Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/PFdNG59hViBuTeuoCVBzzNT9hdQ.roa
File: PFdNG59hViBuTeuoCVBzzNT9hdQ.roa (raw, json)
Hash identifier: Hx8oG/Q221sL5UYo+YmyawYwdY2esddKYwNfw416Y5Q=
Subject key identifier: 3C:57:4D:1B:9F:61:56:20:6E:4D:EB:A8:09:50:73:CC:D4:FD:85:D4
Certificate issuer: /CN=ec75588454f1b1237b7883ada22b34fc507b5568
Certificate serial: 01A025EE9469B8786DF418C80602CC6AF69C
Authority key identifier: EC:75:58:84:54:F1:B1:23:7B:78:83:AD:A2:2B:34:FC:50:7B:55:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HVYhFTxsSN7eIOtois0_FB7VWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/PFdNG59hViBuTeuoCVBzzNT9hdQ.roa
Signing time: Fri 21 Aug 2026 20:06:27 +0000
ROA not before: Fri 21 Aug 2026 20:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210332
IP address blocks: 185.88.8.0/24 maxlen: 24
185.200.123.0/24 maxlen: 24
217.28.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HVYhFTxsSN7eIOtois0_FB7VWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:ee:94:69:b8:78:6d:f4:18:c8:06:02:cc:6a:f6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec75588454f1b1237b7883ada22b34fc507b5568
Validity
Not Before: Aug 21 20:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c574d1b9f6156206e4deba8095073ccd4fd85d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:14:cc:d1:6c:12:7c:c6:c4:1d:17:d0:9b:
11:15:3b:c2:eb:c0:37:10:c2:0b:98:9d:99:d8:e8:
10:80:54:5f:38:7c:57:ca:c1:b3:c5:aa:fa:ae:e7:
12:ce:7b:4c:c4:38:91:43:36:4a:61:64:cb:0b:ec:
cd:6a:5e:84:99:6c:9f:7b:4c:46:d3:d2:49:4e:1d:
6c:51:1b:08:fc:8d:18:41:1d:87:1c:e2:94:78:2a:
ce:bf:95:7c:e8:20:64:26:58:ce:3b:46:53:68:2e:
25:0f:e0:8c:5a:4e:0e:80:c8:9d:7d:c0:35:4a:13:
1b:54:12:71:09:28:ff:47:a8:2a:15:7e:ee:e0:24:
a9:26:e8:d8:d4:0d:1c:36:1a:65:81:5b:ed:b0:13:
86:b0:5e:4f:b9:a5:e8:c3:16:f9:26:42:97:ed:c4:
ec:ef:6f:c6:ad:d4:e4:ab:c6:46:2c:53:a9:c4:e2:
13:f3:cf:52:63:ea:38:df:98:64:33:03:d1:ec:fe:
6e:ac:ec:b3:59:24:d1:d1:ea:13:04:aa:dc:b0:36:
3b:dd:b0:92:25:c0:cc:d4:d3:45:ff:79:f7:8f:79:
63:40:4b:6d:b6:52:7a:40:59:55:83:25:fa:2d:3e:
5c:29:3a:c7:33:a1:e3:66:b8:1d:e3:26:c4:98:6c:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:4D:1B:9F:61:56:20:6E:4D:EB:A8:09:50:73:CC:D4:FD:85:D4
X509v3 Authority Key Identifier:
keyid:EC:75:58:84:54:F1:B1:23:7B:78:83:AD:A2:2B:34:FC:50:7B:55:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HVYhFTxsSN7eIOtois0_FB7VWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/PFdNG59hViBuTeuoCVBzzNT9hdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.8.0/24
185.200.123.0/24
217.28.135.0/24
Signature Algorithm: sha256WithRSAEncryption
84:39:d4:ff:44:c3:4c:33:82:df:93:ae:c2:1f:56:2c:72:7d:
16:17:93:11:76:96:61:47:1f:b9:4b:78:be:27:54:3c:38:f7:
b6:45:a7:d6:7c:42:91:77:17:86:96:ea:bc:d8:0a:28:b7:74:
7f:27:c3:d2:84:26:59:aa:93:c3:ed:62:55:a2:22:92:c4:94:
14:9c:0c:1e:a8:d9:95:a0:6a:89:55:a8:ff:c4:6a:20:52:99:
9f:cb:c9:61:d9:8f:b0:7d:7b:ec:1c:c2:b5:c8:1d:70:93:44:
7c:84:34:5c:60:85:1c:2f:dd:23:27:50:60:7d:dd:71:5d:06:
de:e4:43:cc:31:a6:cd:12:0b:36:fe:74:60:e3:44:4a:8e:76:
af:0e:e2:95:0a:b3:41:85:b1:dd:a8:df:69:7c:0e:88:1e:9c:
54:86:00:a7:a5:6b:21:5f:00:58:d2:ed:e1:16:d7:fc:a0:ba:
82:11:b1:04:5e:fb:39:fb:36:e8:59:bf:e9:4a:e9:e7:e9:87:
8e:1b:8a:a5:77:fe:f6:d6:72:d6:06:be:7f:7f:d7:a3:16:94:
a7:26:88:60:b4:36:18:14:b4:09:dd:46:75:a8:6f:65:cc:44:
0b:d6:6d:2e:99:92:b6:78:a3:c9:0e:29:63:2c:f1:aa:f8:11:
53:25:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:10 2026 by rpki-client