Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y2GuKlS6G4GyM5c8wS9-9spGves.roa
File: y2GuKlS6G4GyM5c8wS9-9spGves.roa (raw, json)
Hash identifier: FRXhEfnXziq7IDmUIIdutNpJ9eADTS8ELHp6S+fAP6Y=
Subject key identifier: CB:61:AE:2A:54:BA:1B:81:B2:33:97:3C:C1:2F:7E:F6:CA:46:BD:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C6BE98D0B21D17CE7ECD1DA714F3B5BBE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y2GuKlS6G4GyM5c8wS9-9spGves.roa
Signing time: Tue 17 Feb 2026 14:03:14 +0000
ROA not before: Tue 17 Feb 2026 14:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 83.143.113.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:e9:8d:0b:21:d1:7c:e7:ec:d1:da:71:4f:3b:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 17 14:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb61ae2a54ba1b81b233973cc12f7ef6ca46bdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:b8:c1:3f:d1:28:90:cd:7c:b8:34:4c:6c:
6d:17:93:17:90:30:ca:53:5c:74:ac:f1:1d:ed:8e:
68:55:ad:46:f3:66:3f:c6:73:5b:d6:27:47:73:f5:
f0:0c:c1:dd:63:16:fc:c1:cb:59:c8:b8:6f:d1:b1:
7c:3d:10:6d:ec:4c:a6:08:f8:a1:80:b2:24:82:9b:
7a:09:e6:12:5c:4c:ff:e5:63:48:0a:d2:d2:6d:4e:
be:ef:f0:f2:cb:2e:7d:98:ce:22:fa:4b:68:86:dc:
c9:b8:ff:bd:c4:f6:b1:ff:0b:d7:0a:e2:c2:14:05:
3b:dc:f7:1b:fa:79:7e:ff:31:01:b8:31:4a:3f:66:
8d:5f:23:07:e3:a9:02:f1:df:df:8f:8a:1f:ff:3d:
ed:92:8d:1b:de:73:0f:c4:42:2f:a3:ef:8e:c7:2f:
eb:9c:8f:8c:e0:82:1a:9d:10:29:3e:2d:47:90:63:
c1:38:03:6b:e9:e8:da:1c:c0:e6:42:f8:11:b6:39:
59:e1:5f:2f:b5:42:08:8d:25:05:09:26:20:e0:0e:
2c:ff:a2:69:02:26:f6:8d:0f:17:0a:d1:83:2e:06:
9c:c4:68:07:03:6a:37:f3:90:cf:c4:2d:b1:e0:6a:
5b:5b:12:16:1e:26:bd:e0:2e:b7:3e:f7:53:ee:cf:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:AE:2A:54:BA:1B:81:B2:33:97:3C:C1:2F:7E:F6:CA:46:BD:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y2GuKlS6G4GyM5c8wS9-9spGves.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.113.0/24
85.209.135.0/24
87.120.88.0/24
87.121.218.0/24
109.206.243.0/24
185.246.222.0/24
194.113.38.0/24
Signature Algorithm: sha256WithRSAEncryption
84:57:10:8a:57:83:51:fa:ff:ff:94:60:67:57:59:bd:9f:d8:
92:dd:87:22:b2:34:58:9e:6a:9a:51:53:d3:d9:d9:3c:ae:64:
f0:4b:4e:90:ae:55:38:d0:3d:24:ba:33:a4:ab:7c:8f:3c:88:
28:2e:4b:f3:b6:86:57:5f:fa:dc:4e:a1:ae:8d:29:c5:ce:b0:
78:6d:b6:cf:88:2c:7b:d3:2b:01:41:83:90:da:59:b9:87:1a:
d2:8e:1b:56:de:c0:ed:43:90:4d:f6:4a:e0:40:c2:b4:c9:0e:
3a:47:ca:8e:e1:9b:59:c5:56:11:a1:dc:8e:11:12:ac:df:31:
32:e3:63:a9:d7:eb:12:e2:35:69:1e:04:f9:20:5f:1d:79:f9:
f4:a2:72:22:df:11:b8:9a:82:f5:1a:56:be:b8:79:58:0a:f2:
06:d5:6b:96:d3:0f:ba:23:5e:80:9f:83:ec:f8:60:bb:5d:84:
88:33:45:6e:7b:5d:69:bb:f8:6e:b6:99:28:03:1f:07:c6:ae:
22:2c:18:9a:05:eb:a3:9c:fa:af:a9:16:32:7e:46:f6:5c:31:
e7:c4:d5:4c:13:c4:99:f6:51:75:6f:c6:dd:41:41:a1:9a:62:
70:a1:19:e1:b8:2a:c0:11:1f:c3:02:76:19:ef:88:ba:bc:9e:
d2:40:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 11:38:13 2026 by rpki-client