Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2H2cVuR_qyURwc_WSgxPN9QJ6I4.roa
File: 2H2cVuR_qyURwc_WSgxPN9QJ6I4.roa (raw, json)
Hash identifier: brWalwWPglJ71txBtL4o0e1Z4RctLGVWN4NoRc/aKao=
Subject key identifier: D8:7D:9C:56:E4:7F:AB:25:11:C1:CF:D6:4A:0C:4F:37:D4:09:E8:8E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019C468FC5442FEA6D6CC7A68BF5B86F2496
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2H2cVuR_qyURwc_WSgxPN9QJ6I4.roa
Signing time: Tue 10 Feb 2026 07:59:13 +0000
ROA not before: Tue 10 Feb 2026 07:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Feb 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:8f:c5:44:2f:ea:6d:6c:c7:a6:8b:f5:b8:6f:24:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 10 07:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d87d9c56e47fab2511c1cfd64a0c4f37d409e88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:89:76:06:26:9b:bf:dd:47:91:72:19:b0:
08:68:b6:6f:a4:86:83:38:1a:b8:04:4d:b1:d6:0b:
0e:b6:8c:aa:e6:38:31:07:d1:70:80:ce:fe:48:77:
20:18:ff:40:38:b6:fb:11:12:a9:9b:41:dd:3e:7a:
14:b5:bd:b6:74:1a:c0:64:f7:f4:5b:91:de:61:67:
60:5f:63:51:7e:a8:cd:91:b7:61:1f:75:e0:1e:c9:
71:51:e0:e1:58:e6:b0:38:42:44:80:d7:ac:29:8e:
5c:6e:11:ec:e3:a6:54:02:b7:50:f1:2c:e1:64:04:
76:d3:79:8d:01:7f:2f:c0:4e:d8:cb:88:8a:67:06:
d5:20:16:98:ab:02:e9:1f:63:6e:df:8c:f6:69:12:
0c:25:be:37:b3:1c:dd:25:8a:1d:35:7e:57:6a:65:
1d:0a:5b:23:99:9f:45:77:c3:3e:73:ec:f4:bd:36:
2c:c4:e4:d8:8d:9a:c1:32:39:9c:d5:5e:75:80:ed:
b4:a7:c6:44:46:d8:01:9c:69:f3:43:08:19:7a:d2:
fc:c2:79:a2:39:fd:d9:ba:6a:46:ab:10:da:6a:6e:
e0:1f:39:9b:c7:84:6d:9b:56:fc:b8:9e:7f:19:be:
f9:98:6e:53:b6:27:22:4f:5f:26:8e:ed:b0:f7:55:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:9C:56:E4:7F:AB:25:11:C1:CF:D6:4A:0C:4F:37:D4:09:E8:8E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2H2cVuR_qyURwc_WSgxPN9QJ6I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
78:96:49:f2:78:21:9a:21:62:92:60:b0:6b:ef:90:78:42:fe:
ee:b2:d2:fa:1b:44:39:d8:2b:1f:74:fb:ea:82:50:e7:34:f6:
40:77:d4:4a:66:e8:fb:99:23:1f:c9:59:3f:10:be:99:fc:16:
7b:ae:86:74:8b:03:f8:6d:a0:e3:22:55:6d:76:53:ec:42:1c:
20:14:f5:80:6d:db:3e:7e:f9:dd:d3:77:d9:45:3e:fb:41:f7:
19:7f:17:d0:62:cd:48:c3:3f:ed:22:52:3c:26:1c:73:5a:1a:
80:d9:8b:bb:dd:81:23:25:cb:b0:f5:1d:28:63:a2:b9:93:07:
03:e0:ad:68:50:10:8c:ae:3c:fb:ee:93:c3:94:49:86:7c:f4:
a5:38:d9:af:50:bd:0d:a3:6f:ba:b6:a1:e2:80:4d:f6:d0:ab:
ca:30:12:2c:09:15:74:90:49:5f:10:8b:c2:24:21:3e:38:e1:
1d:24:a6:ae:ec:b0:25:1d:44:fa:14:98:ed:44:31:f5:02:d8:
8e:be:85:ec:8e:9a:bc:4a:75:b9:b2:fe:14:07:26:5e:25:73:
99:df:79:77:1e:5d:fe:17:d8:4b:c1:45:50:d5:b6:7b:e8:6a:
2d:e4:bf:74:42:5f:79:7f:1b:74:9b:4e:c5:29:59:d4:bd:e2:
e1:42:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 18:55:50 2026 by rpki-client