Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/0GfPX1iH-4jrdeocNq_6rEuAOsw.roa
File: 0GfPX1iH-4jrdeocNq_6rEuAOsw.roa (raw, json)
Hash identifier: ZXWqDRXmQQYRidDZbFeir8xCY/Br5x9u3HuJDCrOxDI=
Subject key identifier: D0:67:CF:5F:58:87:FB:88:EB:75:EA:1C:36:AF:FA:AC:4B:80:3A:CC
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01A020FA93DF57D0176ED89C5C3822DD8DBF
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/0GfPX1iH-4jrdeocNq_6rEuAOsw.roa
Signing time: Thu 20 Aug 2026 21:01:27 +0000
ROA not before: Thu 20 Aug 2026 21:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201188
IP address blocks: 185.16.110.0/24 maxlen: 24
185.63.16.0/24 maxlen: 24
185.63.17.0/24 maxlen: 24
185.63.18.0/24 maxlen: 24
185.63.19.0/24 maxlen: 24
185.63.92.0/22 maxlen: 22
185.63.92.0/24 maxlen: 24
185.63.93.0/24 maxlen: 24
185.63.94.0/24 maxlen: 24
185.63.95.0/24 maxlen: 24
2a03:ba0::/29 maxlen: 29
2a03:ba0::/32 maxlen: 32
2a03:ba0::/64 maxlen: 64
2a03:ba2::/64 maxlen: 64
2a03:ba3::/64 maxlen: 64
2a03:ba4::/64 maxlen: 64
2a03:ba5::/64 maxlen: 64
2a03:ba6::/64 maxlen: 64
2a03:ba7::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:fa:93:df:57:d0:17:6e:d8:9c:5c:38:22:dd:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Aug 20 21:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d067cf5f5887fb88eb75ea1c36affaac4b803acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:9e:06:be:96:bf:b7:aa:32:c2:02:ef:6b:
0e:7c:7f:aa:e0:e2:2b:b3:df:bd:e1:82:c0:cb:52:
ba:da:33:9c:58:0f:ce:b4:e6:3d:e0:6f:d5:c7:16:
32:26:41:08:bd:7b:54:34:9a:09:ff:74:c2:65:cc:
ff:11:c3:1b:f2:dc:f4:d7:69:f7:d5:cd:41:1b:ec:
d8:7a:0d:db:9a:27:37:ba:e2:81:8c:f9:10:27:0f:
c8:05:7a:52:a8:21:18:57:92:67:16:cb:fd:46:cf:
6e:2f:bb:98:95:85:63:68:5b:7d:4f:02:04:1e:c1:
ea:5b:35:2b:42:87:ae:5c:d2:88:a6:87:e0:ee:bc:
99:7a:7e:f3:cd:c9:83:a1:c5:10:31:ed:00:04:c1:
ca:66:3b:66:be:ba:f7:e6:db:7f:c7:fa:99:d4:85:
ab:f9:e0:1f:80:0f:a2:33:8f:7f:e6:fa:ca:3e:92:
16:06:d4:2a:12:e0:fc:38:b2:6a:9b:80:5f:71:73:
2b:71:08:5a:52:a8:03:19:05:97:9f:8f:7b:0c:3a:
5b:31:bd:78:79:c0:9a:b5:df:68:79:b7:46:3a:1c:
53:48:ca:07:e8:d2:2b:9e:70:2a:2d:d7:b5:85:c1:
bd:b5:ca:ac:d5:d6:2e:40:f8:a5:fb:53:8d:33:ed:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:CF:5F:58:87:FB:88:EB:75:EA:1C:36:AF:FA:AC:4B:80:3A:CC
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/0GfPX1iH-4jrdeocNq_6rEuAOsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.110.0/24
185.63.16.0/22
185.63.92.0/22
IPv6:
2a03:ba0::/29
Signature Algorithm: sha256WithRSAEncryption
76:8a:06:3c:71:46:e0:53:9d:60:09:f9:ea:76:1c:de:01:ee:
4b:4f:99:1f:02:62:00:6b:f1:56:6e:43:79:8d:80:e7:9c:8d:
2d:a8:79:07:cd:f1:f4:be:ba:fb:90:14:ba:58:68:a7:1f:20:
bb:35:0f:ea:a2:99:8f:f2:9b:00:95:c9:33:fc:1b:cc:77:a6:
60:10:af:1d:03:87:f5:33:a4:65:f2:1f:56:c1:3e:5e:f4:51:
e9:3c:e9:a2:4d:bd:cf:95:fa:f4:fc:b3:9a:fe:3e:6d:1f:dd:
1d:8d:9f:db:11:f9:73:f7:3f:dc:ce:2c:ae:7b:5c:11:de:ac:
36:11:d4:43:c6:3e:15:9f:e7:94:79:5e:27:7f:09:81:28:ee:
ee:08:41:7c:f8:38:c1:b5:df:27:3e:ec:ae:8d:94:31:e4:15:
9e:15:3f:d2:c3:96:9a:ea:1d:a1:46:0a:17:50:c9:0d:89:07:
61:6a:3e:59:71:44:45:c7:26:c3:6f:1a:ec:2c:99:85:a9:40:
05:7d:50:dc:46:99:52:21:9b:aa:27:69:62:97:6a:95:1d:7e:
44:56:08:13:6c:08:ad:c0:ee:e5:46:4b:39:2e:d6:42:29:27:
f3:80:df:a9:05:86:60:20:9c:61:ef:b1:49:69:f4:86:f2:0e:
b0:4a:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:07:17 2026 by rpki-client