Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wFiDU3KfnhBrxjC1Jcl0L4Dfm4o.roa
File: wFiDU3KfnhBrxjC1Jcl0L4Dfm4o.roa (raw, json)
Hash identifier: OyruNnGkkxIuar+BgFZPYTqrpP3TPdu0FgMxUOLJPsE=
Subject key identifier: C0:58:83:53:72:9F:9E:10:6B:C6:30:B5:25:C9:74:2F:80:DF:9B:8A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019C7152BB6105E71277F78E674C4BED6954
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wFiDU3KfnhBrxjC1Jcl0L4Dfm4o.roa
Signing time: Wed 18 Feb 2026 15:16:13 +0000
ROA not before: Wed 18 Feb 2026 15:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56362
IP address blocks: 2a12:9f00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:52:bb:61:05:e7:12:77:f7:8e:67:4c:4b:ed:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 18 15:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0588353729f9e106bc630b525c9742f80df9b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:ec:45:e8:5c:8d:a3:b1:b0:57:99:cd:e2:
ef:00:4d:7c:8e:83:1e:16:2f:83:27:02:6e:cf:c9:
01:3f:44:95:b3:bc:25:d0:aa:3f:00:a5:de:49:fc:
a7:06:85:fd:26:c8:86:60:5f:65:45:b8:3d:1c:f1:
a3:5f:ce:40:a5:45:87:19:f0:b6:cd:8f:55:39:fa:
49:fc:80:1e:cc:f0:dd:a2:e1:16:eb:04:6b:67:fd:
4e:09:41:68:e6:32:a8:31:d8:f1:f3:07:d8:b1:54:
f2:4b:0f:ea:4b:42:c1:eb:cf:70:17:bc:8b:ac:66:
4a:50:da:39:7a:e9:02:2f:88:83:fd:85:62:71:69:
23:db:b3:83:b4:ea:96:68:83:40:86:6a:7c:03:25:
e8:83:24:01:7b:c8:91:50:75:09:3f:2a:1d:d5:ca:
d1:db:ff:6d:ab:40:1d:6d:24:6d:0a:e1:70:c2:cc:
01:8f:38:72:ba:49:4a:36:f1:a4:a5:b1:5f:55:48:
c8:38:77:5f:4e:31:27:36:8e:f7:bf:c8:0b:0a:79:
0e:c1:b9:86:fa:90:d2:2f:84:0e:c5:ef:e5:03:ad:
55:98:cd:3d:26:ab:ea:a5:a3:51:a2:3c:32:68:e6:
2c:d8:d5:b0:c3:a9:91:a3:da:0c:35:48:bb:47:a2:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:83:53:72:9F:9E:10:6B:C6:30:B5:25:C9:74:2F:80:DF:9B:8A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wFiDU3KfnhBrxjC1Jcl0L4Dfm4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9f00:4::/48
Signature Algorithm: sha256WithRSAEncryption
25:93:7d:26:a6:cd:e8:f9:d6:b5:a4:46:0b:d4:be:6b:db:1a:
4f:7c:01:8f:12:3c:70:32:29:69:06:73:5e:a7:8f:10:9e:10:
fc:1a:db:12:2c:ae:c7:db:7a:a3:0b:53:a8:0f:59:e9:65:1b:
fa:45:13:b5:8c:6b:d9:bb:af:e1:f1:2f:7b:bd:ce:46:ea:8d:
54:ec:1d:ab:78:a5:a7:78:ae:69:12:43:cb:ef:5f:aa:93:e6:
a7:f8:de:22:e6:d0:38:89:0e:24:c2:90:a3:f4:85:f8:db:63:
a8:e7:20:ba:7d:87:50:ed:2e:a5:e1:b6:7e:16:ed:06:65:ce:
e0:4d:27:10:49:93:0e:ff:90:87:cc:e3:c6:6c:99:42:0b:3b:
93:5f:04:6a:06:26:25:1c:14:cb:84:ea:d4:f4:d8:4e:d8:67:
32:93:e4:6f:70:76:31:6d:9c:27:2d:5e:ed:f9:cf:74:d5:d2:
75:5d:00:b0:ea:cc:6d:56:c6:92:9a:57:92:23:92:b6:4c:07:
18:f2:f8:1c:0a:29:a6:f7:9b:46:c2:63:75:53:5f:b0:d9:15:
41:d5:02:4f:b6:b4:2a:d2:22:a7:94:6e:f9:fa:68:6b:70:7b:
47:88:4d:f2:3b:4c:35:db:67:0f:a5:cb:bf:8d:ac:0e:ea:9e:
a8:c8:3b:4a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZxxUrthBecSd/eOZ0xL7WlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwMjE4MTUxNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDU4ODM1MzcyOWY5ZTEwNmJjNjMwYjUyNWM5NzQyZjgwZGY5YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsunsRehcjaOxsFeZzeLvAE18joMe
Fi+DJwJuz8kBP0SVs7wl0Ko/AKXeSfynBoX9JsiGYF9lRbg9HPGjX85ApUWHGfC2
zY9VOfpJ/IAezPDdouEW6wRrZ/1OCUFo5jKoMdjx8wfYsVTySw/qS0LB689wF7yL
rGZKUNo5eukCL4iD/YVicWkj27ODtOqWaINAhmp8AyXogyQBe8iRUHUJPyod1crR
2/9tq0AdbSRtCuFwwswBjzhyuklKNvGkpbFfVUjIOHdfTjEnNo73v8gLCnkOwbmG
+pDSL4QOxe/lA61VmM09JqvqpaNRojwyaOYs2NWww6mRo9oMNUi7R6KUSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMBYg1Nyn54Qa8YwtSXJdC+A35uKMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvd0ZpRFUzS2ZuaEJyeGpDMUpjbDBMNERmbTRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKfAAAE
MA0GCSqGSIb3DQEBCwUAA4IBAQAlk30mps3o+da1pEYL1L5r2xpPfAGPEjxwMilp
BnNep48QnhD8GtsSLK7H23qjC1OoD1npZRv6RRO1jGvZu6/h8S97vc5G6o1U7B2r
eKWneK5pEkPL71+qk+an+N4i5tA4iQ4kwpCj9IX422Oo5yC6fYdQ7S6l4bZ+Fu0G
Zc7gTScQSZMO/5CHzOPGbJlCCzuTXwRqBiYlHBTLhOrU9NhO2Gcyk+RvcHYxbZwn
LV7t+c901dJ1XQCw6sxtVsaSmleSI5K2TAcY8vgcCimm95tGwmN1U1+w2RVB1QJP
trQq0iKnlG75+mhrcHtHiE3yO0w122cPpcu/jawO6p6oyDtK
-----END CERTIFICATE-----
Generated at Fri Feb 20 07:41:55 2026 by rpki-client