Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/f8Fa-1BgGSCDRddRgU0_kBA1sf8.roa
File: f8Fa-1BgGSCDRddRgU0_kBA1sf8.roa (raw, json)
Hash identifier: 3X3V1Td6yfTIoqJh6y0NH6OR9q9jh8r7Y0iQcYhxcco=
Subject key identifier: 7F:C1:5A:FB:50:60:19:20:83:45:D7:51:81:4D:3F:90:10:35:B1:FF
Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial: 01A18295862CE0FC1272D53CE48B9D74B2E1
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/f8Fa-1BgGSCDRddRgU0_kBA1sf8.roa
Signing time: Wed 28 Oct 2026 12:56:39 +0000
ROA not before: Wed 28 Oct 2026 12:56:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 185.55.81.0/24 maxlen: 24
2a13:bac0:113::/48 maxlen: 48
2a13:bac0:161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:95:86:2c:e0:fc:12:72:d5:3c:e4:8b:9d:74:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Validity
Not Before: Oct 28 12:56:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fc15afb506019208345d751814d3f901035b1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:e3:eb:eb:a1:b3:97:90:15:6b:4a:42:42:
4b:d9:05:53:56:33:b7:91:28:1e:12:01:aa:fb:c0:
ad:05:2b:18:41:16:6b:27:6e:8a:60:86:2a:82:18:
7c:ca:24:40:81:58:2c:0b:2b:ad:9a:1e:50:75:f9:
e9:6d:b0:c4:73:d5:c0:04:da:1a:11:11:29:af:0a:
04:b6:88:3d:b1:eb:da:36:31:40:6a:58:d6:78:e0:
bd:dc:e2:ff:c4:1a:8c:d0:e5:8f:8f:cc:8f:7d:d7:
58:79:99:c3:4e:6d:d7:1d:63:99:71:25:b5:68:b9:
f6:98:30:8f:9c:22:de:c2:13:49:23:6b:c3:31:36:
21:58:73:95:d9:5f:bd:7b:e2:3a:a0:67:41:47:a3:
c3:aa:24:bc:a4:21:5e:c7:a1:22:31:e5:3c:cf:9a:
ef:54:21:f8:3c:7e:7a:c6:9f:03:0e:3a:28:f6:a9:
33:bf:dc:f1:ad:0a:f7:9d:b3:48:59:ec:8b:d0:15:
14:33:19:c0:39:7a:b5:24:18:e5:4e:d8:4d:85:79:
c1:86:22:7d:3d:47:bd:f4:a4:4a:43:a1:bf:8b:2b:
c7:3a:e1:80:51:f8:8b:dc:a9:52:fb:20:e7:3b:11:
45:52:2e:39:a7:90:e0:35:e1:0a:b2:47:98:b7:0b:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C1:5A:FB:50:60:19:20:83:45:D7:51:81:4D:3F:90:10:35:B1:FF
X509v3 Authority Key Identifier:
keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/f8Fa-1BgGSCDRddRgU0_kBA1sf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.81.0/24
IPv6:
2a13:bac0:113::/48
2a13:bac0:161::/48
Signature Algorithm: sha256WithRSAEncryption
18:b4:bb:6a:75:51:97:6e:d0:79:30:3b:61:79:8c:d8:74:04:
b8:db:46:f2:66:ec:49:f1:56:5b:76:29:25:af:07:d0:ac:0d:
c2:5e:e5:38:7b:49:d2:da:a4:03:84:ed:4e:3c:d7:ac:30:97:
2e:ac:23:30:30:6e:eb:d3:cc:f7:ed:f9:38:f3:41:36:e7:4d:
40:c7:0a:fb:fe:8f:f4:18:9f:61:fb:94:36:eb:1d:2d:cc:3a:
02:79:2a:98:93:15:40:fc:f4:ea:ad:f8:fc:37:2f:2a:db:a9:
44:27:4a:c3:dc:82:8d:2e:64:de:b6:fb:e5:7a:6f:c3:cd:83:
08:63:59:44:21:f7:88:35:a8:56:14:5f:53:4c:9a:fe:42:7a:
af:69:01:19:dc:f6:ec:b4:f8:10:bc:34:01:e5:c0:72:f8:fc:
94:d9:8c:62:13:ce:bc:e0:69:7b:f2:a5:15:0c:39:11:c9:0b:
22:33:fd:50:35:9f:b8:05:af:76:33:05:5a:03:ea:67:39:12:
09:8e:b4:40:8e:26:fb:70:a6:a3:73:73:d5:81:94:5e:8b:d9:
c8:42:ef:15:93:d2:e2:c8:2b:d5:fb:d5:88:82:81:69:33:ac:
45:4a:9c:68:b9:6b:41:e8:b1:ba:6b:ac:a3:56:66:ee:17:cb:
6a:75:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:40 2026 by rpki-client