Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa
File: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (raw, json)
Hash identifier: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=
Subject key identifier: 38:32:9F:CE:AB:0E:9B:71:98:9C:75:60:62:28:66:C2:8D:CB:AB:28
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019C53EC2DD31C6178BB985F35DC274836CA
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa
Signing time: Thu 12 Feb 2026 22:15:12 +0000
ROA not before: Thu 12 Feb 2026 22:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 146.247.107.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:ec:2d:d3:1c:61:78:bb:98:5f:35:dc:27:48:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 12 22:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38329fceab0e9b71989c7560622866c28dcbab28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:fb:a2:b2:29:26:a2:b4:8d:bb:2d:b3:61:
3c:19:48:2e:52:12:80:71:94:16:12:fa:12:f2:05:
32:38:56:25:74:e8:14:89:06:87:93:d9:0b:4a:64:
19:78:95:a7:5d:a1:f2:53:c8:bc:f9:f4:f5:be:06:
52:ed:48:b1:3f:d9:94:44:12:a6:82:82:f8:7b:42:
d8:4f:61:da:0d:dc:be:34:cd:01:25:9b:94:09:09:
76:78:5c:a6:76:c8:5e:a0:be:7c:45:b0:0f:00:15:
c8:c7:12:93:45:73:68:16:36:3d:06:d6:4a:3c:1b:
a0:6c:85:64:00:a8:da:49:9c:e8:8f:6b:2b:03:f8:
17:cf:8e:87:63:27:4d:e9:23:22:a5:0d:e7:60:45:
c4:7c:45:eb:4d:52:ee:5f:72:61:25:57:c3:ba:3d:
bd:17:79:6e:90:87:14:ff:2d:0b:f2:a0:29:9e:7d:
80:d9:9d:f0:88:98:a4:1c:ad:1f:ea:a5:74:f0:59:
27:55:3d:84:7e:19:a0:3e:30:a2:8c:07:c0:f3:23:
64:2a:18:10:bd:27:0f:9d:91:68:6d:c5:52:b3:5c:
40:6e:98:cf:78:f4:88:c4:35:c9:ee:76:02:33:28:
13:4d:c7:55:d0:d6:8c:79:3c:66:fa:ae:2b:87:02:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:9F:CE:AB:0E:9B:71:98:9C:75:60:62:28:66:C2:8D:CB:AB:28
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0/24
146.247.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:85:2b:39:a8:aa:18:eb:94:a5:cb:4f:d8:da:c6:35:85:5a:
9a:a3:a7:92:c2:f1:0c:06:74:e3:92:a5:5c:df:df:fb:e8:74:
28:2a:3e:79:a8:9e:43:ed:d0:d8:c8:bf:fd:3b:99:8a:77:8d:
8a:d4:e9:b9:c0:e2:dd:69:21:71:7c:bb:e4:7f:7d:d4:b4:21:
52:93:e0:d4:72:6e:91:0c:24:eb:e6:58:cc:47:bd:ef:c1:6b:
82:19:ea:9f:b7:0b:8e:4c:68:34:dc:de:ee:49:cc:a1:1f:d3:
04:35:32:1f:3e:fa:4a:2b:44:32:d1:bc:4c:3b:3c:99:97:1c:
36:1b:16:e1:f3:0a:ed:d3:7e:15:61:4b:5a:19:0e:e8:05:c5:
0d:1f:55:7a:36:7c:69:fd:c9:83:55:e9:ff:66:cf:20:72:a9:
f1:8b:48:0d:2c:d3:01:80:c0:67:16:d0:78:5c:d7:44:17:ff:
d2:96:b7:14:e6:20:61:24:f3:7b:bb:89:51:56:f8:87:0a:15:
d6:09:34:55:87:d5:29:ed:e5:74:90:2c:b9:bf:b0:c5:34:25:
96:fe:06:b1:a1:51:37:23:6e:67:7c:cd:fb:d4:dc:56:25:84:
46:f8:79:b7:84:51:11:62:49:b6:a2:9e:8a:02:32:04:2e:43:
38:09:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 16:31:21 2026 by rpki-client