Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/f26zuk2XxbheHn163TfPjwSeXwc.roa
File: f26zuk2XxbheHn163TfPjwSeXwc.roa (raw, json)
Hash identifier: TXxai5KJHds6piBBml+lR4kZ0mqzmvHySqbgHGGyN4o=
Subject key identifier: 7F:6E:B3:BA:4D:97:C5:B8:5E:1E:7D:7A:DD:37:CF:8F:04:9E:5F:07
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D8747777E28E1332439247AF4336BEC71
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/f26zuk2XxbheHn163TfPjwSeXwc.roa
Signing time: Mon 13 Apr 2026 14:38:20 +0000
ROA not before: Mon 13 Apr 2026 14:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213107
IP address blocks: 185.86.14.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:47:77:7e:28:e1:33:24:39:24:7a:f4:33:6b:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 13 14:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f6eb3ba4d97c5b85e1e7d7add37cf8f049e5f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:2c:4b:d5:8b:15:53:63:a9:14:91:cb:7f:
00:ac:e2:18:a2:f3:0c:41:08:3f:56:16:80:ef:19:
9e:23:bb:71:34:90:a9:c9:56:ab:44:e4:01:6e:0c:
94:78:c0:29:a1:d0:91:6f:8f:35:5c:ef:09:36:1e:
a3:03:fa:db:26:96:11:b2:fa:d1:11:88:4e:da:08:
f8:ff:af:3f:22:e8:7a:d9:63:9f:2d:67:92:49:c3:
95:d6:32:08:dc:f2:2b:b3:d7:83:5a:c7:e0:16:1b:
e5:00:d2:96:35:cd:d9:9e:9f:02:fc:fe:4f:2a:ce:
70:f0:3e:46:fd:79:91:68:7c:68:d0:75:6a:ec:33:
60:9a:50:33:02:2c:bd:a4:32:5f:2f:c0:02:7b:ce:
76:0f:58:af:f5:d8:99:b7:c0:30:6c:93:8e:a1:36:
d1:34:83:7e:ea:d7:27:3d:4e:e0:5a:57:b1:d8:ce:
fb:c8:0f:1a:dd:df:eb:32:cb:de:48:28:5e:73:a0:
2d:5e:3f:51:94:7f:ff:f9:3b:b4:82:84:f5:b7:d0:
6d:66:f9:f6:8c:c1:12:cf:79:ab:ef:8f:29:55:83:
90:ad:e8:a4:2f:48:f4:3b:7e:65:8e:f5:9a:24:9e:
96:5a:ee:44:68:9c:e9:f7:fa:ff:6b:c7:60:e5:bf:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:B3:BA:4D:97:C5:B8:5E:1E:7D:7A:DD:37:CF:8F:04:9E:5F:07
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/f26zuk2XxbheHn163TfPjwSeXwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.14.0/24
185.88.175.0/24
185.185.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c9:ac:b8:93:ab:8e:aa:0a:39:09:a2:8e:51:22:42:f6:5a:
93:30:9e:da:bf:1e:a0:c9:db:52:0f:46:79:df:e0:45:6f:37:
e8:96:e9:2f:f9:00:b9:b9:bf:a1:72:f3:e1:55:f0:e4:a5:f2:
25:ef:30:e9:54:8e:94:20:6c:f5:f9:71:0f:6b:97:b7:ba:1a:
3e:93:c9:1a:2a:9b:99:8c:0e:49:ee:a3:2b:f4:6c:5e:11:92:
7f:91:3c:78:76:ab:f5:35:93:e7:17:b4:e7:f5:82:1f:25:98:
a2:a8:17:6b:a0:1f:21:05:08:36:bf:85:86:00:b5:1b:22:f7:
0e:83:a5:75:9b:02:61:4b:87:1c:3b:77:70:1c:87:65:cf:36:
29:25:b9:11:42:40:92:b0:6a:61:5c:bb:08:3d:c0:88:79:10:
8e:d1:5a:64:93:c7:68:3d:45:43:b8:9d:fc:31:41:0f:19:12:
39:1c:2d:6a:86:3d:b8:aa:0f:cd:5d:ed:9b:9d:61:e8:db:0d:
7a:c4:0a:60:3d:c2:c1:e2:2e:f8:05:77:73:e3:41:e4:e2:f0:
72:79:14:c2:2b:2d:b2:cf:a0:60:1a:29:ea:5d:43:f5:57:32:
3f:d9:29:c8:aa:b7:d8:3b:ef:73:dd:3d:df:ca:1e:34:ed:12:
f5:0a:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:16 2026 by rpki-client