Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/F7XejdmCaEGNMixUqQk4-J8w90Y.roa
File: F7XejdmCaEGNMixUqQk4-J8w90Y.roa (raw, json)
Hash identifier: xFxOSrDhv/sfkFnURVLPeUZ69mrVPRSFZ5DZPDd5lR8=
Subject key identifier: 17:B5:DE:8D:D9:82:68:41:8D:32:2C:54:A9:09:38:F8:9F:30:F7:46
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 01A1325080CF3850201DB15A8EF11C5EF283
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/F7XejdmCaEGNMixUqQk4-J8w90Y.roa
Signing time: Mon 12 Oct 2026 22:51:38 +0000
ROA not before: Mon 12 Oct 2026 22:51:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205572
IP address blocks: 185.213.84.0/22 maxlen: 22
185.213.84.0/24 maxlen: 24
185.213.85.0/24 maxlen: 24
185.213.86.0/24 maxlen: 24
185.213.87.0/24 maxlen: 24
2a0b:8540::/29 maxlen: 29
2a0b:8540:254:9::/64 maxlen: 64
2a0b:8540:254:10::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:50:80:cf:38:50:20:1d:b1:5a:8e:f1:1c:5e:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Oct 12 22:51:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17b5de8dd98268418d322c54a90938f89f30f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:32:54:78:0a:e0:59:ae:18:52:b3:8c:a8:
b6:da:fb:97:91:a1:41:bc:59:53:29:aa:62:1f:a6:
87:08:fe:66:2d:36:fd:53:f7:fa:98:f6:80:7b:69:
6f:26:1f:51:f7:87:6d:48:13:e3:88:a6:ec:d6:80:
0e:32:40:00:f2:c9:48:bc:a0:f5:6e:60:2f:d8:97:
21:2d:b1:7b:b0:51:e6:94:0f:22:95:72:a5:f1:9f:
76:30:d9:91:db:b0:5e:8f:cf:67:f8:62:84:5b:b1:
d4:dd:52:c2:8c:93:78:5e:96:b4:9c:e0:fc:04:51:
a9:f4:26:b2:1b:6d:b6:c1:15:4c:39:17:25:1c:14:
08:18:03:a3:87:85:6f:ac:46:f1:ef:b5:cd:9d:93:
1f:35:2b:2c:18:6d:e3:39:bd:5e:5f:d2:72:3a:93:
7c:bd:8d:82:8f:ec:cb:0d:69:36:2b:8c:69:ee:87:
b6:3e:cb:1d:a5:9d:d2:b0:84:11:59:dc:07:0e:70:
07:b3:0d:d3:e7:8c:f5:01:81:42:fb:65:c8:05:74:
d9:dd:c5:ac:40:73:9d:3a:a3:3e:2d:cf:75:81:53:
95:ba:8f:94:2f:25:e6:0e:26:85:46:ff:78:13:c9:
ea:20:dd:f9:8c:0f:7f:2d:64:87:d7:f5:b6:78:0c:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:DE:8D:D9:82:68:41:8D:32:2C:54:A9:09:38:F8:9F:30:F7:46
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/F7XejdmCaEGNMixUqQk4-J8w90Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.84.0/22
IPv6:
2a0b:8540::/29
Signature Algorithm: sha256WithRSAEncryption
27:ff:40:ae:bf:36:bd:68:38:0b:17:b6:c2:d3:aa:59:41:c0:
f9:69:03:d6:31:c8:43:bb:55:f1:1b:b2:53:8d:3f:c0:f7:f7:
0f:c5:0c:7a:35:93:ad:83:5d:97:83:e4:9a:54:4b:8c:a0:f1:
28:9e:5e:9d:d6:71:ef:29:a6:d3:3e:78:b8:21:ba:4f:41:11:
74:65:49:2e:7d:e2:51:7a:69:e0:30:b0:04:75:32:b0:0d:01:
7e:50:b1:45:fc:67:9b:90:cc:95:b9:5c:32:f6:8c:10:28:87:
42:92:21:05:b7:8d:26:43:38:89:43:29:0a:b7:1e:eb:da:c0:
97:5d:01:d0:cb:8a:91:bf:60:87:29:dc:7a:f5:b4:8f:84:2a:
6d:69:41:1e:8f:51:c2:f9:76:4f:82:94:47:3a:e1:39:77:3c:
29:9b:78:b4:c7:57:27:7c:b8:b2:6f:4c:c3:10:24:50:10:36:
bc:42:d8:1e:9f:3d:53:53:b7:ff:96:c8:04:3c:64:f1:5f:e3:
29:52:a0:68:2d:fd:f3:98:b4:b4:d0:c2:7c:c7:c1:db:71:b7:
d9:45:7d:c9:28:e6:6c:59:de:e5:ca:a8:d0:4c:fe:06:b6:dc:
0b:60:db:e4:b2:36:37:ea:78:59:0b:4e:a0:32:87:55:ca:82:
bb:11:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:37:24 2026 by rpki-client