Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TNjGgQuD1vugLSjQY0urwVl_X24.roa
File: TNjGgQuD1vugLSjQY0urwVl_X24.roa (raw, json)
Hash identifier: E6vxB8oLkHce3/60X85z8lRA8RB5bcsfLh6rNICNYSg=
Subject key identifier: 4C:D8:C6:81:0B:83:D6:FB:A0:2D:28:D0:63:4B:AB:C1:59:7F:5F:6E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019C75D0A35775074803C15CEFEA32AF0346
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TNjGgQuD1vugLSjQY0urwVl_X24.roa
Signing time: Thu 19 Feb 2026 12:12:13 +0000
ROA not before: Thu 19 Feb 2026 12:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.158.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 12:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:d0:a3:57:75:07:48:03:c1:5c:ef:ea:32:af:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 19 12:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cd8c6810b83d6fba02d28d0634babc1597f5f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:6b:11:c8:60:ef:da:b2:f5:4f:bc:ef:29:
65:9e:d6:c7:d1:36:af:31:31:24:b1:d5:e7:0e:25:
7d:71:c3:92:db:d7:16:17:43:d4:1e:57:33:97:10:
90:a4:ce:7e:26:5a:43:bc:82:55:70:07:4b:2e:48:
c0:ee:43:4e:19:58:56:ae:60:43:0b:ff:2a:4a:d2:
0b:c2:42:de:4b:ba:28:5b:e7:3e:6f:8b:3a:b8:e5:
8c:3f:00:c8:27:a3:5c:61:fb:55:dc:01:f3:28:49:
cf:b7:88:9f:85:0d:82:5b:aa:6a:ea:b6:38:b1:00:
09:d2:32:2b:ca:7d:46:9a:28:06:32:83:a7:18:27:
bf:f6:2a:af:c1:2b:ac:53:a6:05:3d:f6:06:02:45:
5d:16:b3:9a:64:cd:de:12:10:21:d8:72:ca:7e:c1:
d5:f6:e9:c2:bc:52:e9:b3:f7:4c:93:9c:6c:9a:05:
fd:61:35:7f:b0:8c:0b:3f:d0:ff:f9:cc:21:01:f5:
67:51:b5:f4:a3:83:3c:28:f2:a9:14:d7:c1:d1:69:
03:21:73:fb:51:41:63:c3:0c:57:66:26:4d:17:2b:
a6:e8:c1:96:a8:74:12:b9:83:67:14:e2:2e:85:02:
83:f2:60:53:16:60:00:69:10:9f:e8:b1:be:57:11:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D8:C6:81:0B:83:D6:FB:A0:2D:28:D0:63:4B:AB:C1:59:7F:5F:6E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TNjGgQuD1vugLSjQY0urwVl_X24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.158.0/24
104.222.189.0/24
104.233.59.0/24
104.238.12.0/23
104.239.56.0/24
104.249.9.0/24
104.249.17.0/24
104.249.46.0-104.249.54.255
216.173.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f5:f3:0f:76:d8:ef:4f:32:7d:dd:bc:2b:89:53:68:ca:f1:
38:2f:fb:50:54:df:00:bb:bf:92:be:67:9b:48:01:f3:68:2a:
b9:d0:a9:2e:30:78:83:52:52:32:97:5f:4d:32:02:b8:6e:a2:
17:fa:9c:c1:f4:4f:34:1a:97:a6:e1:fb:94:d0:3c:33:a6:30:
2d:24:18:28:41:ef:a0:24:a5:ca:73:4c:92:49:01:6c:16:a6:
59:48:79:d1:c9:7e:ef:b1:54:d6:44:a7:e5:d7:23:83:18:6d:
31:fa:ed:b4:38:26:0f:90:7f:eb:81:61:cb:34:d5:37:c4:c0:
e6:b3:41:0f:76:51:64:70:e5:11:41:1c:d0:7e:f2:2c:5b:54:
1e:f6:49:f8:65:95:0d:e4:e8:a7:a3:fd:51:02:52:e2:6f:75:
f5:f0:f7:e3:e9:54:ef:7b:37:e3:59:a3:a2:69:fb:c3:50:5d:
fa:a3:1f:e1:ac:1b:9a:5b:24:e6:bf:03:e9:3c:b9:11:b7:35:
0f:51:6e:cc:7d:6e:0d:d4:25:76:f6:42:eb:72:9a:2e:06:23:
7d:22:66:ac:2b:e0:4c:63:57:b9:ad:d6:00:e4:30:25:f5:05:
ba:40:fe:99:9d:ca:11:59:a5:ab:7f:72:70:22:b9:94:0f:17:
58:3f:71:14
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZx10KNXdQdIA8Fc7+oyrwNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwMjE5MTIxMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Q4YzY4MTBiODNkNmZiYTAyZDI4ZDA2MzRiYWJjMTU5N2Y1ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytRrEchg79qy9U+87yllntbH0Tav
MTEksdXnDiV9ccOS29cWF0PUHlczlxCQpM5+JlpDvIJVcAdLLkjA7kNOGVhWrmBD
C/8qStILwkLeS7ooW+c+b4s6uOWMPwDIJ6NcYftV3AHzKEnPt4ifhQ2CW6pq6rY4
sQAJ0jIryn1GmigGMoOnGCe/9iqvwSusU6YFPfYGAkVdFrOaZM3eEhAh2HLKfsHV
9unCvFLps/dMk5xsmgX9YTV/sIwLP9D/+cwhAfVnUbX0o4M8KPKpFNfB0WkDIXP7
UUFjwwxXZiZNFyum6MGWqHQSuYNnFOIuhQKD8mBTFmAAaRCf6LG+VxG38wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFEzYxoELg9b7oC0o0GNLq8FZf19uMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvVE5qR2dRdUQxdnVnTFNqUVkwdXJ3VmxfWDI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALSueAwQA
aN69AwQAaOk7AwQBaO4MAwQAaO84AwQAaPkJAwQAaPkRMAwDBAFo+S4DBABo+TYD
BADYrVswDQYJKoZIhvcNAQELBQADggEBAE318w922O9PMn3dvCuJU2jK8Tgv+1BU
3wC7v5K+Z5tIAfNoKrnQqS4weINSUjKXX00yArhuohf6nMH0TzQal6bh+5TQPDOm
MC0kGChB76AkpcpzTJJJAWwWpllIedHJfu+xVNZEp+XXI4MYbTH67bQ4Jg+Qf+uB
Ycs01TfEwOazQQ92UWRw5RFBHNB+8ixbVB72SfhllQ3k6Kej/VECUuJvdfXw9+Pp
VO97N+NZo6Jp+8NQXfqjH+GsG5pbJOa/A+k8uRG3NQ9Rbsx9bg3UJXb2Qutymi4G
I30iZqwr4ExjV7mt1gDkMCX1BbpA/pmdyhFZpat/cnAiuZQPF1g/cRQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:30:07 2026 by rpki-client