Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/VzmPmv49ZlESJ5C30_GsgK6ojqk.roa
File: VzmPmv49ZlESJ5C30_GsgK6ojqk.roa (raw, json)
Hash identifier: jpM6UBBGmNVvPn5cxkcrMeAnTgMy9H2Am+ydSfi0bfQ=
Subject key identifier: 57:39:8F:9A:FE:3D:66:51:12:27:90:B7:D3:F1:AC:80:AE:A8:8E:A9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019C7184940E0C4B0229427FA11191F84AF2
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/VzmPmv49ZlESJ5C30_GsgK6ojqk.roa
Signing time: Wed 18 Feb 2026 16:10:39 +0000
ROA not before: Wed 18 Feb 2026 16:10:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 195.64.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:84:94:0e:0c:4b:02:29:42:7f:a1:11:91:f8:4a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 18 16:10:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57398f9afe3d6651122790b7d3f1ac80aea88ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:c9:24:45:34:8e:e4:03:c3:65:9e:85:9d:
b2:63:ac:7f:7a:4f:b5:04:ee:ee:8c:33:7f:be:88:
20:64:2a:6b:d9:46:7f:29:52:a1:68:f6:a2:13:44:
3b:8c:27:be:0d:bf:25:ae:6a:93:6a:7b:63:78:a0:
00:85:77:e1:ca:0d:aa:4e:a8:5a:22:74:45:80:85:
f4:7a:0b:e9:8b:c5:dd:3a:1c:c7:91:e6:af:54:1a:
50:5e:9d:69:b0:37:b2:0d:ba:ee:b6:15:a2:f2:a5:
43:cf:9c:b9:77:be:6f:10:ca:61:e2:37:02:49:51:
d7:5d:5b:28:5c:29:5a:03:c3:e6:db:68:dc:33:07:
0f:dc:80:a7:00:0b:ef:83:b3:fe:93:14:a7:16:b2:
dd:05:20:66:6a:1d:23:cf:06:52:7f:92:73:af:11:
0b:fc:07:47:6a:c7:b4:73:e2:0a:9d:12:e9:5d:6d:
22:4b:51:d9:5c:19:e4:96:0c:9e:8a:31:bf:2c:ab:
67:6e:fa:42:46:68:36:5c:63:1d:ee:27:44:35:c7:
19:89:8e:cb:6f:b6:a5:30:92:c4:c8:a1:c4:a4:e3:
cd:8e:e1:16:3a:95:ad:26:a7:8b:d0:ec:48:94:b5:
cf:67:1b:4e:be:e0:c7:88:b4:2f:2e:6d:30:c6:02:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:8F:9A:FE:3D:66:51:12:27:90:B7:D3:F1:AC:80:AE:A8:8E:A9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/VzmPmv49ZlESJ5C30_GsgK6ojqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.106.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b0:39:4e:b1:a2:e9:af:51:0b:7e:dc:60:83:34:1b:aa:6e:
10:e4:48:aa:31:94:fd:1a:9f:1b:d1:fc:d2:fe:95:43:ee:3b:
32:ed:36:e3:8d:a9:82:a3:8f:83:16:58:d0:dc:88:d3:f0:88:
f4:fc:98:e1:39:28:88:63:3d:0b:3d:79:be:8d:b0:d5:2b:98:
c1:27:5a:17:bb:05:22:47:4b:92:51:15:92:09:d2:04:59:c5:
58:9f:65:78:b7:f0:cf:8d:2c:e1:88:93:ed:f8:c0:d2:db:27:
de:2f:20:ee:ae:63:60:dc:6b:34:db:fe:48:d5:d3:13:6e:cc:
2c:ac:59:2c:7b:90:d9:ac:f1:58:f8:00:b1:25:4b:e0:ee:9d:
0d:c2:98:4f:67:29:fc:23:cb:12:64:15:95:d8:fb:b1:7c:16:
a0:ec:70:1d:3e:03:27:b5:15:be:cd:f1:e6:22:cc:0a:e1:d7:
5a:95:57:ba:88:ad:86:9d:8f:49:24:91:ee:98:33:bf:f2:de:
a4:5e:09:42:3b:dd:1c:c7:96:98:69:50:1e:a3:6a:07:58:6d:
56:3a:99:c2:31:96:37:35:50:5a:28:d0:3c:52:13:38:f8:33:
44:e2:15:9f:4b:cd:42:54:32:f0:17:47:eb:7b:a8:73:b7:78:
0e:da:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:34:39 2026 by rpki-client