Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1FJkhXdV22IkdwzzJEYmCepZYrQ.roa
File: 1FJkhXdV22IkdwzzJEYmCepZYrQ.roa (raw, json)
Hash identifier: 8qOJZTOkU3Wh1b8vEndisqEZegUrkClRRGH5phizNjo=
Subject key identifier: D4:52:64:85:77:55:DB:62:24:77:0C:F3:24:46:26:09:EA:59:62:B4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C6B963ACBD1F1DE59DD9192CA4AE1F051
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1FJkhXdV22IkdwzzJEYmCepZYrQ.roa
Signing time: Tue 17 Feb 2026 12:32:13 +0000
ROA not before: Tue 17 Feb 2026 12:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 14:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:96:3a:cb:d1:f1:de:59:dd:91:92:ca:4a:e1:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 17 12:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d45264857755db6224770cf324462609ea5962b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:2c:36:06:14:b7:ac:78:2a:b8:14:e3:c0:
d1:67:cb:49:14:0f:50:4d:f0:a3:32:4e:bf:54:e6:
4c:8f:85:11:27:e8:97:7f:41:de:d6:c9:8e:c6:79:
5e:b4:83:f2:1a:82:ea:93:7d:fa:91:f8:17:f3:eb:
08:4e:4c:3e:8f:f0:d1:08:ac:2a:29:bb:11:58:20:
e7:f5:cd:35:cc:32:02:2c:7e:b1:b6:c4:4f:d7:ac:
54:5b:fb:99:09:10:15:ec:d2:6e:9c:4b:ed:b1:d1:
e0:96:5e:ec:bf:48:43:44:45:30:3f:67:1a:e6:5a:
1c:5d:0c:14:cd:64:fe:60:f0:a9:61:68:e6:ff:19:
d8:eb:38:b0:ae:17:dc:39:7f:6d:9d:eb:84:0c:d0:
c5:bc:20:93:b9:a1:23:ed:61:23:57:e5:3d:5e:f2:
1f:29:cb:08:0d:80:a6:6f:65:5f:74:fd:de:e0:1f:
be:87:67:55:c3:1e:00:ac:0c:7c:91:1d:f7:28:e5:
99:cb:7e:16:4b:15:67:9d:33:e7:7a:ee:03:04:56:
fd:63:f9:18:b5:7b:6b:11:c4:0b:24:fe:8d:4f:d8:
01:2b:6c:d5:d9:6c:1c:5e:22:cd:b8:2b:71:e6:79:
e9:64:92:8b:db:5e:09:09:11:27:1b:08:b1:15:86:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:64:85:77:55:DB:62:24:77:0C:F3:24:46:26:09:EA:59:62:B4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1FJkhXdV22IkdwzzJEYmCepZYrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.211.0-5.175.212.255
5.231.110.0/24
5.231.123.0-5.231.124.255
5.231.241.0/24
89.144.40.0/24
94.249.181.0/24
Signature Algorithm: sha256WithRSAEncryption
40:88:ec:10:f8:74:ec:8e:6e:95:78:8c:8b:8d:91:5f:57:40:
f7:fd:60:c1:5a:14:b0:b2:16:bc:24:dc:73:98:a8:bb:d7:b4:
a0:80:d3:56:72:e4:00:3f:3e:a7:d9:56:d8:94:0b:1b:01:ad:
8d:71:d8:f9:af:72:4c:2f:eb:a0:50:96:73:51:85:98:a0:e5:
32:a8:e7:3d:12:d6:67:7d:f9:02:ae:dc:25:b4:d4:be:a4:8d:
c3:ea:c4:2a:62:c0:30:9f:3c:44:b1:de:5d:16:eb:31:24:cb:
ac:61:74:5d:99:e0:42:3e:03:b7:a3:d6:9d:29:23:44:7b:b9:
9a:7c:8c:66:3a:f6:17:ca:83:8d:68:f2:75:29:77:62:b8:5e:
2b:ee:c0:22:3d:b0:60:5c:dc:69:06:91:f1:c7:a1:4c:59:06:
2e:0e:4b:4d:c4:a2:74:c4:d8:5b:0a:e2:15:49:35:7b:fc:50:
ec:56:d9:77:91:41:2d:81:a6:c3:2b:90:a6:3b:47:37:a9:f4:
f1:91:3f:9e:35:71:0c:3b:ef:63:a1:be:86:80:d4:29:9b:08:
44:c4:62:11:f7:92:d2:9c:2b:aa:cd:95:a7:fa:c0:db:41:ff:
5e:72:84:45:c6:b5:f1:f6:fe:5f:5b:91:2e:c4:0f:f1:dc:7d:
15:6b:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:42 2026 by rpki-client