Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t0J7-Qqm_tmv0A6nZwOXBZx_pbg.roa
File: t0J7-Qqm_tmv0A6nZwOXBZx_pbg.roa (raw, json)
Hash identifier: DEtV3dBaXfMUF4br+fuKi+scrRenYKhkFAo+IVV3/6Y=
Subject key identifier: B7:42:7B:F9:0A:A6:FE:D9:AF:D0:0E:A7:67:03:97:05:9C:7F:A5:B8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C55C2C66208E46014C61DEA17361C0479
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t0J7-Qqm_tmv0A6nZwOXBZx_pbg.roa
Signing time: Fri 13 Feb 2026 06:49:14 +0000
ROA not before: Fri 13 Feb 2026 06:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 266539
IP address blocks: 217.60.14.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.184.0/23 maxlen: 24
217.60.193.0/24 maxlen: 24
217.60.195.0/24 maxlen: 24
217.60.198.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 17:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:c2:c6:62:08:e4:60:14:c6:1d:ea:17:36:1c:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 06:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7427bf90aa6fed9afd00ea7670397059c7fa5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:61:36:35:b7:ed:61:d9:08:97:d4:76:21:
38:d1:26:50:92:36:72:c5:3b:b4:b5:9b:85:1c:3e:
8c:11:28:64:49:f0:33:e4:e0:89:40:6a:d0:f6:3a:
ad:bf:a8:5e:bc:94:9d:18:8b:5a:12:2d:df:e3:08:
9a:65:e3:77:44:a8:3d:92:8f:2d:fb:b8:8c:8c:6a:
4d:e8:99:90:86:e3:4f:06:04:43:4f:17:8e:d3:31:
32:4c:19:61:ae:52:41:60:b6:ed:39:de:cd:a5:12:
d6:4d:d6:da:b6:42:d9:f3:8c:a8:2d:f6:3d:e7:da:
55:5d:a1:43:4a:4d:4b:a0:1c:67:c0:b2:f1:ca:69:
bf:90:f0:32:d0:06:85:54:d6:23:99:b7:2b:97:57:
95:2c:f4:6c:01:b4:1e:9a:08:7d:17:69:ba:21:43:
59:0b:00:30:18:81:44:e3:63:5e:0b:bb:24:b2:8e:
65:eb:54:6b:98:18:06:b8:f2:6d:ee:78:3f:41:80:
6a:b3:33:b2:5f:74:b5:15:4f:4c:85:ef:37:dd:97:
bc:45:27:59:c5:ea:0d:da:69:11:01:62:76:6f:c4:
67:91:5c:8f:bd:98:5c:a6:5c:ff:b1:43:d6:09:c7:
a7:ca:73:e2:89:09:4a:0b:d6:fb:1f:a2:66:56:1a:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:42:7B:F9:0A:A6:FE:D9:AF:D0:0E:A7:67:03:97:05:9C:7F:A5:B8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t0J7-Qqm_tmv0A6nZwOXBZx_pbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.14.0/24
217.60.24.0/24
217.60.26.0/24
217.60.184.0/23
217.60.193.0/24
217.60.195.0/24
217.60.198.0/24
217.60.242.0/24
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
15:58:5b:97:ba:e3:56:5e:a1:0e:83:a6:30:2a:1b:57:9a:0e:
82:0c:12:d2:40:c1:63:9a:64:8c:5c:e1:fb:ac:58:e8:69:68:
92:b2:55:57:00:6a:82:03:48:9f:56:fe:13:11:09:54:2b:2a:
5a:cb:29:e4:fd:10:f6:cb:db:0d:38:b1:ef:ec:41:be:23:16:
af:a1:e5:08:7c:5b:9c:5d:d3:5e:8d:08:10:ec:fa:fb:a5:84:
e8:a1:d7:20:29:1a:22:fc:8e:03:72:0b:2d:bf:21:f4:21:8b:
8d:3f:ec:01:aa:ab:81:20:ac:6b:22:9e:ec:95:1a:96:4c:f3:
16:fb:cd:c5:13:cb:a8:9a:1b:da:10:56:ea:44:0c:d1:3d:eb:
16:b6:df:72:e9:d7:51:91:0d:b9:b7:8f:77:32:55:2f:f2:d8:
4a:72:f0:79:fd:fc:68:51:21:61:7f:05:dc:a6:61:6d:67:84:
62:bd:6e:3a:b0:9d:ce:f0:60:5a:4f:99:7b:79:ab:8f:59:f0:
ab:23:f9:2a:89:48:1a:a0:31:b4:73:3b:60:76:ef:29:97:d8:
93:1e:86:95:a1:90:96:b9:85:6d:e0:c9:2a:34:86:d6:8f:c4:
53:15:9f:dd:36:49:2f:3b:21:b4:2e:a5:b2:42:ac:f8:1f:66:
99:44:93:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:09 2026 by rpki-client