Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-1DLEeAtZ0SRVnpYD76lZkCXP0o.roa
File: 1-1DLEeAtZ0SRVnpYD76lZkCXP0o.roa (raw, json)
Hash identifier: PWeP95Kd8RTWLWIDfKKxxrtMjBfjAbQSNX6J08elIh0=
Subject key identifier: FB:50:CB:11:E0:2D:67:44:91:56:7A:58:0F:BE:A5:66:40:97:3F:4A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019BFE2673B13D5DE7AE51A8A93970E9A187
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-1DLEeAtZ0SRVnpYD76lZkCXP0o.roa
Signing time: Tue 27 Jan 2026 06:31:31 +0000
ROA not before: Tue 27 Jan 2026 06:31:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 05:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:26:73:b1:3d:5d:e7:ae:51:a8:a9:39:70:e9:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 27 06:31:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb50cb11e02d674491567a580fbea56640973f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:29:8d:4e:bf:46:63:73:c9:1f:6c:2a:7d:
d6:e0:d5:9a:99:6b:e6:f1:73:c9:f8:0f:a2:9c:f8:
09:35:41:28:f1:34:d0:5f:87:4b:24:3e:40:cf:b9:
40:34:f6:8c:d1:10:e8:39:dd:65:df:95:39:ba:32:
f4:62:1d:fd:58:20:3e:f7:05:94:b4:e0:19:e8:d6:
2f:82:82:4a:26:9e:83:e5:c0:71:21:4d:24:54:81:
e7:0a:cf:37:66:f9:3c:ce:d1:1f:be:67:88:6d:84:
ed:30:7e:fb:7b:38:a3:4f:ac:f9:41:a5:1d:dd:4f:
97:20:48:ba:2e:ab:15:99:58:fa:a9:4c:f4:7c:8f:
c0:ef:2e:48:72:08:61:32:da:08:ac:2a:0f:aa:f6:
9f:a6:79:24:08:6b:d7:05:1e:78:c2:b9:cc:78:30:
4e:34:55:8e:0f:97:bf:9c:fc:7d:c8:e0:da:56:0f:
54:73:e5:51:17:6d:c4:3e:65:7f:aa:68:a1:ad:7c:
3d:b9:9a:56:02:8a:14:f7:36:c7:4f:72:3c:b7:be:
89:40:9a:76:27:02:36:55:6f:4e:94:27:3d:9b:00:
91:7e:bf:cc:d4:64:a7:0e:c3:2c:2d:d2:c0:2a:fe:
d5:a9:cb:40:21:e3:66:f6:72:77:bf:62:3c:25:0f:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:CB:11:E0:2D:67:44:91:56:7A:58:0F:BE:A5:66:40:97:3F:4A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-1DLEeAtZ0SRVnpYD76lZkCXP0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:71:01:bd:6a:16:e5:33:d5:2a:af:91:3e:15:ce:9f:0c:91:
b1:46:36:58:05:37:79:d5:8f:7c:a6:11:1b:4f:7e:5a:85:bd:
89:5a:a8:09:6c:42:e4:3b:a4:97:3a:27:66:e5:b7:6e:a4:fa:
a8:13:c2:ce:4f:81:e2:37:d4:91:e0:01:5a:c7:de:2c:cc:48:
db:d2:f9:4a:0c:c0:c0:b4:b4:89:c4:ca:e5:eb:af:c7:3a:ca:
cd:55:a2:0a:29:40:ae:4e:07:9e:8f:e0:64:95:07:a0:b8:30:
3d:81:58:7a:01:f4:6c:93:00:9d:77:9a:e6:37:a2:b6:40:95:
52:61:1e:67:7a:ab:e9:43:b4:ce:7b:0c:2f:59:2c:1e:cc:99:
10:88:6c:ea:8a:f0:28:c9:0c:f6:6c:40:05:f4:dd:c4:66:1f:
d7:fd:30:dd:42:d9:e8:3d:59:e3:d2:ac:7f:f2:04:70:97:20:
91:49:fd:21:37:2e:e7:7b:78:75:05:24:0b:96:fa:e3:93:39:
e6:6f:11:cf:b4:fe:d7:6a:6b:01:d5:e5:47:52:e5:a1:5d:e1:
91:4d:5f:ee:99:91:bc:3e:fc:ab:91:2f:8a:99:c5:9a:f4:16:
07:45:f4:4c:20:6e:30:13:fa:d8:2b:34:1a:13:ae:fb:2f:35:
99:2e:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 14:00:48 2026 by rpki-client