Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/F8gWmBx_qTOY5CaadrBqOssWA0Y.roa
File: F8gWmBx_qTOY5CaadrBqOssWA0Y.roa (raw, json)
Hash identifier: 20p41PVCeDhtRb9xco7WXnqPrSjd5ln/3wQCLYfQ3VQ=
Subject key identifier: 17:C8:16:98:1C:7F:A9:33:98:E4:26:9A:76:B0:6A:3A:CB:16:03:46
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 019C4BF775892C990931F020DDDACC2C4F5C
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/F8gWmBx_qTOY5CaadrBqOssWA0Y.roa
Signing time: Wed 11 Feb 2026 09:10:34 +0000
ROA not before: Wed 11 Feb 2026 09:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6752
IP address blocks: 46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
46.175.156.0/22 maxlen: 22
46.175.156.0/24 maxlen: 24
46.175.157.0/24 maxlen: 24
46.175.158.0/24 maxlen: 24
46.175.159.0/24 maxlen: 24
80.80.84.0/22 maxlen: 22
80.80.84.0/24 maxlen: 24
80.80.85.0/24 maxlen: 24
80.80.92.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.4.0/22 maxlen: 22
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.80.0/22 maxlen: 22
91.187.83.0/24 maxlen: 24
91.187.84.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
91.187.92.0/22 maxlen: 22
91.187.93.0/24 maxlen: 24
94.125.138.0/23 maxlen: 23
94.125.140.0/23 maxlen: 23
109.111.96.0/19 maxlen: 19
109.111.96.0/22 maxlen: 22
109.111.96.0/24 maxlen: 24
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.111.0/24 maxlen: 24
109.111.112.0/22 maxlen: 22
109.111.116.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
185.87.46.0/23 maxlen: 23
185.132.200.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
185.194.59.0/24 maxlen: 24
185.247.24.0/22 maxlen: 22
188.241.26.0/23 maxlen: 23
194.158.64.0/19 maxlen: 19
194.158.64.0/22 maxlen: 22
194.158.64.0/24 maxlen: 24
194.158.68.0/22 maxlen: 22
194.158.72.0/22 maxlen: 22
194.158.72.0/23 maxlen: 23
194.158.76.0/22 maxlen: 22
194.158.78.0/24 maxlen: 24
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.84.0/24 maxlen: 24
194.158.85.0/24 maxlen: 24
194.158.88.0/22 maxlen: 22
194.158.92.0/22 maxlen: 22
194.158.95.0/24 maxlen: 24
213.236.8.0/21 maxlen: 21
213.236.8.0/24 maxlen: 24
2a02:8060::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:f7:75:89:2c:99:09:31:f0:20:dd:da:cc:2c:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Feb 11 09:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17c816981c7fa93398e4269a76b06a3acb160346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:af:c5:ce:19:44:77:a1:53:23:e1:75:8a:
d8:7c:43:70:f0:4d:1b:80:fc:39:4d:c6:99:a1:56:
58:e8:ee:ff:f8:b1:0a:27:94:2b:f3:42:f6:50:d7:
8b:f0:98:1d:62:98:f3:42:36:28:b7:91:99:15:3f:
19:db:d1:15:72:cb:cf:69:1c:dc:22:96:42:3f:86:
7a:41:71:5b:fa:3c:f9:01:83:57:07:f8:06:a0:05:
0a:ff:6c:95:b1:04:11:f1:ef:77:06:40:47:5d:b5:
5e:3e:4f:ef:fb:e0:b2:f4:db:e6:61:80:45:66:dd:
1a:d9:93:34:f3:4f:6e:26:51:1f:f2:f9:1d:d4:98:
2e:94:be:7b:f1:de:51:52:cf:98:9e:15:67:4b:5b:
c8:93:4a:87:05:47:d5:9e:f0:d1:14:f3:08:aa:85:
9d:12:ec:54:a7:4e:88:48:4a:b6:8c:65:b8:1b:9f:
d6:35:89:1d:af:06:92:c5:de:27:b3:b9:7c:31:64:
f1:81:f9:19:ce:0b:c8:0b:7c:25:31:d0:bd:c1:4f:
bb:cd:9f:57:f1:86:1a:7e:8d:7d:39:6c:81:f5:e0:
e5:e4:6f:ab:9d:89:16:5e:d4:de:f8:df:b7:a3:00:
1e:6b:3e:fb:68:a8:52:10:a8:57:da:0f:dc:de:a3:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:16:98:1C:7F:A9:33:98:E4:26:9A:76:B0:6A:3A:CB:16:03:46
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/F8gWmBx_qTOY5CaadrBqOssWA0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
94.125.138.0-94.125.141.255
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
185.247.24.0/22
188.241.26.0/23
194.158.64.0/19
213.236.8.0/21
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
bb:95:c6:e5:05:31:77:cb:f0:e4:7e:95:b8:ad:96:d4:b5:cd:
bd:0c:9a:93:11:2b:f0:e4:10:f2:70:a4:99:d7:27:41:63:99:
57:64:f1:56:5c:5d:27:5f:06:49:28:e3:76:9e:c2:e0:4b:1c:
bd:65:36:18:49:ce:cd:c1:ad:b2:17:c4:5c:0b:26:8e:8b:22:
ba:a0:7a:9e:de:4d:7e:fc:e7:90:cc:27:52:49:29:4d:4d:d4:
1c:e2:56:a4:51:17:c2:c3:e9:c4:4f:30:40:62:c7:30:ee:2a:
8f:c2:4f:ac:62:90:3c:b4:5d:93:86:21:30:a5:96:f1:02:ed:
9c:0d:5a:79:c7:76:22:61:32:e1:4b:43:9d:67:35:ff:68:90:
50:99:0c:e7:1a:1d:7b:f2:76:f9:76:e6:e9:57:15:5d:72:54:
74:9e:42:46:98:54:f8:8a:84:4e:77:97:98:04:7c:bf:09:4e:
ea:d1:d9:58:fe:ec:4e:f4:c1:0b:85:42:cc:71:fd:3c:bc:d1:
0d:e0:39:11:ed:54:ca:99:65:ee:35:33:2d:47:ea:50:31:20:
cf:9c:99:04:86:df:e7:0c:fb:18:4a:df:5a:86:27:27:9b:51:
62:67:e4:ab:ae:e7:01:b9:95:ac:e0:77:e5:10:7d:92:4e:13:
7a:60:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:50 2026 by rpki-client