Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fqaw1hqEbT6Ly7C2C4iihwVvf9c.roa
File: fqaw1hqEbT6Ly7C2C4iihwVvf9c.roa (raw, json)
Hash identifier: H23+3pA3/ZgLEwlP3ie8L6oj5mHe+3b2JSaPR4xleEw=
Subject key identifier: 7E:A6:B0:D6:1A:84:6D:3E:8B:CB:B0:B6:0B:88:A2:87:05:6F:7F:D7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019C7F7088D0E01F1F4E7974E4EFE96A6085
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fqaw1hqEbT6Ly7C2C4iihwVvf9c.roa
Signing time: Sat 21 Feb 2026 09:03:27 +0000
ROA not before: Sat 21 Feb 2026 09:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 15:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7f:70:88:d0:e0:1f:1f:4e:79:74:e4:ef:e9:6a:60:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 21 09:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ea6b0d61a846d3e8bcbb0b60b88a287056f7fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:3d:22:b2:5b:5a:c0:ec:94:da:e0:cc:f8:
68:d4:55:f1:1f:aa:de:65:8e:57:cb:48:43:ee:f5:
8a:2f:9e:a6:bf:5a:89:f3:03:b1:4e:1b:86:94:51:
47:31:33:f7:f6:0b:64:46:c4:aa:fb:eb:8f:ea:81:
8d:8f:7a:9d:f1:70:d8:51:06:42:7c:ee:34:6c:7f:
bd:1b:1a:0c:6e:99:17:eb:8f:49:3d:0c:de:8c:19:
87:25:4a:c3:37:4e:a6:93:cd:25:22:79:7f:42:7a:
f9:ad:f5:96:32:e4:85:ee:11:45:3b:f6:7f:e9:2d:
b8:63:d0:b4:33:61:98:be:d0:be:ba:9f:c0:2d:50:
b2:4d:22:3b:9e:d0:06:c2:68:88:4a:48:97:0f:90:
31:1e:cd:88:87:e1:41:5c:1a:bf:c3:c6:f1:ee:b6:
13:fb:42:a4:4d:e0:f5:04:45:90:c9:da:5a:38:37:
2a:4b:f9:6e:89:0c:ec:e2:0a:45:ff:a2:30:00:90:
48:5c:d1:8f:2b:d0:f3:ad:cf:42:a9:99:a3:19:4b:
a8:38:6c:7b:1b:40:6e:48:4d:7a:33:03:cc:ee:18:
ce:60:99:bc:51:19:ab:44:84:63:3c:44:79:b0:95:
f6:1c:df:9a:c6:bd:72:28:37:dd:e8:e9:1a:73:1b:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:B0:D6:1A:84:6D:3E:8B:CB:B0:B6:0B:88:A2:87:05:6F:7F:D7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fqaw1hqEbT6Ly7C2C4iihwVvf9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
d5:fc:1f:27:a9:17:6b:55:a4:4d:0a:e1:14:eb:d6:ac:da:73:
ed:18:73:33:cd:3a:ba:68:12:a6:33:d2:65:09:75:26:56:d9:
ed:64:ac:d4:68:23:af:f2:ba:3b:9b:c7:c3:f6:30:b5:cf:b3:
c0:32:75:9d:05:79:24:38:d0:55:f6:11:14:b0:7f:fb:3f:32:
f4:52:2d:17:5b:5c:cf:db:08:12:45:76:f8:0b:b4:ed:4f:7e:
c6:f3:47:e6:12:13:1e:31:8f:92:1d:77:3e:31:4b:20:ba:95:
50:39:db:b3:95:c6:1e:d1:09:cb:87:98:96:aa:8e:80:36:ed:
ec:cf:65:e2:6a:cb:8b:09:29:c0:af:ac:a6:8d:2f:b9:1f:46:
37:db:65:bf:fd:20:e2:2c:17:48:52:fa:94:b9:04:56:38:5b:
67:73:be:fa:3b:09:c6:ba:92:4f:bf:cf:d4:31:eb:cd:a8:31:
dd:33:30:45:bb:1f:44:03:f5:fe:f2:29:a0:67:58:c6:21:89:
e6:d1:20:d6:b5:c5:c9:b9:f5:a3:1d:f9:1c:ba:7e:fe:07:47:
d6:cc:af:2a:74:05:c4:51:86:d7:cb:69:b6:f4:34:53:ca:23:
83:e2:d9:8c:c1:48:4e:e2:c4:e8:48:92:5c:09:a7:6b:8b:7b:
1b:06:4a:98
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZx/cIjQ4B8fTnl05O/pamCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwMjIxMDkwMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWE2YjBkNjFhODQ2ZDNlOGJjYmIwYjYwYjg4YTI4NzA1NmY3ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvA9IrJbWsDslNrgzPho1FXxH6re
ZY5Xy0hD7vWKL56mv1qJ8wOxThuGlFFHMTP39gtkRsSq++uP6oGNj3qd8XDYUQZC
fO40bH+9GxoMbpkX649JPQzejBmHJUrDN06mk80lInl/Qnr5rfWWMuSF7hFFO/Z/
6S24Y9C0M2GYvtC+up/ALVCyTSI7ntAGwmiISkiXD5AxHs2Ih+FBXBq/w8bx7rYT
+0KkTeD1BEWQydpaODcqS/luiQzs4gpF/6IwAJBIXNGPK9Dzrc9CqZmjGUuoOGx7
G0BuSE16MwPM7hjOYJm8URmrRIRjPER5sJX2HN+axr1yKDfd6Okacxv5WQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFH6msNYahG0+i8uwtguIoocFb3/XMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZnFhdzFocUViVDZMeTdDMkM0aWlod1Z2ZjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgZfwAMF
AyoUQsAwDQYJKoZIhvcNAQELBQADggEBANX8HyepF2tVpE0K4RTr1qzac+0YczPN
OrpoEqYz0mUJdSZW2e1krNRoI6/yujubx8P2MLXPs8AydZ0FeSQ40FX2ERSwf/s/
MvRSLRdbXM/bCBJFdvgLtO1PfsbzR+YSEx4xj5Iddz4xSyC6lVA527OVxh7RCcuH
mJaqjoA27ezPZeJqy4sJKcCvrKaNL7kfRjfbZb/9IOIsF0hS+pS5BFY4W2dzvvo7
Cca6kk+/z9Qx682oMd0zMEW7H0QD9f7yKaBnWMYhiebRINa1xcm59aMd+Ry6fv4H
R9bMryp0BcRRhtfLabb0NFPKI4Pi2YzBSE7ixOhIklwJp2uLexsGSpg=
-----END CERTIFICATE-----
Generated at Mon Feb 23 21:02:19 2026 by rpki-client