Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/aFoFh3ByGgon-_f6E8zuxLRgaRs.roa
File: aFoFh3ByGgon-_f6E8zuxLRgaRs.roa (raw, json)
Hash identifier: 2zEcSdQ7IqVKOGXSYdoqGlfPm/pABEQKOfXsrdnABS4=
Subject key identifier: 68:5A:05:87:70:72:1A:0A:27:FB:F7:FA:13:CC:EE:C4:B4:60:69:1B
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 019D711DEF06E743E0D7300A88A7996317D0
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/aFoFh3ByGgon-_f6E8zuxLRgaRs.roa
Signing time: Thu 09 Apr 2026 07:21:20 +0000
ROA not before: Thu 09 Apr 2026 07:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199708
IP address blocks: 185.48.200.0/23 maxlen: 23
185.48.201.0/24 maxlen: 24
185.48.202.0/23 maxlen: 23
185.48.203.0/24 maxlen: 24
195.130.201.0/24 maxlen: 24
2a04:b280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:1d:ef:06:e7:43:e0:d7:30:0a:88:a7:99:63:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Apr 9 07:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=685a058770721a0a27fbf7fa13cceec4b460691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:61:80:ca:2d:8e:53:ba:7e:4a:05:da:b8:
31:bb:b4:eb:b2:f7:a1:93:bb:ea:e1:3c:85:91:be:
f8:7e:ca:ec:e6:25:84:44:7e:76:a9:40:3c:d0:6a:
0f:e1:69:f5:56:98:b8:96:4e:f5:9e:51:c1:9d:e0:
cf:f3:87:94:d8:6c:73:aa:9b:42:90:84:a7:2c:4e:
b5:6e:e9:07:8e:6e:1c:2c:0e:79:71:02:f7:f6:cf:
dd:5c:7a:fd:70:c1:c5:28:80:74:07:9d:b1:c0:2b:
c0:66:e0:66:c5:8a:92:5e:8d:8f:be:0f:fd:bd:e8:
7f:dc:39:16:1e:39:e5:67:24:68:a1:89:8e:08:a3:
c0:0a:fc:63:87:cf:27:ef:f8:54:de:03:3c:9b:d3:
64:13:b1:3d:e5:7e:07:b9:84:62:96:3c:20:f7:d1:
3e:a4:1e:1d:ba:c5:03:e3:41:46:de:1e:30:38:11:
df:13:9e:a8:6b:fa:7b:6a:01:6b:34:34:a4:c0:9c:
ae:c0:ce:91:63:28:b6:d4:76:67:db:d3:bf:27:b0:
8e:e3:57:ae:88:06:d7:71:07:4c:13:63:45:3c:84:
ed:99:77:f1:42:ce:7a:b2:27:55:42:10:08:4d:13:
ce:ce:23:21:e5:76:4e:06:3b:1a:04:ab:d5:ec:ac:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:05:87:70:72:1A:0A:27:FB:F7:FA:13:CC:EE:C4:B4:60:69:1B
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/aFoFh3ByGgon-_f6E8zuxLRgaRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.200.0/22
195.130.201.0/24
IPv6:
2a04:b280::/29
Signature Algorithm: sha256WithRSAEncryption
05:6d:f3:fd:b4:7f:0f:f3:08:6d:e5:23:5f:80:81:bf:b3:02:
60:d6:7d:54:a6:4f:dc:32:66:2b:f9:60:02:a0:4a:b5:5f:92:
f1:74:a8:a7:7b:2d:1b:18:d1:e0:0e:c3:d3:b5:e9:28:80:35:
8a:30:6d:c1:8c:5d:4e:8d:8f:bb:0d:e9:37:63:9d:df:b2:7f:
bd:fa:28:d0:43:21:fc:68:5c:f4:61:ff:fa:d1:60:b0:99:35:
63:cb:b6:8f:4d:c8:37:f9:d1:7d:4f:ba:0d:98:da:bf:1e:f6:
e6:2e:cd:67:50:51:90:1c:28:2e:96:f7:0c:06:e0:30:1d:b2:
dc:5d:0a:23:b3:2c:bd:61:3f:6f:ae:34:a9:23:22:e8:79:31:
ed:e0:5f:69:13:cc:0a:5d:19:38:1c:75:49:7c:c0:44:df:13:
3b:9c:ee:4b:74:68:41:49:b6:a3:54:b0:a9:9e:7b:a1:4b:11:
99:90:74:3f:a9:27:06:f3:cb:d7:2a:d6:fc:e1:4e:2a:89:2e:
0f:6c:07:dc:2b:4c:d8:d0:9b:57:c5:79:46:3b:00:bb:1a:cc:
ad:31:fc:60:87:92:5d:23:cc:cf:1b:30:cd:61:cd:f0:13:c2:
26:c9:cc:40:5e:45:58:3a:33:53:14:b5:55:10:f2:03:02:2d:
9b:19:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:33:47 2026 by rpki-client