Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/Ciy2fNIQW721fMsDhCb-VtXGBFw.roa
File: Ciy2fNIQW721fMsDhCb-VtXGBFw.roa (raw, json)
Hash identifier: XXBlf4gWy3TZJvapRvU6gO8Rcd2sHCwCt2ib04wAeps=
Subject key identifier: 0A:2C:B6:7C:D2:10:5B:BD:B5:7C:CB:03:84:26:FE:56:D5:C6:04:5C
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019C719BF83D8270FA2EB10BD008D8BBDD87
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/Ciy2fNIQW721fMsDhCb-VtXGBFw.roa
Signing time: Wed 18 Feb 2026 16:36:12 +0000
ROA not before: Wed 18 Feb 2026 16:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.225.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:9b:f8:3d:82:70:fa:2e:b1:0b:d0:08:d8:bb:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Feb 18 16:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a2cb67cd2105bbdb57ccb038426fe56d5c6045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:7e:0e:ad:da:b8:f3:05:ab:2f:50:1d:9a:
ca:a6:7c:24:4c:dc:d1:19:89:42:c2:2e:e4:64:7a:
e8:b0:8f:bf:a3:14:24:ba:6e:0c:9d:a8:23:09:4d:
cf:8e:6b:44:47:23:89:45:24:22:06:f6:8b:bc:a8:
2e:05:eb:f7:c4:1c:ea:50:fc:22:8a:03:85:a2:ce:
cc:19:57:f4:69:d4:4d:92:c5:79:9e:dc:6d:8a:b1:
42:d3:09:e2:81:4c:52:93:45:9c:a8:e4:98:5b:b6:
ff:e4:e0:82:aa:eb:84:10:b3:10:8f:df:99:2c:b0:
41:a2:9f:c3:d0:0a:6d:a7:61:ff:fb:de:b2:46:e4:
95:22:f4:92:98:74:21:61:57:71:b7:86:62:90:0d:
75:eb:d8:c3:bb:9c:23:7b:45:de:7f:8e:99:91:d4:
5c:54:d2:1e:f9:28:b0:5f:ff:13:0f:d8:15:e3:0e:
63:52:c6:5e:13:e8:56:49:32:62:90:f5:45:2b:3d:
f4:f9:b3:51:0c:22:2e:6d:28:ea:23:de:0c:9f:f8:
e8:4f:ad:fc:79:0c:42:27:c2:d6:6f:f4:1a:08:af:
69:0b:7d:cf:50:78:fc:14:1b:04:27:a6:0e:df:b9:
7a:14:2c:0b:fc:8c:d9:83:bb:70:28:e4:57:4d:91:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:B6:7C:D2:10:5B:BD:B5:7C:CB:03:84:26:FE:56:D5:C6:04:5C
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/Ciy2fNIQW721fMsDhCb-VtXGBFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.126.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2c:d8:e5:71:99:c7:98:c9:2b:f2:20:f0:7d:cc:f1:1c:4a:
3f:54:c8:40:c0:d4:fe:e1:b2:1d:51:1e:d4:f1:9c:30:d1:33:
46:00:32:27:a6:89:24:4a:35:21:01:49:6c:3e:c5:bb:0c:d4:
74:1a:02:c3:29:d5:ef:c4:b4:db:63:16:8a:98:28:c5:82:17:
bb:f2:42:f8:07:91:e3:f3:13:99:65:69:6e:03:d9:28:57:26:
eb:36:7d:59:99:7d:13:c7:08:d9:45:85:0f:18:01:58:1a:9a:
c0:d1:75:49:ee:8d:6c:be:d8:34:bc:b1:9f:88:49:1b:40:e4:
a3:c8:8b:7d:62:17:4f:ff:a8:e9:ab:66:cd:bb:fe:fa:04:07:
e0:a2:e8:e7:77:fa:da:b4:32:53:17:9a:e5:79:ab:e7:61:4f:
ee:1f:f5:0b:dd:da:a7:73:6d:f6:80:12:85:12:18:db:01:b4:
7e:47:4f:bf:5f:5d:07:88:26:6b:7b:3e:43:80:d1:06:56:57:
a1:eb:55:fb:a0:a3:86:69:c3:8f:85:13:9b:93:a7:04:fa:66:
46:e5:98:42:cd:b9:86:8c:58:40:34:a7:53:61:c0:63:fb:aa:
2e:d3:9e:7c:9b:30:83:0f:3e:2f:ee:09:cb:9a:35:e2:54:77:
b6:af:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:34:44 2026 by rpki-client