Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/AVMt1IkFQkpQTFPhcJiPQebWyaw.roa
File: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (raw, json)
Hash identifier: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=
Subject key identifier: 01:53:2D:D4:89:05:42:4A:50:4C:53:E1:70:98:8F:41:E6:D6:C9:AC
Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial: 019C6D925664E12113D09B90CCEA502AB683
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/AVMt1IkFQkpQTFPhcJiPQebWyaw.roa
Signing time: Tue 17 Feb 2026 21:47:12 +0000
ROA not before: Tue 17 Feb 2026 21:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.41.150.0/24 maxlen: 24
2a07:8241::/36 maxlen: 36
2a07:8241:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6d:92:56:64:e1:21:13:d0:9b:90:cc:ea:50:2a:b6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Validity
Not Before: Feb 17 21:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01532dd48905424a504c53e170988f41e6d6c9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:80:66:ec:28:9d:f1:12:fb:8b:7b:8a:8a:
14:89:a8:1e:14:c9:ef:d3:0e:7a:88:23:65:2d:ac:
40:f2:4b:64:65:5c:4f:d9:f2:d2:e3:60:37:9b:aa:
1a:df:13:0f:ed:2c:0d:7e:31:f1:1e:33:29:a8:16:
64:d2:1d:03:5f:2e:88:48:32:86:dd:01:c7:aa:58:
84:a2:9b:12:e8:d3:8c:76:fa:bc:81:10:b9:00:8f:
76:a7:44:c2:08:d4:5d:43:ca:1a:d9:9e:0a:18:ad:
1a:74:b3:c0:96:a8:83:27:fd:2f:9f:b3:93:e7:87:
56:cf:36:44:41:a9:f3:26:5f:8a:75:4b:d8:1a:ef:
47:30:b2:5d:a6:88:49:37:ea:21:db:fb:80:e8:14:
d5:1d:aa:e9:12:a0:1e:be:00:91:82:82:f1:ce:be:
c9:ea:51:cc:09:45:f0:b2:de:af:25:79:80:02:b0:
01:f4:bc:dd:86:2e:fd:d7:5c:e4:52:7e:ec:ec:7c:
8c:92:fd:38:4d:0c:16:d6:d1:9f:3c:cd:a3:24:1d:
2e:15:77:e4:e7:3c:20:de:75:71:55:0d:0f:36:9a:
86:e1:88:3d:be:e3:de:b4:b0:0a:78:85:27:f3:31:
3a:32:3c:4d:af:64:fd:66:49:cd:d9:52:b9:09:6d:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:2D:D4:89:05:42:4A:50:4C:53:E1:70:98:8F:41:E6:D6:C9:AC
X509v3 Authority Key Identifier:
keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/AVMt1IkFQkpQTFPhcJiPQebWyaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.150.0/24
IPv6:
2a07:8241::/35
Signature Algorithm: sha256WithRSAEncryption
8c:eb:3a:92:35:37:c8:a0:9f:08:0c:14:2c:64:45:8a:fe:f0:
bc:15:24:c9:ad:9f:97:f8:1c:5e:42:53:d7:9d:32:55:2b:3e:
06:0a:97:0f:c2:3f:6d:86:df:53:6a:ef:2c:6b:41:4f:1d:eb:
ee:3e:35:9b:5a:79:6f:12:0f:86:47:7b:35:8a:e4:c9:85:1b:
31:55:5b:82:46:06:9a:16:c3:9b:87:6c:e6:9d:59:75:22:58:
72:47:5f:b4:6b:32:58:5f:36:2a:63:e4:4a:0a:69:1e:f7:8d:
0c:4a:12:0c:fa:65:5f:39:1f:e2:4f:eb:97:ea:f3:a6:81:39:
1e:66:f1:da:f4:ee:a9:0a:35:1c:64:9c:80:f3:b7:5f:17:9b:
b3:29:69:c4:b3:b4:5b:79:cb:0b:63:9c:3c:42:a1:ce:71:e5:
b8:17:02:a2:71:ce:4f:d7:d5:aa:0c:8a:01:fa:29:d7:36:aa:
3e:16:f9:6a:8b:9e:78:e9:fc:b8:a1:e4:2b:c5:39:d0:5b:f9:
42:2c:cc:d5:dd:a2:d5:4f:39:ad:94:77:bb:44:6c:53:88:94:
c0:24:86:5e:5b:c9:9d:79:ab:98:88:2e:09:61:3e:84:2e:b3:
a3:64:78:90:b5:60:6e:72:3e:b1:11:58:c8:80:df:d4:07:74:
42:e5:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:01 2026 by rpki-client