Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/BL0wTsTVxHnCsydHSH0S5IlDmrY.roa
File: BL0wTsTVxHnCsydHSH0S5IlDmrY.roa (raw, json)
Hash identifier: ebo9v7T5SQnUnDXHt/srJfcEOd1S7o0LV+uHCPbVMBs=
Subject key identifier: 04:BD:30:4E:C4:D5:C4:79:C2:B3:27:47:48:7D:12:E4:89:43:9A:B6
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019C707356B3F605BE5A16F1137539A7D01F
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/BL0wTsTVxHnCsydHSH0S5IlDmrY.roa
Signing time: Wed 18 Feb 2026 11:12:12 +0000
ROA not before: Wed 18 Feb 2026 11:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 195.18.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:73:56:b3:f6:05:be:5a:16:f1:13:75:39:a7:d0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Feb 18 11:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04bd304ec4d5c479c2b32747487d12e489439ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:04:31:fe:54:91:20:d6:64:33:e6:23:5f:
fc:25:bb:b2:11:86:5a:eb:dc:95:87:2d:4b:41:6f:
e4:52:42:76:e8:02:6a:9d:03:23:c4:a0:50:f3:a9:
7a:f2:88:e1:8d:0c:b8:7d:1d:51:b8:18:4f:79:e5:
40:65:b6:b3:c1:98:c7:55:e5:dc:77:2f:ad:7b:fb:
d3:20:b2:dd:81:c6:c0:43:8f:40:1d:fd:16:ad:ee:
4d:ed:c9:77:b0:4f:23:33:1a:30:1b:57:01:34:c6:
f8:ae:cf:66:1d:ed:66:8c:82:b7:d2:8a:de:1b:ae:
9f:ef:e7:34:b5:a0:fe:f3:f6:4a:45:e3:2e:0e:63:
4c:2f:84:47:b9:67:b5:48:a2:3d:8b:2d:60:49:b5:
fc:e2:62:30:96:c2:3f:67:a2:76:d2:90:c7:f0:bb:
36:1d:80:1a:fd:96:5d:5e:86:f7:07:d8:f2:d7:e6:
5a:ff:5c:72:42:a7:1a:1d:d6:03:05:16:41:47:e0:
44:c0:4d:19:88:40:31:82:85:d7:a6:9f:55:7c:9b:
80:ed:73:22:a7:65:c6:e0:0e:40:60:cd:c3:1d:f8:
87:a6:47:8e:33:c4:d1:fe:7a:0d:e1:22:f6:ee:be:
38:9e:49:b8:67:40:a6:c7:3e:7c:e5:a4:84:b2:e3:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:30:4E:C4:D5:C4:79:C2:B3:27:47:48:7D:12:E4:89:43:9A:B6
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/BL0wTsTVxHnCsydHSH0S5IlDmrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.10.0/24
Signature Algorithm: sha256WithRSAEncryption
75:bf:1f:ed:1e:55:ed:49:6c:d9:7f:40:45:21:ea:f6:c3:92:
17:f5:f2:78:09:34:cb:7f:04:96:b6:d6:d1:83:db:86:34:c8:
05:a2:0f:5d:d9:1e:73:3d:97:45:ce:53:63:09:cf:6a:e3:c6:
62:34:d9:09:09:1c:db:18:6f:f9:e9:e9:60:8d:97:30:30:56:
30:2f:5e:9f:22:fb:8c:8c:2e:2d:85:4e:2b:32:07:97:59:9d:
40:04:5f:72:d9:af:df:b9:91:5d:10:72:e9:f7:a5:7c:9b:27:
d3:fa:c5:f2:d9:d7:7b:a2:ad:2f:c9:77:48:5b:4d:dc:7c:87:
99:fc:df:dd:0b:75:6f:de:dc:b2:6c:06:09:26:31:27:89:63:
23:f8:16:fa:e9:4c:34:7e:7d:29:e2:82:20:a0:3d:70:ed:55:
3b:c8:db:07:6c:a8:85:bf:8a:36:00:fe:bf:c6:8b:79:f6:0d:
3d:3b:5b:75:12:8f:c8:40:fa:ea:f3:c2:bc:d5:65:0c:a7:a6:
87:13:a3:70:b9:a8:99:e7:97:f2:3c:7d:12:f0:76:d1:bc:9a:
de:ef:68:15:c7:33:d4:c9:2e:b8:4c:9b:7a:f1:b2:77:75:84:
be:11:a9:6f:94:c0:cd:fd:33:98:ea:bd:0c:48:3a:2e:71:83:
49:06:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:33 2026 by rpki-client