Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/_tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa
File: _tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa (raw, json)
Hash identifier: sG2gr2VibfwBBWqITc4yDuS8f9cCBW1DEngPZoKQfNg=
Subject key identifier: FE:D7:D5:6B:F1:70:FD:C7:7D:95:07:E8:65:F0:22:21:0A:C0:07:E0
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 019C295D100E2391AD3E45E0848A920D9943
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/_tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa
Signing time: Wed 04 Feb 2026 15:54:50 +0000
ROA not before: Wed 04 Feb 2026 15:54:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8455
IP address blocks: 85.222.236.0/24 maxlen: 24
85.222.238.0/24 maxlen: 24
85.222.239.0/24 maxlen: 24
89.255.200.0/21 maxlen: 24
89.255.200.0/24 maxlen: 24
89.255.201.0/24 maxlen: 24
89.255.202.0/24 maxlen: 24
89.255.203.0/24 maxlen: 24
89.255.204.0/24 maxlen: 24
89.255.205.0/24 maxlen: 24
89.255.206.0/24 maxlen: 24
89.255.207.0/24 maxlen: 24
185.223.86.0/23 maxlen: 24
185.234.96.0/22 maxlen: 24
185.242.220.0/22 maxlen: 22
195.43.158.0/24 maxlen: 24
195.137.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:5d:10:0e:23:91:ad:3e:45:e0:84:8a:92:0d:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Feb 4 15:54:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fed7d56bf170fdc77d9507e865f022210ac007e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:af:79:fc:f6:72:b3:3a:57:53:e9:52:fa:
e9:fc:ae:73:a8:9c:92:7e:bd:91:be:cd:3b:34:04:
18:3d:57:b4:05:fd:59:c8:f2:10:e3:79:e4:f9:ff:
ce:c6:1d:b4:a5:12:14:86:33:73:f5:11:5e:c1:d5:
b7:b3:66:a1:44:1e:3a:d3:87:70:ab:2a:9a:82:8f:
5f:7d:52:32:b9:e5:42:0d:1a:54:a6:ae:d2:75:cf:
be:c4:8e:5e:93:a4:e9:e4:94:2c:bc:d4:52:fe:fa:
87:14:32:c0:a8:94:ff:66:6e:6b:e7:8e:b0:ca:3e:
6b:98:50:51:1d:f5:f4:a5:9b:31:71:82:ac:de:67:
fa:05:18:88:21:0e:d0:ec:be:6d:e6:f0:95:91:35:
eb:d6:d5:dc:04:fe:74:26:bf:f0:c3:2f:b7:38:f1:
26:a5:47:6a:4f:81:fb:54:b8:2a:bf:d3:01:d2:e1:
0a:b9:cc:b7:31:82:3e:92:2b:62:59:3a:bb:9b:07:
33:f0:a9:ae:01:38:24:f4:24:c3:fa:7e:77:2a:af:
75:10:41:81:8c:ae:b5:1f:66:a0:90:58:8a:76:32:
9e:6c:e3:71:38:92:a1:40:fb:78:50:8d:81:fa:35:
d5:a1:68:26:64:81:7f:14:22:82:88:5f:90:8a:13:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:D5:6B:F1:70:FD:C7:7D:95:07:E8:65:F0:22:21:0A:C0:07:E0
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/_tfVa_Fw_cd9lQfoZfAiIQrAB-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.236.0/24
85.222.238.0/23
89.255.200.0/21
185.223.86.0/23
185.234.96.0/22
185.242.220.0/22
195.43.158.0/24
195.137.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:62:a7:1d:a6:20:d9:73:7d:df:d6:96:91:c9:81:43:33:4a:
11:77:97:b0:f8:32:ee:a7:6f:af:ab:e0:6d:6a:f0:78:e1:ec:
09:b8:3e:17:24:8f:3d:0d:c5:94:af:79:32:34:c6:3f:89:5f:
d9:4b:cf:9d:00:b9:88:2b:51:81:37:fb:bd:d3:ab:67:c0:ff:
41:f0:4b:c3:f5:3e:00:22:5c:37:10:97:2d:40:fd:70:3b:d0:
59:8c:05:47:55:a6:67:01:59:94:b8:2d:8b:46:5d:15:9d:86:
4d:9b:dd:e5:64:76:e0:16:f9:2e:d2:7b:d7:dd:06:29:c6:f0:
90:12:29:ea:43:e5:63:01:4f:a9:11:87:2e:69:55:b9:12:02:
6a:9a:61:84:cd:f7:3d:24:a7:2c:58:dc:f7:57:05:ca:9e:c2:
37:b5:55:99:61:38:62:65:a3:c9:75:de:d2:da:4e:f7:a0:0e:
e5:04:86:dc:15:56:76:05:21:6e:77:84:64:8a:6a:ae:ed:59:
ec:16:5b:87:07:fd:70:f9:a6:ed:21:95:5c:a2:01:6b:cd:1c:
84:8b:d0:b8:29:ca:25:75:61:6c:5f:86:75:c2:99:fe:1c:a4:
db:95:08:24:dc:a8:d9:19:72:69:08:80:e4:96:62:42:a1:44:
dc:49:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:07:37 2026 by rpki-client