Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BPDgKuS8xoEhOMh9naW5jj1Gsv4.roa
File: BPDgKuS8xoEhOMh9naW5jj1Gsv4.roa (raw, json)
Hash identifier: 4NGcQFiOhol+Qv41jxwPByaq9ftLcP9fmLFRh6QEjmw=
Subject key identifier: 04:F0:E0:2A:E4:BC:C6:81:21:38:C8:7D:9D:A5:B9:8E:3D:46:B2:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C6BE98CC2FA56F092A0AB7018983A37DB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BPDgKuS8xoEhOMh9naW5jj1Gsv4.roa
Signing time: Tue 17 Feb 2026 14:03:13 +0000
ROA not before: Tue 17 Feb 2026 14:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.165.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 05:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:e9:8c:c2:fa:56:f0:92:a0:ab:70:18:98:3a:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 17 14:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04f0e02ae4bcc6812138c87d9da5b98e3d46b2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:3b:a1:d9:0c:fb:0f:2d:06:29:f2:12:f0:
02:5a:59:2a:cc:85:d5:69:78:cb:dc:b9:ca:13:16:
89:89:e2:29:61:99:cd:8b:85:a9:2c:3b:cd:2b:c5:
4b:2c:66:1c:b3:97:b1:6c:b7:8b:81:5b:bd:32:0f:
2e:6a:dc:9e:55:63:38:a4:b3:1c:38:ab:6d:43:a1:
0d:5d:cb:ca:bc:ac:e1:27:0c:c9:90:1a:db:5a:54:
a8:5b:87:19:6f:7d:d3:41:ad:5d:d0:29:d6:b4:68:
d7:3e:c3:18:7e:5e:8d:ca:0e:88:c7:42:77:80:0f:
52:69:ef:e4:d6:f6:17:c6:57:b9:0e:a0:52:7b:b5:
e5:0e:3a:0e:0f:12:cc:fa:bd:51:14:be:5d:12:2a:
d3:65:aa:6d:19:da:7a:fb:55:ee:a1:7d:d5:8e:e5:
1e:ba:af:68:ab:b6:f6:db:ec:ae:fb:d5:a2:cc:f4:
7d:fe:7b:63:7b:fe:1a:b6:52:89:f6:0a:c9:04:d0:
d8:33:b9:93:02:b8:2a:28:87:57:4d:c3:c7:ac:aa:
09:7d:5a:04:b0:2d:18:f8:7c:a1:ac:45:97:15:71:
e1:5d:7e:b2:70:c6:9f:fb:fc:b2:97:1a:d6:f0:e1:
43:6d:73:78:f5:28:ce:ef:00:12:bb:61:53:1e:30:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:E0:2A:E4:BC:C6:81:21:38:C8:7D:9D:A5:B9:8E:3D:46:B2:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BPDgKuS8xoEhOMh9naW5jj1Gsv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.121.60.0/23
87.121.165.0/24
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.156.238.0/24
185.218.84.0/22
185.222.160.0/24
193.25.216.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:28:3f:a6:6a:8b:e2:08:15:fe:ea:f3:46:44:38:5b:2f:22:
f4:a1:8f:27:8a:cd:f3:0d:ce:be:0e:bc:de:53:30:c6:c1:ea:
0a:ce:86:10:87:ff:73:7e:1b:60:02:8f:e4:df:b1:a1:f9:2e:
88:33:30:76:07:26:12:39:23:63:4f:61:a0:33:7e:2b:8a:1a:
58:b2:08:66:dc:46:eb:55:1f:3f:d2:71:00:5b:b5:2f:7f:28:
fd:36:a3:1a:a6:a7:47:7a:2b:38:4f:6b:ea:ff:2b:28:12:71:
5d:69:8b:ae:ca:b0:5a:26:6c:6d:98:8a:0a:03:c9:5a:77:10:
f8:74:84:cd:d4:cd:56:6e:51:71:d6:34:fe:34:3c:e8:04:d3:
76:ef:da:17:c7:90:60:09:80:69:bc:4c:c0:ac:61:e3:d8:7a:
e1:8e:e5:ba:a1:64:1a:2a:9d:79:a3:40:f3:6d:02:bd:b5:c5:
4b:eb:73:1b:f8:79:cb:ab:d4:14:31:5a:0b:37:b4:50:da:d1:
10:e2:7e:55:e0:ee:35:98:94:32:66:b1:02:7f:20:98:0a:b6:
56:4d:8d:84:fb:c9:cc:d9:9d:e3:e7:6d:f7:fa:be:a3:4b:1f:
c9:a7:63:0c:2b:a6:b5:e8:a4:14:3f:c2:97:c2:a5:74:39:1a:
f8:fc:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 11:38:02 2026 by rpki-client