Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/1-PF6EFWAJX4SaH2fxcxhFuVNThY.roa
File: 1-PF6EFWAJX4SaH2fxcxhFuVNThY.roa (raw, json)
Hash identifier: oVDsbBbWR9pJm4t6SkKtb3J+OBhZ8wagxkvIV19w5fo=
Subject key identifier: F8:F1:7A:10:55:80:25:7E:12:68:7D:9F:C5:CC:61:16:E5:4D:4E:16
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019FC259D95934D96C624F4DAF770811A7C9
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/1-PF6EFWAJX4SaH2fxcxhFuVNThY.roa
Signing time: Sun 02 Aug 2026 12:01:36 +0000
ROA not before: Sun 02 Aug 2026 12:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 185.70.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:59:d9:59:34:d9:6c:62:4f:4d:af:77:08:11:a7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Aug 2 12:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8f17a105580257e12687d9fc5cc6116e54d4e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:5e:30:e8:fe:39:b1:8f:e3:fb:b7:f6:4e:
40:c4:e7:1b:54:c4:07:79:54:6b:c6:2e:e7:f9:e3:
49:0c:6b:14:c1:e9:6b:d9:bf:e5:2e:93:79:87:e7:
76:41:54:bb:cc:a7:2e:4e:cd:be:1e:5f:26:17:ce:
a3:76:d0:d9:ea:5d:55:dd:35:83:93:3b:53:eb:c8:
98:55:c7:83:b0:55:44:b7:2c:9a:18:4c:86:d4:16:
a4:2d:a0:26:6a:3f:89:3e:de:9a:84:c1:43:23:fa:
f1:50:74:82:c6:35:5c:b9:ae:b4:fd:18:5e:76:d1:
8f:16:c9:0b:ae:74:eb:51:4c:82:05:a3:67:ff:03:
56:cb:54:18:e6:80:0c:fb:83:70:84:8f:55:e9:ed:
3b:a8:06:b5:49:c7:39:81:a6:81:d1:50:08:47:21:
55:67:2b:58:88:79:f5:e5:66:ae:01:eb:b3:69:fe:
28:8e:54:4e:18:61:50:b3:1f:dd:e9:6b:07:e2:eb:
a4:1b:d5:b4:68:65:3f:24:e4:b8:b0:72:14:ab:e5:
f3:fe:5f:f6:1d:16:88:e0:7e:d5:d1:52:8e:41:d5:
9e:f5:81:15:9e:0c:11:ca:a6:3b:16:f0:67:5c:c2:
12:95:51:97:81:a9:bf:5c:b3:63:5e:2f:4e:e7:83:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:7A:10:55:80:25:7E:12:68:7D:9F:C5:CC:61:16:E5:4D:4E:16
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/1-PF6EFWAJX4SaH2fxcxhFuVNThY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.223.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b8:f5:42:aa:88:1f:52:7b:89:69:ee:b4:e2:ac:d9:19:3f:
dc:f9:85:99:40:e4:bc:a0:12:31:29:ce:39:08:c0:94:8e:21:
b4:84:0f:07:06:ae:8a:c6:a4:8e:82:07:96:54:c7:24:eb:e7:
f8:f3:8c:1d:e2:86:99:73:c3:75:e0:52:86:df:c5:e2:1e:b5:
16:7e:b7:eb:72:a0:7f:e9:a0:e1:15:e5:b8:81:35:63:a3:1a:
ff:13:68:6b:fe:eb:b7:e0:b4:01:3c:32:be:35:14:14:5f:2c:
2c:53:7a:1c:9c:91:0d:be:22:b1:0d:f7:eb:c3:fc:d8:42:b9:
03:95:de:dd:8d:dc:2b:d6:d6:00:22:fd:8c:7b:56:04:f3:29:
d7:64:bc:cb:f4:63:2d:4f:27:9a:45:a3:21:dc:ee:e8:be:d8:
4f:d2:96:46:c0:83:f3:23:0f:cb:e0:78:a7:47:29:c8:cb:43:
ff:5b:f2:5f:5a:93:48:65:a6:0f:07:bb:16:00:1f:9a:1f:2e:
37:7d:cb:b6:07:2f:d6:d5:fa:40:02:fe:ad:90:43:ef:4e:10:
f5:bb:1f:c6:a9:38:43:11:e1:fb:cf:a6:62:7f:02:5a:7e:5a:
9b:40:b2:b7:48:d9:b2:c6:0e:59:ad:95:6a:77:a4:82:a7:04:
4c:c3:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:27 2026 by rpki-client