Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BD7LpxCnbXygVouHqLypj5ZnMAk.roa
File: BD7LpxCnbXygVouHqLypj5ZnMAk.roa (raw, json)
Hash identifier: yGcEVMMDNwO8LRdc5MCB53BtPH+1m/nssaTJEQXjW/g=
Subject key identifier: 04:3E:CB:A7:10:A7:6D:7C:A0:56:8B:87:A8:BC:A9:8F:96:67:30:09
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019C65DD628DD3AEBB843DFC54D18490A437
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BD7LpxCnbXygVouHqLypj5ZnMAk.roa
Signing time: Mon 16 Feb 2026 09:52:13 +0000
ROA not before: Mon 16 Feb 2026 09:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.229.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.192.0/24 maxlen: 24
194.87.193.0/24 maxlen: 24
194.87.194.0/24 maxlen: 24
194.87.195.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.33.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:dd:62:8d:d3:ae:bb:84:3d:fc:54:d1:84:90:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 16 09:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=043ecba710a76d7ca0568b87a8bca98f96673009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:21:e2:e4:92:69:35:c8:8b:0b:1a:5a:ed:
de:6d:46:07:5c:7b:16:70:af:6e:a7:24:f7:7a:20:
3a:a0:66:b5:c7:d6:9c:38:ea:bc:bd:15:1e:de:49:
11:1b:ce:ea:c8:04:6b:0d:9f:ca:0f:25:65:bd:c0:
8b:79:f1:5c:15:76:b0:a3:37:29:57:ec:80:17:58:
7b:5c:5b:ee:be:30:38:a6:b6:ee:a6:1c:29:ba:73:
ca:09:b5:18:b4:de:7b:7d:bf:04:80:ef:aa:df:02:
a1:83:e8:a4:34:f2:3b:fa:c5:d5:96:16:a0:9a:20:
c7:c5:a1:a3:8b:df:06:32:de:3d:50:be:df:aa:9d:
ca:a7:23:71:1c:2a:24:b7:35:21:a7:77:3d:20:38:
4f:21:b3:ef:90:91:94:43:d3:48:c4:5f:76:7d:35:
70:34:99:1b:db:4f:f1:12:c5:af:77:c0:18:0b:f3:
57:28:67:fe:2c:9e:79:9d:c7:cd:42:e4:a0:cd:57:
89:89:46:83:21:94:ea:d3:00:de:0a:78:06:bb:99:
58:d4:3e:e8:74:54:0f:d7:ae:e8:77:59:f1:43:0f:
06:5f:c2:e5:c4:04:ce:08:61:4b:b2:15:95:c5:08:
77:d1:0a:87:74:4e:37:89:cd:31:2d:34:dc:cd:39:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:CB:A7:10:A7:6D:7C:A0:56:8B:87:A8:BC:A9:8F:96:67:30:09
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BD7LpxCnbXygVouHqLypj5ZnMAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
185.72.10.0/24
192.124.190.0/24
193.124.4.0/24
193.124.7.0/24
193.124.18.0/24
193.124.89.0/24
193.124.226.0/24
194.58.58.0/24
194.58.155.0/24
194.58.223.0/24
194.87.33.0/24
194.87.52.0/23
194.87.59.0/24
194.87.61.0/24
194.87.75.0/24
194.87.78.0/24
194.87.119.0/24
194.87.126.0/24
194.87.136.0/24
194.87.152.0/24
194.87.179.0/24
194.87.183.0/24
194.87.192.0/22
194.87.211.0-194.87.212.255
194.87.228.0/23
194.87.231.0/24
194.135.24.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.33.0/24
195.133.35.0/24
195.133.40.0/23
195.133.50.0/23
195.133.57.0-195.133.58.255
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.193.0.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:86:23:61:3d:85:38:96:ff:11:87:2c:be:55:c6:c6:eb:a2:
33:4c:bd:66:00:40:79:a3:07:b0:0c:f0:e0:f4:a0:88:5b:22:
cd:2e:98:cc:f1:ef:db:c4:5b:02:3a:2a:ed:81:e1:4e:1e:8e:
36:04:b9:4f:49:5f:1a:f1:5e:35:1f:b4:81:d1:5d:a4:2d:d5:
72:f2:5b:f8:a9:92:fb:06:83:2c:9b:00:03:c4:0e:76:52:00:
6b:dc:0d:eb:c5:91:b0:b9:78:94:db:48:bf:13:d1:91:0e:c4:
74:69:58:6e:06:48:3e:df:04:6c:f9:2f:d5:c0:cf:44:c0:80:
10:ab:80:0c:80:64:e4:e3:10:0b:ad:b1:0a:4e:98:9c:f6:ee:
8d:24:1c:70:58:e6:42:bc:f1:44:40:d9:14:c0:bf:44:a9:be:
80:87:32:54:0e:01:66:9d:f4:ab:98:6a:2e:3a:fe:6c:71:6e:
54:78:b0:7d:13:ce:dd:41:dd:95:9e:66:1d:9a:63:19:65:37:
0d:be:d2:00:14:d7:97:c4:2a:7c:cb:a3:77:f9:dc:30:bb:20:
8d:ed:a0:49:ce:6e:6b:fc:08:f4:f2:d5:bd:95:70:86:88:0e:
5e:db:f5:73:0e:d5:d8:5b:07:22:0e:b1:92:db:80:1d:68:bb:
38:87:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:19 2026 by rpki-client