Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/86FfC-gU9NXUfnJFAkx97fIlGtI.roa
File: 86FfC-gU9NXUfnJFAkx97fIlGtI.roa (raw, json)
Hash identifier: 8s8DLh+egK/hmYZT1aFZvZvV5nPzJNpDhq9dVxEHmfs=
Subject key identifier: F3:A1:5F:0B:E8:14:F4:D5:D4:7E:72:45:02:4C:7D:ED:F2:25:1A:D2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C70CC25A87E68BE160DF6AA9CAE718076
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/86FfC-gU9NXUfnJFAkx97fIlGtI.roa
Signing time: Wed 18 Feb 2026 12:49:13 +0000
ROA not before: Wed 18 Feb 2026 12:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 79.175.115.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
188.255.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:cc:25:a8:7e:68:be:16:0d:f6:aa:9c:ae:71:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 18 12:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3a15f0be814f4d5d47e7245024c7dedf2251ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:3d:92:2c:00:11:37:ae:ee:ff:df:a7:bc:
9d:3c:77:5c:c5:1d:05:93:53:dc:5d:61:58:5f:8b:
73:8a:8b:9d:93:6d:2f:ed:21:c6:e7:8c:3f:63:1d:
36:f7:3e:91:a1:3c:df:42:6b:02:bc:83:d8:26:76:
cc:37:d9:59:29:ff:10:b4:e5:df:ac:75:83:58:a0:
33:dd:3f:41:17:ec:38:28:06:78:1e:93:18:af:a8:
70:ad:13:47:e4:23:4f:35:fb:e6:d3:c7:3d:9a:88:
8d:c4:f7:87:57:85:a9:82:e4:a6:de:87:28:ae:86:
61:ff:37:ef:48:e5:12:78:db:05:80:08:d1:61:0b:
ff:c4:b7:40:3c:25:a2:34:ee:67:4b:e9:ba:d4:bd:
28:b5:41:f8:be:51:bf:58:6c:73:e9:26:50:15:5c:
cb:ba:46:0c:90:6f:a9:47:7c:ee:30:5a:6f:9e:8f:
09:93:d0:19:40:7c:97:c6:ff:14:90:54:49:f0:04:
df:26:ca:53:0a:48:23:f6:8c:95:b6:ae:be:75:9f:
82:c6:b6:89:46:5c:36:9b:ef:46:4a:fe:bb:e9:98:
41:77:77:bc:d9:4d:d8:c9:9b:37:b7:9a:d9:7b:a2:
b2:60:57:a0:f8:9d:33:e1:30:95:39:81:08:52:68:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:5F:0B:E8:14:F4:D5:D4:7E:72:45:02:4C:7D:ED:F2:25:1A:D2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/86FfC-gU9NXUfnJFAkx97fIlGtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.115.0/24
188.255.198.0/24
188.255.227.0/24
Signature Algorithm: sha256WithRSAEncryption
74:de:d6:bc:46:30:e4:d8:dc:84:f1:32:d3:87:7c:03:0f:1a:
db:a9:bc:42:d7:3e:37:d9:95:e2:01:6c:a1:2c:76:e3:b7:2b:
c5:1b:d6:a3:61:70:fa:48:ef:2e:2c:ea:74:7d:ba:8e:05:56:
3c:1f:c3:f1:cf:61:fb:b5:1b:9e:6b:53:4c:cc:89:a4:95:1b:
4e:38:70:3d:21:13:84:4b:95:33:f2:2a:f0:9f:53:13:1b:61:
83:92:80:14:e8:7f:38:b5:e7:f0:67:0b:6f:12:50:29:ec:c9:
2a:b7:1a:bb:0c:e6:a4:10:b5:50:a9:d4:38:f1:40:d3:91:1c:
fa:0b:be:c2:01:3e:1d:17:d0:2d:f0:48:43:1a:72:3e:ca:95:
69:d1:00:a3:cc:9f:47:06:8d:c3:ba:11:0a:2a:7f:24:98:1e:
22:2b:9b:80:dc:da:90:2b:25:84:45:0b:d3:bc:07:5b:9e:99:
c8:5c:e9:68:22:66:ba:5e:1e:47:44:00:43:7b:e7:bf:82:0d:
cb:4e:b9:ee:28:20:5f:05:a5:66:40:3a:76:a6:61:56:10:f0:
55:89:c2:2c:bd:00:c6:c2:5e:6b:45:c0:18:13:68:9e:3b:6c:
a2:c8:fc:6b:fc:e3:67:71:97:35:5e:ef:c6:16:2c:ac:0b:8e:
0d:59:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:48 2026 by rpki-client