Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fdODP3OCPRKSaj7KryzbQe7YGN4.roa
File: fdODP3OCPRKSaj7KryzbQe7YGN4.roa (raw, json)
Hash identifier: V5r+3KAP3aLXjOr8GpoUJPOXrx5TTYDJaDEgkA3mQ+k=
Subject key identifier: 7D:D3:83:3F:73:82:3D:12:92:6A:3E:CA:AF:2C:DB:41:EE:D8:18:DE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019C6C0157E07D4104488B9804FD30EA8FEE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fdODP3OCPRKSaj7KryzbQe7YGN4.roa
Signing time: Tue 17 Feb 2026 14:29:13 +0000
ROA not before: Tue 17 Feb 2026 14:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.41.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.89.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.58.47.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.83.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
212.193.18.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:01:57:e0:7d:41:04:48:8b:98:04:fd:30:ea:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 17 14:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd3833f73823d12926a3ecaaf2cdb41eed818de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:a6:83:01:ca:bd:86:9c:4c:59:f6:f9:99:
b6:9b:72:46:15:4e:c6:20:ad:47:37:bb:3a:45:4d:
1c:e5:50:d9:ed:09:6c:01:db:31:b4:d9:94:84:d0:
4d:48:ce:5b:7a:b5:3a:ba:cd:1c:32:7a:6a:b3:01:
7b:d9:99:ef:3b:24:c5:a2:62:74:b0:9e:d9:35:13:
91:73:03:8b:8b:9f:e7:6b:17:3e:fa:b3:19:77:06:
c0:2c:b9:4b:a0:23:81:0f:84:83:a2:04:8e:c6:dc:
8c:d4:73:70:b0:e5:ba:4d:f6:82:89:f6:25:3b:a6:
a4:a3:96:93:01:0e:bf:04:2b:fb:eb:d2:1f:31:d7:
33:9b:17:6d:e5:fa:06:25:40:4a:b0:44:ad:51:d2:
00:06:07:f1:0f:df:11:91:9a:39:b4:45:bc:a9:41:
15:33:e0:7a:54:81:0a:a9:7a:71:50:23:ab:84:4b:
e6:6c:23:b3:2a:42:4b:83:ef:b2:2f:3a:61:2f:0d:
66:4d:98:14:d3:0d:00:23:c3:b4:48:41:3a:eb:d1:
e8:9b:65:ee:c9:25:5b:01:0e:91:01:26:2d:58:4d:
83:e1:f5:08:f4:a2:a4:34:c3:ce:66:bf:e6:fb:f0:
06:28:22:58:0a:6d:65:14:88:06:69:6b:e2:0a:6b:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:83:3F:73:82:3D:12:92:6A:3E:CA:AF:2C:DB:41:EE:D8:18:DE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fdODP3OCPRKSaj7KryzbQe7YGN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.234.0/24
62.76.238.0/23
192.124.172.0/24
192.124.175.0-192.124.176.255
192.124.209.0/24
193.108.112.0/24
193.124.2.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
194.58.38.0-194.58.40.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.2.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.41.0/24
194.87.47.0-194.87.48.255
194.87.58.0/24
194.87.73.0/24
194.87.82.0/24
194.87.89.0/24
194.87.105.0-194.87.106.255
194.87.108.0/24
194.87.123.0/24
194.87.125.0/24
194.87.128.0/24
194.87.137.0/24
194.87.162.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.58.47.0/24
195.133.55.0/24
195.133.67.0/24
195.133.83.0/24
195.133.92.0/24
212.192.221.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
212.193.18.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
35:88:0f:ff:04:b1:f4:f8:8e:66:27:5d:63:89:74:10:4c:19:
9b:74:9f:27:b9:8c:f5:38:27:ff:73:63:21:7d:5c:5a:ac:94:
58:c9:1c:68:5e:1c:e4:9e:1c:7f:9c:a9:99:d7:04:e9:1b:22:
95:c6:a0:27:39:7f:aa:72:d1:0c:eb:f1:0b:02:ee:04:e9:10:
8e:35:ad:a0:e4:b8:d9:61:87:02:94:5e:08:af:a5:15:24:00:
e4:79:a1:e8:b7:46:bb:40:a2:60:37:a7:20:76:dd:87:c9:24:
df:3a:4b:9d:cb:04:3a:a0:a5:e1:6b:64:ee:0d:4f:a3:85:e5:
d2:31:a6:c9:9c:85:5f:77:31:c6:cb:a1:8e:97:3f:26:7e:7d:
1d:54:e4:73:a0:6f:09:4c:e7:6b:c2:0f:0d:0a:bb:da:e7:b9:
e1:c2:b3:63:68:35:5a:64:c0:ba:7d:1b:07:39:b7:a8:78:6e:
9b:be:75:ca:1d:0a:8d:d4:de:5b:6c:23:dc:7e:b3:61:cc:a3:
ea:ad:2b:ec:ae:71:2f:b1:07:73:85:7c:86:61:41:bd:d9:0a:
8d:54:f1:77:3b:b6:d1:a1:7a:cb:79:53:39:a9:8d:ce:86:aa:
81:73:21:ca:93:47:b8:45:32:f5:ba:f8:99:58:96:b4:a5:0c:
68:7b:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 20:00:31 2026 by rpki-client