Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/b7L24DGacCv1Jjj0E2xwOpKR_rI.roa
File: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (raw, json)
Hash identifier: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=
Subject key identifier: 6F:B2:F6:E0:31:9A:70:2B:F5:26:38:F4:13:6C:70:3A:92:91:FE:B2
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019C4529CD1050D760D5BC21562A1D54E665
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/b7L24DGacCv1Jjj0E2xwOpKR_rI.roa
Signing time: Tue 10 Feb 2026 01:28:13 +0000
ROA not before: Tue 10 Feb 2026 01:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 81.31.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:29:cd:10:50:d7:60:d5:bc:21:56:2a:1d:54:e6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 10 01:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fb2f6e0319a702bf52638f4136c703a9291feb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:6e:d9:25:cf:9d:dd:02:2a:22:e2:02:59:
83:9f:c1:ba:65:33:a5:80:43:24:25:68:83:74:37:
41:72:fc:ea:a0:f8:c9:1c:09:64:b0:78:a3:ff:51:
02:89:9e:26:c6:d4:9a:cd:38:9a:dd:ec:7d:a7:c4:
e4:ae:36:34:f4:83:ec:59:45:24:a3:fa:89:4d:2a:
6c:5b:d3:1c:95:f0:9a:a4:d5:ee:6e:50:10:0a:a5:
2e:26:1b:50:b9:d5:88:23:94:44:87:9b:b8:a8:09:
05:ba:5f:b6:54:9f:96:3d:21:80:4c:5f:82:63:5f:
2d:0f:ad:d5:8a:4a:fa:5f:82:89:be:44:19:08:99:
74:59:99:2e:55:49:ee:bf:9c:3a:30:98:0f:5a:d1:
d4:93:75:82:29:d3:a8:b2:3b:94:f0:1c:44:64:77:
74:62:90:90:73:22:d4:37:d0:39:22:de:69:ea:5f:
a1:44:c3:81:ba:e5:e7:5f:43:3d:df:62:0a:fe:2a:
30:fe:2a:04:27:3d:ba:30:92:e6:60:ee:ac:e9:de:
ac:43:e5:d7:71:c2:a7:6c:4e:0f:9d:5d:d9:5a:d7:
36:63:f4:14:be:9a:b3:2c:36:e1:45:5a:a4:04:52:
b9:56:b1:69:58:55:74:a4:4f:0c:61:cf:cb:fb:82:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:F6:E0:31:9A:70:2B:F5:26:38:F4:13:6C:70:3A:92:91:FE:B2
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/b7L24DGacCv1Jjj0E2xwOpKR_rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0/23
Signature Algorithm: sha256WithRSAEncryption
74:59:75:0b:3b:9b:8b:c7:eb:49:bd:9a:53:00:4e:b0:49:04:
fa:9d:3e:05:83:ec:78:bf:0b:dd:c9:af:82:43:3d:a3:b3:54:
6a:87:e3:c8:8e:d4:20:0d:0d:5b:45:9a:31:eb:da:64:a7:89:
e3:b0:2f:c2:aa:2c:00:22:97:58:2e:d8:95:15:46:cf:e5:4e:
e0:57:a5:51:5c:99:e5:c7:de:b1:bf:e6:80:a3:05:41:73:89:
83:79:4e:cb:7c:90:30:32:0f:43:1a:ae:bc:3a:ab:ef:18:90:
96:62:29:9c:ae:e5:c8:86:8a:ad:c4:3e:3d:0f:80:8b:f9:90:
66:74:c5:6c:38:97:f3:07:c9:6f:e9:87:56:1c:3d:bc:a7:88:
b6:a0:51:61:55:ed:f8:77:cf:18:6c:b0:8e:a7:02:38:d3:d6:
c8:c6:b2:25:88:11:0c:ae:5a:a6:d0:42:2c:a4:bd:00:9a:aa:
85:18:d6:e3:92:8c:6a:4b:d3:f7:b7:83:a9:d0:7c:15:d5:84:
9b:56:0a:f8:05:55:da:e3:5e:0e:8a:cb:00:a9:be:80:56:e9:
bf:87:8d:cd:97:1e:bb:f5:f9:c5:29:b6:22:59:27:9b:4f:72:
93:a0:a4:c2:62:b9:c2:55:66:a4:d8:e2:71:35:b4:34:97:22:
34:ba:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 18:10:02 2026 by rpki-client