Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/D8FKo30pQrTU9mJYfYQg9avocxA.roa
File: D8FKo30pQrTU9mJYfYQg9avocxA.roa (raw, json)
Hash identifier: eTwcKoj9qVJBPhmvJcocW9ihZIrUpzbDq33DB90KBWM=
Subject key identifier: 0F:C1:4A:A3:7D:29:42:B4:D4:F6:62:58:7D:84:20:F5:AB:E8:73:10
Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial: 019B7CEDA7F31620DD88FF45B9304A92BE7F
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/D8FKo30pQrTU9mJYfYQg9avocxA.roa
Signing time: Fri 02 Jan 2026 04:18:28 +0000
ROA not before: Fri 02 Jan 2026 04:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202330
IP address blocks: 185.25.105.0/24 maxlen: 24
185.255.20.0/22 maxlen: 22
185.255.20.0/24 maxlen: 24
185.255.21.0/24 maxlen: 24
185.255.22.0/24 maxlen: 24
185.255.23.0/24 maxlen: 24
2a13:d680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:a7:f3:16:20:dd:88:ff:45:b9:30:4a:92:be:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Validity
Not Before: Jan 2 04:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fc14aa37d2942b4d4f662587d8420f5abe87310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:ef:89:58:9f:5b:b9:ec:a4:a6:5b:eb:64:
13:af:43:c2:d4:0f:f4:d9:81:12:07:06:47:3d:19:
80:68:7e:ec:17:d2:5d:44:75:ae:85:7e:f6:1e:65:
9e:5a:ed:43:fe:a6:32:c3:7b:75:91:6b:11:6d:30:
b3:d3:7f:47:59:70:61:fc:53:25:39:93:9c:1e:b6:
16:fc:0d:ba:a5:5c:77:6d:78:4d:d2:ea:29:80:82:
6b:c6:11:56:f9:3b:3b:2f:cf:5a:4f:2d:30:a0:a7:
79:37:a6:82:85:f0:b8:03:b4:7d:99:6f:a8:34:33:
20:22:f0:1e:b5:ee:96:d7:c3:e3:7a:20:0a:ee:ba:
38:f7:8f:19:c1:aa:7b:20:86:5e:f4:91:37:67:7a:
a8:12:5d:b2:73:e1:90:9f:2d:92:87:fa:0d:bf:32:
7b:ae:b1:36:9f:e5:d9:e3:5c:2b:10:b3:66:1a:ad:
a6:ba:4c:7b:2a:d0:3b:fc:bb:40:46:36:90:c4:29:
56:79:80:59:37:68:09:8c:66:2e:5d:83:65:c5:45:
c2:3b:c8:16:ce:4e:86:bd:0f:54:54:73:fa:f7:c5:
50:78:69:42:f0:c9:0a:76:76:ca:94:03:45:1d:16:
d3:c1:e7:2e:e9:be:a2:95:4e:0e:75:91:be:15:b8:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:4A:A3:7D:29:42:B4:D4:F6:62:58:7D:84:20:F5:AB:E8:73:10
X509v3 Authority Key Identifier:
keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/D8FKo30pQrTU9mJYfYQg9avocxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.105.0/24
185.255.20.0/22
IPv6:
2a13:d680::/29
Signature Algorithm: sha256WithRSAEncryption
ac:62:cf:7a:50:50:da:87:ca:e6:c3:c2:33:b3:df:a5:fb:ea:
dd:92:6d:7f:0a:dc:8c:ba:ac:f8:b4:68:ab:de:f8:9c:ed:d3:
65:02:f0:ba:58:95:a5:86:2a:48:bb:74:02:90:4d:16:59:b6:
f8:e0:f6:ae:d0:b7:e7:ee:46:5a:b1:7b:e3:7c:27:87:ce:b5:
77:75:87:2d:85:26:f9:b5:b5:91:58:fb:93:57:0b:a2:45:94:
ec:e2:e2:b9:f0:c5:c9:3b:00:9b:23:29:e1:e0:b7:25:a6:28:
42:8c:e7:46:26:41:8b:9b:c8:10:80:89:cf:76:21:57:f3:26:
87:3c:cd:af:00:83:a6:4f:02:f4:69:e3:47:db:8b:3e:57:69:
9f:c3:d8:ad:74:5e:b3:b3:8a:93:60:d4:6c:21:ea:0c:44:2e:
a3:0f:4d:c6:a3:d9:d8:18:56:23:e0:c5:53:c7:4f:61:63:55:
f7:b6:91:32:5b:4b:a1:77:3e:da:1b:ec:13:c4:8f:b8:5b:32:
df:eb:8d:15:60:eb:98:a0:6c:70:ef:11:d3:11:78:b9:ef:23:
f3:67:58:cc:94:37:1a:0a:e3:a5:5d:9c:80:23:14:d4:86:e3:
ed:58:66:71:b1:17:b3:eb:11:7c:7d:fa:62:f3:ba:cd:ee:68:
64:5c:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:23:02 2026 by rpki-client