Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa
File: F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa (raw, json)
Hash identifier: JxKTOtTPWfWfAAoHri0onXnZQVwputgAWxySJSE326Q=
Subject key identifier: 17:A1:C1:84:C7:01:6C:BF:53:FB:6A:B9:26:C0:70:25:D0:F8:30:96
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019C7502A4A7B4C34655355130EF85307F09
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa
Signing time: Thu 19 Feb 2026 08:27:13 +0000
ROA not before: Thu 19 Feb 2026 08:27:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201128
IP address blocks: 185.84.180.0/24 maxlen: 24
185.84.181.0/24 maxlen: 24
185.84.182.0/24 maxlen: 24
194.110.171.0/24 maxlen: 24
2a05:a740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:02:a4:a7:b4:c3:46:55:35:51:30:ef:85:30:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Feb 19 08:27:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a1c184c7016cbf53fb6ab926c07025d0f83096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:dd:43:cf:8f:67:39:3c:db:67:bb:39:b4:
05:0b:dd:1e:8f:99:77:57:2c:4c:6f:c2:57:48:59:
8c:34:e0:21:da:7c:83:e6:23:b0:07:2d:66:e3:46:
54:a1:74:1b:5d:f5:63:59:ed:88:22:4f:d9:93:85:
53:86:af:99:82:b7:57:a0:9a:ed:04:44:41:b8:b7:
c0:93:a5:71:82:37:e6:a0:55:83:35:7e:f5:d1:1a:
7b:3e:68:d8:45:49:36:21:93:8e:80:03:c7:34:3a:
f8:bc:0f:ba:c1:9b:9d:da:a5:8f:5a:63:bd:8c:c0:
e8:7b:73:4e:21:b0:3b:2d:70:48:42:12:ab:c1:84:
38:04:f1:5b:c4:7e:08:cc:8f:01:df:f2:99:5e:54:
6c:fb:80:8e:24:dc:01:0e:99:64:8c:33:75:2e:53:
90:6b:77:9a:dc:fa:8e:ec:4f:99:81:e6:16:43:92:
99:5d:8c:5a:12:41:10:71:48:35:e3:85:96:36:f8:
d7:41:d4:d5:49:7f:44:60:46:35:fc:ac:1a:8f:6d:
46:0d:aa:18:b9:f6:54:73:d4:05:84:5f:a2:49:d3:
59:f0:05:23:b9:53:a8:44:7d:df:65:da:d0:f8:78:
74:3b:b8:ef:7a:c4:88:63:38:cc:f7:d3:ef:a5:bf:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:C1:84:C7:01:6C:BF:53:FB:6A:B9:26:C0:70:25:D0:F8:30:96
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0-185.84.182.255
194.110.171.0/24
IPv6:
2a05:a740::/29
Signature Algorithm: sha256WithRSAEncryption
2b:3f:e5:fd:5e:e5:b1:b2:2b:39:e6:7b:b1:0b:92:7d:f4:a1:
bd:2e:96:7a:b6:a8:21:86:06:bb:2e:e7:3a:b2:ba:d3:4a:8c:
2b:b4:5e:9e:08:67:f2:64:81:cc:7c:c0:d6:da:77:62:7d:64:
0e:cc:fc:12:73:3f:72:cc:d3:cf:a3:1b:33:e6:30:4a:d9:df:
82:72:da:85:77:24:24:18:6d:56:de:4d:d4:00:3a:f3:0d:50:
2d:75:98:5f:01:bd:2a:fd:ec:92:0c:ce:d9:6e:b2:5c:81:1d:
e2:a3:d3:e7:9c:e2:15:97:6b:14:21:1d:37:f2:fe:54:d4:9e:
a9:a9:c2:1e:40:f8:98:65:4a:53:e6:9a:98:85:ec:ae:1d:54:
66:1b:fb:d9:62:de:8b:4e:84:e9:51:b3:a7:19:19:bb:4e:52:
c5:13:8a:42:e8:d8:b0:44:7d:06:d7:51:85:ae:72:91:ea:35:
ae:81:e9:d6:e1:9b:3c:6b:ff:2c:63:ef:2b:54:a5:7d:4b:e4:
2e:ab:50:b8:f9:fa:8e:b4:47:2e:ae:14:94:f6:b3:13:c4:d6:
22:da:1d:c4:7e:79:87:76:62:2d:75:7a:c5:98:1b:6b:d2:a0:
e4:49:44:af:18:46:2b:f0:34:d7:18:ef:a6:e2:da:e5:7a:2c:
52:b7:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:59 2026 by rpki-client