Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/jFXDMyBxt_rZFmF6PohErV1Pb58.roa
File: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (raw, json)
Hash identifier: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=
Subject key identifier: 8C:55:C3:33:20:71:B7:FA:D9:16:61:7A:3E:88:44:AD:5D:4F:6F:9F
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 019C2932D35AB706EA000249467892EACDB5
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/jFXDMyBxt_rZFmF6PohErV1Pb58.roa
Signing time: Wed 04 Feb 2026 15:08:42 +0000
ROA not before: Wed 04 Feb 2026 15:08:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23013
IP address blocks: 81.20.67.48/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Feb 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:32:d3:5a:b7:06:ea:00:02:49:46:78:92:ea:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Feb 4 15:08:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c55c3332071b7fad916617a3e8844ad5d4f6f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:70:91:ed:d5:46:74:53:ef:f3:e8:b6:e4:6d:
36:0a:29:96:a3:b6:76:a4:24:b9:9d:f8:84:9a:b4:
07:7a:c7:5e:f0:61:27:23:44:19:3f:ce:41:e2:6e:
5e:a2:94:be:e3:2f:8b:88:ea:03:9c:2a:f3:8b:65:
ca:13:14:92:62:ee:f4:d7:e2:0c:dc:ff:01:21:52:
85:f2:b2:ac:00:87:18:0b:07:f9:be:68:44:5e:cc:
0e:d7:fa:9c:09:b3:98:14:c5:cc:bb:8e:03:e4:a6:
49:b5:c6:e6:56:0c:f5:c4:b9:33:9e:51:40:c9:7e:
85:4c:59:6b:73:73:ae:94:ba:ca:14:ea:21:0a:49:
f5:f7:f1:0d:77:37:6e:0f:2c:c5:6a:64:03:30:f7:
84:70:fa:89:80:a0:38:51:a5:18:f6:2d:06:17:35:
07:d2:b0:3f:98:98:ed:5d:dc:a6:3c:dc:45:96:56:
fd:45:66:3b:1e:4f:20:43:58:1b:eb:18:54:02:23:
23:fc:69:b3:9f:02:3f:da:94:d0:a5:99:68:d1:83:
b8:37:42:d5:c2:88:f0:b9:8f:21:15:a2:c8:a8:31:
1b:69:1b:09:8c:86:bb:90:5b:7a:41:ef:5b:41:e1:
ce:1b:dc:4e:ed:17:6f:e7:f8:0e:f6:6e:e8:a1:4d:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:C3:33:20:71:B7:FA:D9:16:61:7A:3E:88:44:AD:5D:4F:6F:9F
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/jFXDMyBxt_rZFmF6PohErV1Pb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.67.48/29
Signature Algorithm: sha256WithRSAEncryption
0b:86:dd:64:d8:ff:a3:cd:83:a5:48:52:35:0c:97:e4:f7:57:
00:b7:2a:1f:c9:6c:a9:7e:43:98:c3:d9:c9:a7:8a:88:a1:ac:
07:df:fa:a6:30:a5:ac:5f:64:fa:5b:43:06:70:9d:58:de:ff:
32:c1:3a:9f:4f:d2:e1:ef:58:29:25:1a:70:7e:64:de:f3:bf:
52:cc:82:80:57:ea:59:c1:24:7a:e5:51:d7:a5:e6:f1:e1:ed:
63:44:c7:35:29:a0:07:3b:fc:c7:ff:26:2d:85:35:ae:df:09:
9c:e4:df:f1:d1:f9:89:a3:dd:14:d2:b4:91:00:3f:39:b1:7a:
06:80:e0:6a:08:d7:15:1d:3b:95:6b:70:13:d9:e1:df:81:39:
4d:32:06:3b:13:bf:f0:7f:32:1b:5b:53:a7:00:90:a7:38:39:
de:1e:9a:85:d7:3c:28:0b:89:bd:f0:26:12:97:89:1c:65:a3:
a7:4c:4f:b2:e2:6e:25:b7:fb:42:13:27:19:09:d0:97:fe:24:
0c:84:6c:04:99:09:80:5d:07:fc:21:01:4e:f0:e8:cd:04:46:
a3:7b:43:b8:e0:2e:98:a9:a6:12:6f:5e:a9:b4:19:c2:aa:dd:
28:d1:5a:71:e5:15:65:42:77:16:5b:1d:20:d4:39:c9:01:35:
63:a4:eb:cf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZwpMtNatwbqAAJJRniS6s21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjYwMjA0MTUwODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzU1YzMzMzIwNzFiN2ZhZDkxNjYxN2EzZTg4NDRhZDVkNGY2ZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3CR7dVGdFPv8+i25G02CimWo7Z2
pCS5nfiEmrQHesde8GEnI0QZP85B4m5eopS+4y+LiOoDnCrzi2XKExSSYu701+IM
3P8BIVKF8rKsAIcYCwf5vmhEXswO1/qcCbOYFMXMu44D5KZJtcbmVgz1xLkznlFA
yX6FTFlrc3OulLrKFOohCkn19/ENdzduDyzFamQDMPeEcPqJgKA4UaUY9i0GFzUH
0rA/mJjtXdymPNxFllb9RWY7Hk8gQ1gb6xhUAiMj/GmznwI/2pTQpZlo0YO4N0LV
wojwuY8hFaLIqDEbaRsJjIa7kFt6Qe9bQeHOG9xO7Rdv5/gO9m7ooU2zkQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIxVwzMgcbf62RZhej6IRK1dT2+fMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvakZYRE15Qnh0X3JaRm1GNlBvaEVyVjFQYjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDURRDMDAN
BgkqhkiG9w0BAQsFAAOCAQEAC4bdZNj/o82DpUhSNQyX5PdXALcqH8lsqX5DmMPZ
yaeKiKGsB9/6pjClrF9k+ltDBnCdWN7/MsE6n0/S4e9YKSUacH5k3vO/UsyCgFfq
WcEkeuVR16Xm8eHtY0THNSmgBzv8x/8mLYU1rt8JnOTf8dH5iaPdFNK0kQA/ObF6
BoDgagjXFR07lWtwE9nh34E5TTIGOxO/8H8yG1tTpwCQpzg53h6ahdc8KAuJvfAm
EpeJHGWjp0xPsuJuJbf7QhMnGQnQl/4kDIRsBJkJgF0H/CEBTvDozQRGo3tDuOAu
mKmmEm9eqbQZwqrdKNFaceUVZUJ3FlsdINQ5yQE1Y6Trzw==
-----END CERTIFICATE-----
Generated at Mon Feb 16 19:41:03 2026 by rpki-client