Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa
File: w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa (raw, json)
Hash identifier: 2ZZ8GWyxnopSnEx+KCqhJpc+c1KzSn/YRlcq0uuBarM=
Subject key identifier: C3:D6:75:95:98:D0:A3:F1:13:DB:98:36:07:F9:36:7D:C0:2A:70:B3
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019C2D827F1E1D0044559235A8CFE59EA452
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa
Signing time: Thu 05 Feb 2026 11:14:12 +0000
ROA not before: Thu 05 Feb 2026 11:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 141.226.109.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
144.249.128.0/18 maxlen: 24
167.17.128.0/19 maxlen: 24
167.86.55.0/24 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:82:7f:1e:1d:00:44:55:92:35:a8:cf:e5:9e:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Feb 5 11:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3d6759598d0a3f113db983607f9367dc02a70b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:72:ed:93:e4:55:af:2f:ff:33:73:3a:59:
ef:4a:5b:11:df:1a:4e:c2:df:ca:a9:aa:e7:3c:f8:
47:38:b0:b0:bd:f9:17:c7:8d:f2:47:6a:79:79:92:
1d:28:10:dc:73:66:94:a7:f7:63:79:61:8c:28:41:
43:6d:ab:1d:30:b8:67:89:e5:c4:70:e9:31:fe:40:
6d:b7:b7:80:0e:ef:7e:88:ab:a9:f8:66:ba:bf:80:
d8:57:d1:92:c6:67:d1:11:07:22:f8:d4:63:43:9a:
54:46:7f:aa:ad:f9:0e:d2:40:35:89:91:55:4c:41:
2e:e6:72:b7:e1:70:51:e0:76:39:5b:0f:62:34:2a:
3c:88:fe:53:5f:96:38:ad:af:09:45:cd:97:8d:78:
ee:da:51:5a:2a:37:90:1c:c5:90:6a:28:54:84:40:
61:7f:5e:eb:ec:84:48:c7:30:37:49:47:e5:83:17:
f2:1f:a2:d1:1f:86:bf:24:b9:10:1e:5b:74:c9:3c:
15:96:f1:92:d6:b5:9c:bb:27:dd:3e:4c:c3:69:e8:
d8:fb:1f:35:38:0f:ad:fb:c4:ce:77:fa:74:a0:82:
0c:f3:cc:75:8d:4c:97:37:18:b4:06:ae:e4:aa:24:
f7:f5:f6:43:8a:0b:fb:ce:c6:1a:b7:b8:5c:2a:c0:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:75:95:98:D0:A3:F1:13:DB:98:36:07:F9:36:7D:C0:2A:70:B3
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/w9Z1lZjQo_ET25g2B_k2fcAqcLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.109.0-141.226.110.255
141.226.252.0/22
144.249.128.0/18
167.17.128.0/19
167.86.55.0/24
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
a5:de:51:24:d9:28:8e:d5:99:e8:64:5e:51:77:38:db:11:1d:
f6:8d:9b:72:11:c4:3b:b4:a1:0a:08:2b:0e:cc:bb:5f:50:6e:
f9:8f:59:5f:8d:f8:5f:34:0f:c2:d4:7e:49:b4:cf:41:67:7b:
73:3c:64:7e:32:ba:8e:80:2c:b3:49:51:e9:90:8c:bc:33:e3:
38:60:d8:f7:9d:ab:b2:76:3c:35:6c:e6:fd:ea:71:74:54:5f:
a0:20:3d:2e:72:7c:de:5b:fb:f2:39:12:78:5c:1e:24:a3:f0:
a7:7d:b2:17:c2:5a:0d:19:8d:53:f1:93:5c:9f:0e:b0:a0:82:
c0:14:2a:c5:02:fa:e6:f4:f7:c9:e7:06:f7:a1:bb:56:5b:33:
88:d1:0e:f5:04:8b:0c:c1:46:09:46:ed:ba:5d:fe:aa:f3:f8:
f2:67:8b:e5:0d:75:82:e6:35:30:42:6d:02:9b:4b:06:e9:9c:
e7:3e:d6:bc:a0:6b:d3:1a:b6:3a:77:a6:59:7e:1b:dc:d9:a7:
46:43:3c:e1:6c:4a:25:03:56:8b:fc:73:86:e9:93:35:53:cb:
1a:50:bf:26:72:41:51:e4:ba:73:0f:98:80:0c:e9:7e:4c:ce:
98:1b:07:39:0e:64:51:9a:a3:ab:8c:c6:68:7c:c2:18:dc:de:
09:f2:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:00:58 2026 by rpki-client