Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/F_v6YtzOWtJq17zItdnU05lFmd8.roa
File: F_v6YtzOWtJq17zItdnU05lFmd8.roa (raw, json)
Hash identifier: 8fuF3GPsuTVKuXl4nbxF25sznai+CqgpM/JBWhxecLQ=
Subject key identifier: 17:FB:FA:62:DC:CE:5A:D2:6A:D7:BC:C8:B5:D9:D4:D3:99:45:99:DF
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019B7C806BBD2699DADE3404A598F909BBBA
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/F_v6YtzOWtJq17zItdnU05lFmd8.roa
Signing time: Fri 02 Jan 2026 02:19:09 +0000
ROA not before: Fri 02 Jan 2026 02:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204226
IP address blocks: 185.89.8.0/24 maxlen: 24
185.89.9.0/24 maxlen: 24
185.89.10.0/24 maxlen: 24
185.89.11.0/24 maxlen: 24
194.105.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:6b:bd:26:99:da:de:34:04:a5:98:f9:09:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Jan 2 02:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17fbfa62dcce5ad26ad7bcc8b5d9d4d3994599df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:6f:a4:a9:23:af:30:a9:c0:a9:b3:3d:4a:
3d:b1:df:e2:da:4c:2d:85:e6:3c:26:72:bf:41:15:
9f:e7:84:57:a1:c4:cf:86:bd:27:cd:5d:6a:65:22:
df:97:33:9f:54:fa:f8:94:12:71:c2:70:98:f6:9d:
09:71:1f:3d:2b:a4:30:ca:84:81:4e:06:c2:97:ba:
39:e2:df:5f:76:f1:cd:15:b8:98:20:0c:b9:97:8c:
41:59:12:08:14:37:32:fb:98:85:47:01:39:ce:1f:
7a:0b:93:55:9e:12:2f:00:53:43:37:80:db:57:50:
e7:7f:76:1f:92:1a:9e:7a:83:61:cb:e4:1f:58:2b:
87:90:a1:2b:3d:3a:cb:df:47:27:6e:b1:c9:c3:37:
27:58:41:47:24:84:10:4a:0e:46:92:98:d7:5d:6c:
4a:bf:87:cf:40:c9:26:c3:c3:d9:25:5f:3f:69:ac:
b8:76:60:7f:75:fe:e3:82:0f:a8:5a:b3:65:a8:6b:
e1:1f:f9:12:1d:dd:67:d8:85:8b:d6:36:b4:15:b1:
27:7b:47:ce:0f:ea:a0:1b:f6:f2:ff:c8:29:a7:a3:
36:98:d6:73:0c:31:2a:b7:ff:29:be:3e:5f:96:e3:
61:90:84:e8:09:f7:54:b3:df:35:da:07:81:04:ea:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:FA:62:DC:CE:5A:D2:6A:D7:BC:C8:B5:D9:D4:D3:99:45:99:DF
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/F_v6YtzOWtJq17zItdnU05lFmd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.8.0/22
194.105.148.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4c:29:d1:b4:59:d8:b5:8c:2f:03:2f:ef:28:be:03:2b:1e:
b3:62:63:44:d7:f0:e0:3a:1b:74:a7:27:95:df:d2:92:76:a9:
e2:b8:e3:3f:75:fd:16:c5:09:d0:2b:e4:0c:c1:dc:2d:b8:18:
bf:0b:f5:fa:d1:5f:f4:3d:fb:72:4e:f0:b2:74:9f:47:d5:a1:
27:1f:37:f7:b9:e4:13:56:b1:82:a1:f1:29:4a:7b:49:c9:07:
77:d8:9f:25:16:0d:c7:5a:05:53:13:aa:69:bf:81:86:9a:51:
12:5e:bc:f1:2a:f6:0f:f5:6d:bb:54:2a:0c:7c:ff:c7:21:7f:
9e:d3:ca:5e:82:a0:da:b5:7d:76:4f:c5:bb:2a:be:cd:9d:5f:
ca:11:4c:ca:2a:82:d2:fd:f1:db:0f:fa:5d:c7:58:e5:20:e5:
b5:64:87:ec:7c:54:77:36:5b:a3:c6:26:3d:56:3a:87:cc:45:
11:71:34:ce:6f:00:67:42:35:d7:86:c9:c2:b0:f8:07:c7:dd:
5f:fd:fe:e5:bf:3b:8c:d1:5d:ab:25:97:7f:00:dc:06:bc:d5:
8d:31:b2:27:f9:b8:b3:91:f5:b2:22:c4:18:da:16:b8:54:23:
b8:31:09:bc:b2:f6:85:2c:7d:60:db:f5:e4:e9:b4:95:be:72:
fe:c9:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:32 2026 by rpki-client