Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d_jfHKcWqSUAsdXVXLjJb7Gc6bo.roa
File: d_jfHKcWqSUAsdXVXLjJb7Gc6bo.roa (raw, json)
Hash identifier: w+3CvvWRslOF4VSBAFmots+J/HRdLMVz6bxbb9dNp5Y=
Subject key identifier: 77:F8:DF:1C:A7:16:A9:25:00:B1:D5:D5:5C:B8:C9:6F:B1:9C:E9:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C70C0419E1137F99BB93D3544E73BC232
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d_jfHKcWqSUAsdXVXLjJb7Gc6bo.roa
Signing time: Wed 18 Feb 2026 12:36:13 +0000
ROA not before: Wed 18 Feb 2026 12:36:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205997
IP address blocks: 185.218.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:c0:41:9e:11:37:f9:9b:b9:3d:35:44:e7:3b:c2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 18 12:36:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77f8df1ca716a92500b1d5d55cb8c96fb19ce9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:a8:0b:b9:13:5a:82:df:4f:46:0d:86:84:
3d:f2:da:b5:2e:a6:31:43:a1:40:ac:de:e8:02:33:
64:be:f7:f4:6d:f2:2e:d1:d4:4c:d3:4d:22:a5:8e:
16:5d:e9:f1:fa:aa:9c:04:69:99:91:73:da:cb:32:
f0:44:4b:b3:d6:25:5b:32:bf:27:dc:f7:23:a0:63:
c2:2e:d1:26:21:a0:b8:e6:a5:b9:a4:7a:13:c9:cb:
27:a0:16:c4:a4:6a:e0:39:46:10:b1:24:79:a2:b4:
ed:33:4e:db:4e:b1:16:6d:73:ae:2f:68:a3:f6:04:
f9:08:fb:a6:03:26:d7:4e:e6:85:9f:3f:33:56:5a:
3f:0a:e3:7a:0f:c7:43:c5:e1:88:f8:0e:1d:7d:31:
16:ea:70:32:6a:95:59:bc:5a:bf:e4:48:e5:01:45:
5d:d5:ee:36:c6:3c:ad:34:b7:80:6a:9f:d8:ec:0f:
62:12:71:8d:18:df:c6:81:fa:7c:c5:7f:10:fa:5a:
1d:6c:e5:d0:e7:bd:f3:af:f1:d3:18:e1:03:42:a9:
5d:09:42:0c:8f:16:13:63:e6:09:f2:59:c6:ea:15:
71:0c:14:be:20:6d:41:80:9d:7e:bc:08:7c:06:55:
ca:14:75:e4:60:51:50:a9:51:3f:b1:4a:a2:b7:a7:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:DF:1C:A7:16:A9:25:00:B1:D5:D5:5C:B8:C9:6F:B1:9C:E9:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d_jfHKcWqSUAsdXVXLjJb7Gc6bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
35:72:d4:f2:d8:4f:71:5b:93:69:51:eb:bf:27:4f:59:c0:d6:
28:6c:f8:5f:84:91:e1:60:1a:dc:4b:96:f7:4a:41:4c:38:6c:
9b:6b:82:82:5a:b3:b1:37:1c:1a:7f:2a:55:45:ab:7d:21:b0:
08:6f:6f:6d:51:93:2d:9b:4e:c0:d9:36:fa:a0:3a:e8:4b:b9:
aa:19:84:0e:4b:39:f2:9d:c0:b9:e2:80:f5:a0:83:f7:92:19:
06:15:3d:fe:00:d4:a7:93:bc:29:e1:8f:5b:1d:93:06:3c:0f:
70:f3:44:5b:c7:d0:b2:60:f4:1f:ab:53:ab:e9:cd:b0:74:f2:
82:57:b0:ec:bd:ee:7e:7b:af:6f:d4:e8:5a:82:12:1b:1b:07:
96:99:11:be:24:02:08:89:f0:3d:5a:e0:05:e9:be:b8:43:cc:
a5:63:c4:47:14:56:3e:04:dc:89:89:7a:ff:20:a5:5d:9a:cf:
46:85:6f:d7:77:46:78:0f:0f:9f:76:2f:65:d5:8e:91:7c:d0:
e3:fa:d3:3e:69:57:4c:67:70:b9:81:79:46:a2:a6:0c:94:89:
06:c0:b2:c7:97:22:98:fd:79:bf:39:99:9d:f5:19:e1:ea:f4:
6b:8d:fc:ea:b0:89:bc:f7:b6:62:b2:05:ad:84:a3:bb:ac:9f:
99:a5:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 11:34:08 2026 by rpki-client