Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rjwao4jrvG93y-JRnYTnLPwuH5M.roa
File: Rjwao4jrvG93y-JRnYTnLPwuH5M.roa (raw, json)
Hash identifier: BzgCwGoNFHp2YsDS3qO9qbbwhNPy6mxs4F72y88KyJk=
Subject key identifier: 46:3C:1A:A3:88:EB:BC:6F:77:CB:E2:51:9D:84:E7:2C:FC:2E:1F:93
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C749036631CFA5F0A8286D028257AD082
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rjwao4jrvG93y-JRnYTnLPwuH5M.roa
Signing time: Thu 19 Feb 2026 06:22:14 +0000
ROA not before: Thu 19 Feb 2026 06:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 45.128.235.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:90:36:63:1c:fa:5f:0a:82:86:d0:28:25:7a:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 19 06:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=463c1aa388ebbc6f77cbe2519d84e72cfc2e1f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:11:e1:80:1e:13:70:cb:c8:49:32:d0:e9:
7c:39:44:cd:a5:4e:04:7e:eb:fc:2c:54:e2:c1:01:
db:5d:dc:3a:97:cb:7a:33:9f:29:79:b1:3c:b5:1c:
98:c3:e7:1c:7c:ad:87:bd:14:27:e9:d0:83:bc:94:
dc:8e:26:97:29:44:72:bf:36:53:a9:b8:3d:a2:2e:
f7:67:ac:6f:e5:8f:3c:50:e8:fa:c4:54:7a:20:8b:
3b:3e:8c:20:99:fe:6e:ab:af:b9:07:48:c1:ff:db:
f4:89:d0:1b:8c:50:54:c1:c9:a4:a8:a1:06:bb:5a:
41:0f:f2:8f:7c:64:16:bb:59:03:fb:09:1b:68:b0:
2a:cf:44:27:07:f4:99:46:70:20:87:ad:2e:1c:43:
c1:f4:cf:2d:d1:b2:f9:ad:02:6d:7b:87:e6:be:2d:
d9:0d:c4:c8:cf:f5:2f:dd:e1:76:b9:a5:2e:56:3f:
f1:07:20:5d:39:26:c9:ae:ae:ac:5f:6f:ba:20:39:
21:ec:f0:86:35:af:d6:89:08:26:31:b7:fb:18:9f:
6d:b2:34:c6:b4:84:ad:bf:07:34:f9:59:be:56:4b:
27:72:3c:fe:74:57:4c:80:87:ee:58:0c:65:a8:16:
e6:da:d3:d5:d8:95:38:fa:fe:aa:a1:39:8e:04:41:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:1A:A3:88:EB:BC:6F:77:CB:E2:51:9D:84:E7:2C:FC:2E:1F:93
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rjwao4jrvG93y-JRnYTnLPwuH5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.235.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.205.0/24
87.120.216.0/24
178.215.239.0/24
194.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3c:97:a8:ab:a9:5c:24:17:2e:e9:8e:f5:b8:b6:24:7a:41:
f5:3b:ba:a6:57:3f:77:35:46:80:39:37:cc:be:c2:f7:cf:1c:
bf:3b:a9:ed:2f:70:07:e1:82:b7:46:d0:80:e3:03:c0:4f:cc:
7f:e0:b6:96:ac:22:12:ae:1d:9d:e6:7c:42:9a:da:d8:75:c0:
16:a2:78:26:18:44:79:d4:16:0f:a2:44:23:f1:b5:35:92:2a:
ae:9e:9e:bf:39:6e:02:14:1b:31:0b:05:18:c1:19:31:2c:c8:
7d:e4:56:9c:3d:1e:1c:c9:01:68:ab:cd:8f:66:c6:9e:88:b1:
1f:13:c5:99:58:18:15:d0:53:50:06:a6:62:e6:d4:69:eb:27:
ac:e3:95:03:3c:a8:04:31:59:f0:cc:fc:39:bb:04:30:8b:3c:
e4:87:79:47:6f:00:e4:15:2e:11:f0:4e:cb:c9:dc:bf:0e:2e:
27:09:fe:ef:95:01:bf:36:aa:10:ff:32:9a:63:85:07:84:b3:
07:f4:66:60:6e:6e:b2:b3:53:4f:53:2a:d2:1a:ff:be:2d:39:
00:f6:84:c5:85:00:93:15:c6:62:39:56:01:1f:36:94:a2:b3:
39:d3:32:92:36:cf:70:1f:42:40:80:1f:5c:75:a2:42:0e:48:
a9:7c:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 11:28:08 2026 by rpki-client