Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa
File: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (raw, json)
Hash identifier: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=
Subject key identifier: 7C:9B:79:0E:87:B9:47:83:E3:D7:9B:0B:FD:B1:05:2E:CC:55:42:ED
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019C68A693402995C32454CBB7BC910A9C6A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa
Signing time: Mon 16 Feb 2026 22:51:12 +0000
ROA not before: Mon 16 Feb 2026 22:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.225.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:a6:93:40:29:95:c3:24:54:cb:b7:bc:91:0a:9c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 16 22:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c9b790e87b94783e3d79b0bfdb1052ecc5542ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:35:83:34:42:b5:37:a8:e4:61:53:30:2d:
16:d7:98:90:ce:38:78:fb:91:dc:84:29:3f:1f:66:
da:0f:90:fb:61:dc:c7:2f:d5:74:14:51:12:51:59:
30:60:16:70:7d:d9:da:da:91:e2:33:ac:9d:99:1d:
73:9f:05:15:ca:1e:38:76:f1:5b:c8:ac:c2:d2:c3:
a8:b5:8d:a0:12:68:82:12:47:27:c7:1a:23:be:d4:
4f:1b:85:40:0a:7d:a4:72:c8:20:1e:08:71:ea:72:
af:81:63:4c:27:20:51:4b:ae:fe:d1:e0:b1:e6:de:
1e:cf:09:32:ed:1f:26:24:3e:59:c3:bb:8f:b7:e0:
99:a0:b2:f6:66:54:66:41:7c:e7:c6:86:4e:e9:d9:
a7:25:bd:47:28:05:9a:6d:be:4e:9b:66:f8:89:2a:
69:c6:ef:10:72:52:ab:2a:16:2a:04:ce:c3:4b:e9:
2f:cc:d1:eb:71:5f:29:ad:bc:5e:98:c2:c6:4e:a1:
81:6b:92:13:cd:40:92:6f:ea:e9:30:55:f9:f5:de:
85:71:d4:55:13:d8:a1:3f:d6:17:fa:7f:51:2e:dc:
06:73:b0:ce:d3:05:4c:e2:52:6d:49:a7:11:e7:dd:
d8:61:e8:1d:de:5a:29:ec:7d:06:3d:20:fb:2c:d8:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:79:0E:87:B9:47:83:E3:D7:9B:0B:FD:B1:05:2E:CC:55:42:ED
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.171.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fa:8a:fa:28:a1:b9:1b:90:af:d4:e1:ad:92:8a:23:02:d5:
26:a8:95:d4:ad:9f:4c:72:0e:01:05:15:f9:de:3e:53:6c:7c:
03:85:aa:5e:ef:1f:94:49:f9:a3:17:15:e7:63:9e:5e:ce:99:
ce:f8:7e:bb:70:0b:bd:52:6b:6f:2a:90:59:59:e2:3d:68:6b:
ca:d1:10:1e:43:a7:1c:c2:8f:2b:cc:c4:f9:23:94:64:5f:df:
03:f0:a0:26:3a:05:f1:9e:1a:68:89:fe:d9:7f:1d:56:3d:24:
45:56:ef:d2:1c:3f:e2:fc:bf:f6:6f:bb:8f:b5:aa:a5:5c:84:
b8:d9:ee:a6:55:f8:48:1f:9f:e2:08:fa:35:72:78:19:4c:1c:
dd:ef:9b:9d:fb:11:e8:66:9c:c9:9f:b2:6c:74:ec:e2:28:94:
f0:6a:0b:fa:d9:8c:c8:e6:3d:f9:aa:db:23:b5:d3:48:64:6b:
36:8f:88:82:cc:a2:df:77:b5:9e:93:12:07:03:20:5b:c6:21:
92:9a:38:11:f4:a7:f7:c2:ff:06:29:fa:d5:a9:0b:8c:b6:7f:
97:87:ef:27:83:3e:0f:9a:e8:b4:ad:69:bf:34:be:38:d6:6a:
6b:ce:5e:6c:91:fe:88:9d:31:3c:b5:f8:59:c8:b7:fd:03:4a:
13:e0:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 23:31:41 2026 by rpki-client