Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/1-KW9dhrWw78GJs49J1yGVUSTg5o.roa
File: 1-KW9dhrWw78GJs49J1yGVUSTg5o.roa (raw, json)
Hash identifier: vBAp/5vp+WoUxyxTLhu9j+1f9k0nwh1G4TQpd54SJ4E=
Subject key identifier: F8:A5:BD:76:1A:D6:C3:BF:06:26:CE:3D:27:5C:86:55:44:93:83:9A
Certificate issuer: /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial: 019C771C0E718036318784D549E2E4FCF6FB
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/1-KW9dhrWw78GJs49J1yGVUSTg5o.roa
Signing time: Thu 19 Feb 2026 18:14:13 +0000
ROA not before: Thu 19 Feb 2026 18:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49915
IP address blocks: 2a10:7987:8000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:1c:0e:71:80:36:31:87:84:d5:49:e2:e4:fc:f6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Validity
Not Before: Feb 19 18:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8a5bd761ad6c3bf0626ce3d275c86554493839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:7e:d1:bb:39:35:02:7b:d7:4f:9a:7b:aa:
9b:2e:18:2b:21:09:b7:6a:9f:81:81:b8:48:a0:2c:
fa:de:43:93:d8:cb:d7:44:a7:03:1d:13:9b:90:3d:
7f:e4:ee:0c:47:43:9d:49:55:f2:e0:e1:1a:fa:cf:
a5:b8:ad:c2:4d:ea:c6:fa:de:dc:27:1b:15:ae:29:
79:95:38:92:92:e9:00:e3:04:08:aa:cc:69:e4:54:
5d:34:78:a4:2e:04:e6:f7:5f:07:74:72:41:8a:98:
30:04:10:12:3c:96:d4:44:05:28:82:9e:41:eb:1c:
d5:53:c0:44:7f:d5:21:cd:a4:c6:a5:50:f1:13:75:
4c:9e:9d:c2:af:57:71:f4:7f:35:ff:71:dc:bb:6b:
a5:b3:34:fd:69:3c:ce:82:77:2c:84:39:5c:62:b8:
fe:5c:66:c0:39:18:d8:77:41:be:bd:cb:a7:1a:c8:
61:91:3b:b1:8c:a3:51:97:b2:46:34:3f:39:e0:50:
ec:fe:aa:b6:ec:5f:2e:11:2c:18:40:49:01:2c:50:
57:78:89:96:77:58:04:10:99:72:95:14:c2:47:ec:
14:55:88:9c:56:45:4b:2d:67:bd:14:88:3e:40:ce:
17:1a:1a:2f:9b:69:39:f2:95:33:a6:02:f8:e3:cd:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:BD:76:1A:D6:C3:BF:06:26:CE:3D:27:5C:86:55:44:93:83:9A
X509v3 Authority Key Identifier:
keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/1-KW9dhrWw78GJs49J1yGVUSTg5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7987:8000::/44
Signature Algorithm: sha256WithRSAEncryption
1c:9a:c0:0e:4f:84:ff:33:7c:16:d1:29:eb:5c:cb:8c:2f:38:
2b:76:18:a0:0f:6c:2b:1b:25:da:3c:8d:95:be:c3:3e:c1:ad:
65:48:7f:d8:d2:3f:4d:21:39:3f:f7:3e:de:eb:9a:91:0f:5e:
56:36:a7:aa:88:f5:62:ba:f1:f8:62:33:a9:ec:c9:30:4b:20:
f5:41:6c:64:fd:01:e4:10:d8:bf:16:6e:77:06:88:ca:c0:1b:
86:90:16:e9:e5:47:29:79:03:56:4b:69:7d:99:51:0d:43:66:
df:6e:c8:fe:3d:8c:0a:ff:b5:b5:a2:fc:29:86:f2:52:41:67:
44:37:19:9d:b1:b4:2f:16:60:4a:ee:c5:8a:bb:66:f3:31:fa:
14:35:89:78:be:db:e7:5e:0c:f4:8f:19:ad:56:95:cc:45:04:
ef:40:0d:f0:0c:84:95:2f:13:dc:c5:b3:df:92:d4:7c:f6:ea:
89:79:d9:56:4b:ac:28:d1:7f:51:08:af:22:19:e5:de:9f:35:
45:c3:f2:11:98:49:c2:e3:74:55:bc:e6:d0:ba:d5:68:b9:74:
7e:c7:40:a3:27:a6:f3:e2:53:df:e0:f7:b5:06:98:5e:5c:11:
4a:95:f0:bd:fc:d3:5a:69:34:44:33:e5:37:bf:88:3f:7d:30:
9e:7a:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:24:33 2026 by rpki-client