Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/v0JIrMBFpH7tvCvQvSx7puVBU10.roa
File: v0JIrMBFpH7tvCvQvSx7puVBU10.roa (raw, json)
Hash identifier: YA+s/oHGP7hhJte8WNkK/Co7ljEbNpMQnYFsZLOgegU=
Subject key identifier: BF:42:48:AC:C0:45:A4:7E:ED:BC:2B:D0:BD:2C:7B:A6:E5:41:53:5D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A08F67AC72BD855C5F9BCD89090D045C01
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/v0JIrMBFpH7tvCvQvSx7puVBU10.roa
Signing time: Fri 11 Sep 2026 07:38:51 +0000
ROA not before: Fri 11 Sep 2026 07:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:67:ac:72:bd:85:5c:5f:9b:cd:89:09:0d:04:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 11 07:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4248acc045a47eedbc2bd0bd2c7ba6e541535d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:73:f3:ba:ac:0b:46:d0:ae:ae:13:ea:a4:
ee:5a:a1:29:43:3e:fa:84:81:41:bf:db:af:8c:1b:
1f:4b:cb:2a:fd:cb:ee:ac:49:eb:52:e6:fa:66:53:
50:3f:b6:e4:08:51:61:3d:35:59:6e:83:be:1f:9a:
83:95:c4:ef:d2:4b:eb:5c:bb:a6:16:b5:b6:59:f1:
c0:2b:8f:dc:00:aa:61:c8:0f:95:6b:fd:01:f3:6b:
81:9c:cb:b9:51:2b:a6:aa:c8:21:b4:3c:61:b7:46:
f3:d9:3d:50:df:5d:dc:c5:42:8f:2a:56:eb:12:d3:
51:43:7c:4e:0b:8b:d0:15:31:75:72:21:e1:ac:11:
12:7b:bc:9d:40:7c:7e:d0:0e:4d:34:29:3d:86:2c:
ec:49:c8:84:41:f0:1c:3b:57:91:64:f8:b6:42:86:
00:6e:f5:73:e8:d5:48:61:f9:85:f2:bf:1b:7b:8e:
6d:85:e0:0c:36:16:38:8f:a5:d8:12:2f:90:b6:a0:
55:ec:10:a4:db:52:28:25:9f:de:cd:1e:18:8f:79:
bf:f3:2c:56:25:bf:1b:32:8d:98:fb:e3:35:55:65:
74:e1:38:18:9e:78:a5:7a:83:b3:8d:ab:56:72:68:
64:0c:df:15:7d:27:fa:f6:a5:30:66:0b:7d:f4:41:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:48:AC:C0:45:A4:7E:ED:BC:2B:D0:BD:2C:7B:A6:E5:41:53:5D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/v0JIrMBFpH7tvCvQvSx7puVBU10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.14.0/23
185.86.152.0/24
185.87.120.0/24
185.254.236.0-185.254.238.255
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:5b:70:ef:cd:4a:b4:a3:4b:f7:6b:ed:e9:3f:07:c3:a5:50:
b9:ab:83:6a:22:27:d7:0e:80:90:ba:6a:d4:70:dd:f8:2b:35:
17:86:ca:a9:ea:06:5a:f6:27:64:d9:63:63:8f:77:c9:46:47:
bf:72:b9:d7:85:f0:b5:62:bb:3e:b3:e9:e7:13:bc:98:e6:d3:
2f:8d:24:70:a0:3e:43:28:eb:03:14:44:bc:b2:53:31:10:12:
58:ab:96:73:ad:66:0d:54:5b:05:b0:62:9c:e1:4c:6e:f0:6e:
41:5d:31:44:37:8d:26:48:0f:52:b7:5b:bd:7f:b6:08:29:1e:
e6:71:64:7c:60:20:69:b1:c7:4e:8f:9c:51:67:e4:86:df:71:
71:36:c7:dd:9b:7a:00:00:fa:46:49:28:31:b5:d9:ae:ab:03:
ea:b9:b3:5c:47:3b:93:9b:69:e9:69:3b:a3:ad:d9:f7:2a:2b:
60:d3:61:4f:42:d2:af:30:64:bd:6e:64:ba:67:c2:77:cb:6f:
90:d0:5b:b4:b4:11:d8:f5:c8:b2:56:a0:44:54:a6:87:40:b9:
37:e4:db:77:61:a6:17:4d:98:44:7a:9b:2f:67:00:f1:29:5e:
5d:c8:f8:77:08:58:7d:3d:be:1f:c9:dc:20:c3:85:74:44:94:
ca:73:ba:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:42 2026 by rpki-client