Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PGmJMw7v2srp34c2MWaM7Sl7S-8.roa
File: PGmJMw7v2srp34c2MWaM7Sl7S-8.roa (raw, json)
Hash identifier: cNcf4e832Zowk/7Wxq5VwsFfaNNsCFcyx18A+DfXRUQ=
Subject key identifier: 3C:69:89:33:0E:EF:DA:CA:E9:DF:87:36:31:66:8C:ED:29:7B:4B:EF
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019C5BC96C7D1F33EB4A552C8B9CF7FD47C1
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PGmJMw7v2srp34c2MWaM7Sl7S-8.roa
Signing time: Sat 14 Feb 2026 10:54:13 +0000
ROA not before: Sat 14 Feb 2026 10:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.83.202.0/24 maxlen: 24
188.209.130.0/24 maxlen: 24
188.209.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5b:c9:6c:7d:1f:33:eb:4a:55:2c:8b:9c:f7:fd:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Feb 14 10:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c6989330eefdacae9df873631668ced297b4bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:ce:09:17:28:5a:92:2a:89:26:1d:62:c7:
0e:bf:b7:2e:b2:2c:dd:4d:a1:f5:a1:ca:8b:81:67:
a6:8e:94:40:b3:ac:08:f3:b1:17:7e:cd:68:ea:40:
91:17:e7:f6:36:0f:a7:a2:36:d6:1e:fb:ae:77:9a:
1a:f2:02:45:f3:d2:32:92:4a:96:dc:a2:d8:b5:68:
af:a0:e1:94:d6:21:a9:8a:43:64:74:c8:05:58:ed:
cc:f7:bc:ea:54:f6:d7:08:2d:06:4c:63:01:76:65:
12:7c:f0:a8:9b:9a:fc:c5:81:f3:d6:ed:04:bd:4b:
de:7a:8d:07:41:47:fc:55:65:8e:3b:81:c1:d8:d2:
fa:92:51:2a:51:c4:23:da:7c:0d:2d:62:64:fd:fd:
7a:f7:f1:e9:d6:6d:6a:fd:1f:78:36:74:72:8c:b7:
e4:22:3a:fa:a4:60:d9:e6:3c:9a:04:68:a9:96:3b:
9b:f9:3f:ef:c0:db:77:32:c6:2c:8f:e9:a1:53:c8:
9a:31:79:ae:a9:7c:62:9c:aa:de:d7:66:49:14:d4:
8d:de:fd:17:4c:78:28:83:c8:62:50:e6:b1:72:b2:
3e:b9:3e:d6:12:af:7c:dc:1d:a1:8a:9f:35:5d:46:
00:5a:e6:b4:bb:24:76:4e:9a:dd:60:77:1d:d3:77:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:89:33:0E:EF:DA:CA:E9:DF:87:36:31:66:8C:ED:29:7B:4B:EF
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PGmJMw7v2srp34c2MWaM7Sl7S-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.202.0/24
188.209.130.0/24
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ad:e4:59:d6:24:1e:28:cd:39:0b:b9:c8:07:ef:6e:8a:b3:
4f:31:51:28:e4:e0:76:6b:4f:1d:0a:60:75:ed:b1:8a:c3:9c:
71:6c:86:f6:d7:e9:76:22:97:57:b5:7e:9f:bd:28:f9:15:7f:
67:49:1b:ef:30:fb:d9:30:e3:a9:f6:f8:06:37:b5:8a:4d:6d:
4a:62:ea:d7:19:d8:b0:87:98:e3:e0:4e:6b:39:87:24:95:7d:
69:a4:5d:2a:32:96:e7:32:f3:7a:5f:3c:c1:20:83:2f:e3:5e:
13:ae:ce:59:73:66:13:e9:e1:ea:1e:f0:52:f8:28:76:65:85:
96:e5:73:7f:a8:9f:ac:ba:f3:4f:e9:57:af:76:76:ee:62:12:
c7:5e:db:f3:89:37:de:b5:06:03:d7:66:36:75:28:c1:40:72:
6e:fd:f9:37:be:d6:18:17:14:60:d9:ae:0b:b8:8e:c1:0e:d8:
4d:b1:43:0e:57:0e:4c:4e:48:ee:82:bc:06:81:3c:b0:a0:70:
53:88:2a:65:46:47:5d:d5:42:5b:d8:69:fb:6d:2c:1a:b6:5b:
ed:dd:db:d1:57:a2:c6:1c:56:0d:82:f2:4d:3f:e3:bc:11:c1:
a2:42:90:22:0c:08:85:a6:b4:33:69:06:e7:a4:3f:cb:6d:fa:
3e:3e:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:50:42 2026 by rpki-client