Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/gPX2w6aYY4I5P7p3f3anfig-Au0.roa
File: gPX2w6aYY4I5P7p3f3anfig-Au0.roa (raw, json)
Hash identifier: eKufC18QMz1OVmVEKpjKGmsCKCfgO9zo37hAYgciCO4=
Subject key identifier: 80:F5:F6:C3:A6:98:63:82:39:3F:BA:77:7F:76:A7:7E:28:3E:02:ED
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 019F3AD323B3F5288D96D7D28393C6355CFA
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/gPX2w6aYY4I5P7p3f3anfig-Au0.roa
Signing time: Tue 07 Jul 2026 04:25:43 +0000
ROA not before: Tue 07 Jul 2026 04:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9137
IP address blocks: 80.224.248.0/22 maxlen: 22
82.158.180.0/22 maxlen: 22
185.82.56.0/22 maxlen: 22
204.14.244.0/22 maxlen: 22
213.204.0.0/19 maxlen: 19
2a02:5640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:d3:23:b3:f5:28:8d:96:d7:d2:83:93:c6:35:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Jul 7 04:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80f5f6c3a6986382393fba777f76a77e283e02ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:c7:18:00:98:57:e1:ae:d0:c4:49:5a:9f:
1d:b2:77:42:e5:65:22:f9:84:d5:4c:2a:e3:c8:7f:
d9:db:f0:50:c7:b2:ac:dc:f9:0f:57:5d:19:94:e8:
cd:48:15:f8:92:6a:db:39:47:3d:25:4d:85:b6:ca:
cc:fd:d1:4e:b1:fa:a3:e6:51:8f:a6:e8:cc:16:c5:
56:04:32:c2:fa:f4:1e:42:f7:1c:54:15:f3:a1:68:
a6:11:8a:c7:27:e1:32:6e:21:8c:78:11:e6:6f:64:
7e:f6:e6:9f:0a:02:fe:a7:4b:60:52:8d:7b:e8:bd:
30:b4:54:a3:d8:aa:20:34:a6:e7:40:85:31:f0:27:
eb:04:7d:94:7c:2d:fb:c5:c8:3c:13:b7:4a:23:59:
e2:fb:4b:0c:98:a2:7e:3d:e3:be:8b:5d:6b:a6:96:
ed:2a:ee:c2:fb:90:d2:98:2c:5c:0e:c6:7c:7c:80:
65:16:ac:10:e4:41:d8:e7:2d:fd:c7:8d:c9:fa:f0:
5f:00:6b:69:db:c8:2d:7f:a9:0b:86:21:67:62:d0:
b0:cb:d9:7b:52:c9:a0:87:d4:2b:11:23:e0:b3:f0:
07:cd:8b:78:2d:e0:f2:5e:fc:80:9e:24:5c:cc:cb:
39:18:eb:31:a3:64:0b:55:30:b6:23:11:1f:a9:96:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:F6:C3:A6:98:63:82:39:3F:BA:77:7F:76:A7:7E:28:3E:02:ED
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/gPX2w6aYY4I5P7p3f3anfig-Au0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.248.0/22
82.158.180.0/22
185.82.56.0/22
204.14.244.0/22
213.204.0.0/19
IPv6:
2a02:5640::/29
Signature Algorithm: sha256WithRSAEncryption
66:c1:98:b6:d5:cc:de:d4:71:60:05:ec:dc:58:bf:4a:ac:97:
ad:cc:d2:ab:44:ae:4c:40:1e:b2:32:b3:17:cc:44:19:19:98:
aa:7e:fa:7e:3d:ed:91:d3:10:74:e6:88:38:34:ee:c2:98:a0:
25:40:7b:1e:23:86:7b:1e:87:28:52:af:dc:e2:1b:6e:5c:25:
88:1c:ce:fb:a8:89:36:e8:d0:71:6c:87:6f:12:f7:9e:67:ef:
91:5e:4c:d8:76:f2:00:b0:e3:d4:d5:9a:fc:76:0e:d2:05:93:
1c:73:c8:54:c2:76:99:24:84:e6:0c:b7:62:e9:e2:57:c1:bb:
4f:ec:47:05:49:43:de:c7:d7:55:41:bb:5a:13:cf:dc:21:c3:
fc:9b:e0:cc:95:37:4c:87:43:25:07:41:8a:d8:12:58:81:50:
09:fc:38:50:a4:f3:a2:2a:7a:07:3b:14:5f:aa:4a:80:5c:b3:
63:00:b7:9f:a5:51:72:55:11:ec:37:24:fc:ed:00:74:bf:4e:
a4:a9:20:50:38:0b:1e:a5:2a:51:6a:96:ef:c4:4a:b8:73:cb:
d1:ca:9d:ed:ed:dd:37:8f:93:75:51:4b:95:f3:5b:de:d9:96:
06:25:37:58:81:6e:fa:af:fc:54:0b:ce:96:92:b4:c9:0d:12:
4d:a2:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:54 2026 by rpki-client