Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/55lgQHjawIWIBPegmtUWO19P1qY.roa
File: 55lgQHjawIWIBPegmtUWO19P1qY.roa (raw, json)
Hash identifier: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=
Subject key identifier: E7:99:60:40:78:DA:C0:85:88:04:F7:A0:9A:D5:16:3B:5F:4F:D6:A6
Certificate issuer: /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial: 019C6F6801834328BCD7486EB86A51FDA664
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/55lgQHjawIWIBPegmtUWO19P1qY.roa
Signing time: Wed 18 Feb 2026 06:20:13 +0000
ROA not before: Wed 18 Feb 2026 06:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 194.169.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:68:01:83:43:28:bc:d7:48:6e:b8:6a:51:fd:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Validity
Not Before: Feb 18 06:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e799604078dac0858804f7a09ad5163b5f4fd6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:fb:24:c0:13:85:bd:45:c8:19:e5:bc:69:
2d:b2:3f:dc:35:c9:1c:8a:7a:ad:e0:cf:9b:23:64:
5d:8f:1f:a0:ad:2a:00:0c:f8:4c:dc:1d:0b:88:9e:
ff:ef:71:e3:3e:cf:f6:e5:11:a4:7e:56:f1:aa:25:
dd:44:1e:05:b5:aa:34:49:5d:b0:d0:ff:4c:1f:29:
06:bb:90:b4:45:84:54:f1:7d:5d:5d:ed:40:25:9c:
6f:00:61:78:7e:e9:0e:5b:bc:2e:d8:6b:f2:a9:c0:
85:0e:68:5f:81:4f:37:f0:f9:6f:a1:0c:3b:54:c1:
ab:44:ae:c9:b3:36:17:45:34:73:64:91:e1:da:95:
36:35:e5:6d:30:c2:8a:9e:f5:3d:95:9b:c7:f4:cb:
f1:da:ae:34:c7:1c:82:42:c0:21:dc:f0:00:d0:4b:
1d:0b:e0:61:08:bc:17:83:f1:a4:2a:de:36:99:73:
17:7d:8b:7a:a5:74:14:fd:78:a5:11:28:b0:77:ff:
f6:38:a9:d4:fe:08:9d:09:0d:da:7d:cf:01:ee:31:
4d:61:5c:51:83:60:9a:bd:73:ab:f0:c7:4e:7a:78:
eb:68:2d:7a:4a:2b:62:e3:c2:58:71:64:29:6c:e2:
e6:04:4d:9f:fd:34:90:43:21:40:ca:eb:9b:fd:c5:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:60:40:78:DA:C0:85:88:04:F7:A0:9A:D5:16:3B:5F:4F:D6:A6
X509v3 Authority Key Identifier:
keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/55lgQHjawIWIBPegmtUWO19P1qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.246.0/24
Signature Algorithm: sha256WithRSAEncryption
44:28:58:ad:21:18:bb:60:b2:1f:6f:ce:75:51:62:42:57:78:
4f:11:9c:45:42:67:4d:dd:fc:3b:f5:5c:c2:1f:0b:4d:2f:66:
40:7e:a2:16:fe:39:24:a4:8a:fe:74:de:4a:2b:c4:1a:e1:c5:
b4:5f:4c:92:ba:71:e8:98:ac:b6:d1:a5:c9:3f:8c:a1:d1:e8:
0c:1a:29:64:e4:0a:a8:65:c9:7c:a2:f3:7e:39:53:48:8b:51:
8c:57:60:dd:53:c8:9b:09:89:ac:88:b3:29:9d:94:f5:38:8e:
85:c2:56:95:a6:79:ad:69:11:60:77:6b:22:38:2d:9f:5e:2a:
c4:76:8d:aa:f4:59:0d:32:93:32:33:3a:c3:a1:fe:43:45:5f:
9f:82:d4:bf:a2:f8:ef:06:57:d7:82:31:13:a3:5a:4a:81:bb:
d1:a4:a6:85:08:12:34:67:77:88:66:2c:ce:e1:9e:79:16:ce:
02:9b:51:d6:0f:e4:38:aa:e7:25:fb:59:66:f8:6f:82:9f:6c:
a9:36:3e:ca:2b:68:0b:29:96:35:6f:c8:45:12:f0:dd:1c:1e:
3a:39:80:bc:2f:a4:4d:86:60:38:e5:8f:a8:2b:45:d1:24:95:
5e:07:ad:a0:11:5f:cd:ef:a8:63:90:ad:6d:8f:d4:ea:7c:3e:
3f:93:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:03 2026 by rpki-client