Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/qD_Lfu0Qfim8QaOIYmvsrnukeJc.roa
File: qD_Lfu0Qfim8QaOIYmvsrnukeJc.roa (raw, json)
Hash identifier: HwH6i2/tEXH1ubKY1rdPdOsEVv3NWdDVMoqbm6AqtO0=
Subject key identifier: A8:3F:CB:7E:ED:10:7E:29:BC:41:A3:88:62:6B:EC:AE:7B:A4:78:97
Certificate issuer: /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial: 019C771B241E21215665D8D977329E2B890C
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/qD_Lfu0Qfim8QaOIYmvsrnukeJc.roa
Signing time: Thu 19 Feb 2026 18:13:13 +0000
ROA not before: Thu 19 Feb 2026 18:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:7987:8000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:1b:24:1e:21:21:56:65:d8:d9:77:32:9e:2b:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Validity
Not Before: Feb 19 18:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a83fcb7eed107e29bc41a388626becae7ba47897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:c6:12:c5:5f:3d:01:c1:38:e5:d8:e5:45:
53:38:0a:f5:f7:bf:e8:c1:8d:d4:95:b4:91:78:ce:
ac:30:28:0d:24:66:d8:6d:ee:64:b9:d8:a9:91:e5:
bd:74:9e:50:0d:24:1a:84:0f:ed:9a:61:90:13:bf:
bb:50:45:f1:bf:85:7e:35:7c:29:f3:41:bd:77:ad:
29:94:43:d0:a5:92:bd:01:19:3d:8f:73:5c:c4:ed:
da:a2:31:96:be:f4:74:f7:63:b2:3b:05:8e:aa:ba:
70:4e:95:1e:12:f3:b1:9f:2e:26:7b:44:87:1c:79:
6a:1f:c6:b9:2d:91:0e:aa:3f:4b:29:97:77:79:34:
49:64:8e:7f:03:eb:39:8c:49:73:3b:38:11:dd:e5:
66:25:3b:df:6f:ca:48:a6:37:49:b4:ec:58:26:3c:
f7:d9:48:2c:bc:8e:34:8f:31:7f:02:df:86:d4:f2:
35:73:29:27:c5:b7:11:8a:a8:5d:1d:67:68:37:32:
25:0d:77:83:4a:4d:40:5d:ad:f4:12:61:d2:cf:37:
db:94:52:5f:85:12:b7:94:9f:09:b3:9b:08:6a:1f:
fb:0f:8a:87:88:15:cc:ab:60:d0:cb:4d:f7:58:bc:
7d:fd:45:c4:e1:c6:7b:27:ef:9e:94:17:89:12:5c:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:CB:7E:ED:10:7E:29:BC:41:A3:88:62:6B:EC:AE:7B:A4:78:97
X509v3 Authority Key Identifier:
keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/qD_Lfu0Qfim8QaOIYmvsrnukeJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7987:8000::/44
Signature Algorithm: sha256WithRSAEncryption
a5:00:ef:e7:23:89:e5:f6:15:59:a2:6d:59:26:61:00:9a:84:
3d:b9:08:3d:e5:77:08:52:36:9d:ea:66:2a:4b:08:bf:9c:23:
2e:59:fe:ad:3a:a5:9e:cb:91:a3:72:05:48:69:4a:b2:36:32:
61:32:e7:54:c2:9a:05:d4:66:ee:5a:62:b5:72:3a:26:27:4e:
84:65:ab:4d:0e:65:e6:20:6d:d1:01:fe:c2:03:0a:33:fe:3f:
b3:6e:75:59:3a:b0:e9:09:71:d6:f9:bd:a1:71:16:30:c9:29:
f7:82:ef:d9:a3:5e:bb:db:ca:cc:e7:8c:a5:e9:ed:af:d1:71:
8b:69:bd:75:cf:f5:15:3a:06:12:d0:32:76:ed:45:b5:06:2b:
b1:ee:2b:e8:23:46:fd:e3:d1:96:21:cd:b7:97:ed:90:16:59:
71:3c:d1:ab:34:49:16:68:3b:d3:79:93:26:76:4c:81:d3:06:
6d:ff:2e:89:f0:a6:37:4e:a0:15:2d:ef:bc:d2:af:19:f3:55:
b7:62:c1:c8:e4:79:70:9f:9d:34:8e:fe:34:b6:cf:da:8c:36:
4f:fe:c9:33:29:d4:d0:83:1e:7f:3a:84:6b:53:fc:e9:dc:c6:
93:65:78:92:4a:7a:fe:d7:f6:08:be:e2:d5:3e:c3:aa:b3:de:
c6:09:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:32 2026 by rpki-client