Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6F7tJ9eGbPYANbUfjuXSocRr4Z8.roa
File: 6F7tJ9eGbPYANbUfjuXSocRr4Z8.roa (raw, json)
Hash identifier: 62QEBwjyWX0Cp9WHHT6amihWJsj9Rvw8qLx2bLhQ0hk=
Subject key identifier: E8:5E:ED:27:D7:86:6C:F6:00:35:B5:1F:8E:E5:D2:A1:C4:6B:E1:9F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019C58BD65E99967183DF9E639618F179B53
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6F7tJ9eGbPYANbUfjuXSocRr4Z8.roa
Signing time: Fri 13 Feb 2026 20:42:13 +0000
ROA not before: Fri 13 Feb 2026 20:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.60.0/24 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.126.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
147.45.217.0/24 maxlen: 24
147.45.220.0/24 maxlen: 24
147.45.221.0/24 maxlen: 24
193.233.74.0/24 maxlen: 24
193.233.126.0/24 maxlen: 24
193.233.127.0/24 maxlen: 24
193.233.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:58:bd:65:e9:99:67:18:3d:f9:e6:39:61:8f:17:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 13 20:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e85eed27d7866cf60035b51f8ee5d2a1c46be19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:bb:e1:05:2e:29:57:8d:ef:05:6c:9a:41:
de:fc:b1:e5:70:5b:fe:20:cd:1d:84:35:b2:08:7e:
74:de:67:48:3e:e4:1f:3c:d6:63:e4:04:d4:62:6f:
2f:08:86:76:30:4e:4f:24:f8:06:73:d8:2f:5f:63:
b2:3d:8b:8c:29:bf:64:3e:61:a5:02:ca:a4:f4:52:
a8:20:f1:88:6f:11:a6:fe:cc:a3:01:dc:59:98:4e:
c1:ac:29:2f:58:0f:2c:e6:72:21:71:20:22:08:03:
f8:64:ec:fa:b8:7b:33:80:95:55:1e:d9:5a:b2:fd:
af:2e:80:10:16:05:f3:da:8b:23:a1:23:82:81:c9:
01:df:86:b6:48:9a:16:35:a7:44:1a:b0:ec:4a:ae:
7c:df:14:44:78:00:bb:1c:18:49:b6:e0:7b:8d:a4:
95:df:60:f8:26:68:e8:47:f9:bc:fc:6a:67:3a:41:
9b:62:31:d2:b2:fb:a2:07:b2:b3:83:04:a7:d2:07:
f2:6e:3c:94:43:e7:78:a7:35:fb:0a:52:71:c6:7e:
91:bf:17:59:59:93:70:32:6a:9d:15:4a:52:ec:b5:
65:e4:6a:f0:d3:b0:26:df:39:ce:b2:db:c5:58:15:
2d:2d:1f:d5:80:f8:8a:f9:1e:cf:36:aa:a8:2e:d0:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:ED:27:D7:86:6C:F6:00:35:B5:1F:8E:E5:D2:A1:C4:6B:E1:9F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6F7tJ9eGbPYANbUfjuXSocRr4Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.60.0/24
147.45.84.0/22
147.45.116.0/24
147.45.126.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
147.45.217.0/24
147.45.220.0/23
193.233.74.0/24
193.233.126.0/23
193.233.198.0/23
Signature Algorithm: sha256WithRSAEncryption
67:6d:5d:d8:14:93:19:a4:f1:0c:b1:35:5a:b2:26:92:78:32:
fe:9d:1e:e6:5a:17:62:db:ab:87:c3:f1:bc:e9:1e:17:7e:1f:
60:94:65:bc:02:eb:5a:95:e9:cf:8b:0a:77:2b:cb:02:e0:f6:
8e:a6:01:f5:a9:35:ca:c0:2e:66:4d:f0:81:8c:8f:46:51:50:
d5:4d:42:77:8e:b8:47:45:57:99:8e:a8:05:15:b2:3c:24:cd:
2b:0a:35:17:b2:d9:48:22:36:0e:3a:e7:cf:8d:cb:e8:46:48:
ff:de:53:3a:ac:bc:43:a7:35:f3:af:b9:8e:64:a1:80:55:e8:
df:71:ed:83:27:c8:78:d0:b6:6e:3b:c7:1d:0b:c4:c9:a7:af:
74:6f:46:39:d4:7b:1a:73:f9:88:9e:29:09:df:05:c3:57:0c:
13:2f:47:fd:cd:3c:dd:23:0d:fe:dd:33:de:52:a5:ed:cd:88:
c6:47:d6:95:e9:39:53:c6:c9:7c:03:0e:28:a4:4a:a1:17:98:
ff:04:8f:39:9f:43:b9:cc:47:6c:8e:47:10:7d:5b:d5:95:aa:
4f:b8:43:6f:b2:04:2d:9c:fd:05:e5:bf:d9:b2:7d:a6:d1:7d:
f4:5a:94:2d:b5:27:20:61:b2:5e:5e:d1:58:38:0e:f8:8c:bc:
45:71:d8:02
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZxYvWXpmWcYPfnmOWGPF5tTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwMjEzMjA0MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODVlZWQyN2Q3ODY2Y2Y2MDAzNWI1MWY4ZWU1ZDJhMWM0NmJlMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpG74QUuKVeN7wVsmkHe/LHlcFv+
IM0dhDWyCH503mdIPuQfPNZj5ATUYm8vCIZ2ME5PJPgGc9gvX2OyPYuMKb9kPmGl
Asqk9FKoIPGIbxGm/syjAdxZmE7BrCkvWA8s5nIhcSAiCAP4ZOz6uHszgJVVHtla
sv2vLoAQFgXz2osjoSOCgckB34a2SJoWNadEGrDsSq583xREeAC7HBhJtuB7jaSV
32D4JmjoR/m8/GpnOkGbYjHSsvuiB7KzgwSn0gfybjyUQ+d4pzX7ClJxxn6RvxdZ
WZNwMmqdFUpS7LVl5Grw07Am3znOstvFWBUtLR/VgPiK+R7PNqqoLtDGZQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFOhe7SfXhmz2ADW1H47l0qHEa+GfMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvNkY3dEo5ZUdiUFlBTmJVZmp1WFNvY1JyNFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgMAwDBACTLTED
BAKTLTADBACTLTwDBAKTLVQDBACTLXQDBACTLX4wDAMEAJMtsQMEApMtsDAMAwQD
ky3IAwQAky3MAwQAky3ZAwQBky3cAwQAwelKAwQBwel+AwQBwenGMA0GCSqGSIb3
DQEBCwUAA4IBAQBnbV3YFJMZpPEMsTVasiaSeDL+nR7mWhdi26uHw/G86R4Xfh9g
lGW8AutalenPiwp3K8sC4PaOpgH1qTXKwC5mTfCBjI9GUVDVTUJ3jrhHRVeZjqgF
FbI8JM0rCjUXstlIIjYOOufPjcvoRkj/3lM6rLxDpzXzr7mOZKGAVejfce2DJ8h4
0LZuO8cdC8TJp690b0Y51Hsac/mInikJ3wXDVwwTL0f9zTzdIw3+3TPeUqXtzYjG
R9aV6TlTxsl8Aw4opEqhF5j/BI85n0O5zEdsjkcQfVvVlapPuENvsgQtnP0F5b/Z
sn2m0X30WpQttScgYbJeXtFYOA74jLxFcdgC
-----END CERTIFICATE-----
Generated at Tue Feb 17 14:01:17 2026 by rpki-client