:36:e7:57:ab:b0:ae:ea:a5:
0d:5f:73:58:d1:6a:9f:da:ce:80:9c:47:6c:10:6a:6d:28:9d:
07:87:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:09:30 2026 by rpki-client