Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/AEHvPX3VoVo4sodyxxf_DiRnFFY.roa
File: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (raw, json)
Hash identifier: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=
Subject key identifier: 00:41:EF:3D:7D:D5:A1:5A:38:B2:87:72:C7:17:FF:0E:24:67:14:56
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019C6AC57B1E773E7F3F0C31E9C0EF60466D
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/AEHvPX3VoVo4sodyxxf_DiRnFFY.roa
Signing time: Tue 17 Feb 2026 08:44:12 +0000
ROA not before: Tue 17 Feb 2026 08:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201207
IP address blocks: 205.188.60.0/23 maxlen: 23
205.188.236.0/23 maxlen: 23
205.188.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:c5:7b:1e:77:3e:7f:3f:0c:31:e9:c0:ef:60:46:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Feb 17 08:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0041ef3d7dd5a15a38b28772c717ff0e24671456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:e3:ce:b4:94:8a:4e:e9:32:e6:15:f3:85:
db:f9:a1:47:8c:07:76:8e:37:ec:60:e3:4a:4b:c5:
bc:37:02:a3:0f:b9:f8:84:6a:aa:22:85:8a:08:e1:
d1:6c:92:5a:b8:77:8d:07:8c:b8:26:44:0a:fe:e2:
b3:52:e6:f5:32:6f:ad:ef:bf:49:9a:3b:44:19:3a:
5f:91:fa:d8:61:8e:c6:65:84:b0:dc:74:24:4a:0e:
6a:0a:85:0a:ee:0f:8a:8b:a2:db:ba:bb:0b:b7:8b:
58:3f:a1:86:1d:9c:09:71:6e:6e:98:54:52:41:8d:
52:34:d7:9d:8a:89:9c:4e:c5:2e:58:45:a9:ef:34:
8a:02:00:b9:af:7c:11:49:a7:88:e2:af:05:50:b5:
7d:f6:b4:81:5f:75:84:98:99:f4:fa:12:dd:94:86:
ff:7c:a8:af:5c:57:cf:45:9d:53:20:3c:4f:42:ef:
d5:48:c6:03:0a:ce:03:0d:73:2e:8f:0d:41:ab:a2:
a6:80:1b:ab:06:a9:88:ed:1f:ce:d9:12:03:10:a3:
48:bb:42:07:ba:75:af:07:88:6b:ba:e4:0b:b1:85:
ed:eb:16:63:95:d8:e6:db:e5:0f:6b:db:cb:fd:54:
e5:6e:b5:2d:f5:74:09:b7:13:35:48:5f:64:2e:76:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:EF:3D:7D:D5:A1:5A:38:B2:87:72:C7:17:FF:0E:24:67:14:56
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/AEHvPX3VoVo4sodyxxf_DiRnFFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.188.60.0/23
205.188.236.0/23
205.188.248.0/23
Signature Algorithm: sha256WithRSAEncryption
72:a9:e6:79:e2:0a:99:74:47:58:a3:d5:9b:69:8d:af:4a:93:
32:56:a5:fb:48:95:bf:3b:a5:28:19:07:70:92:21:c0:c1:88:
d5:97:75:1e:6a:ba:f1:12:c9:50:ae:5f:55:fe:7b:c8:05:52:
9a:9b:32:24:dc:ae:9b:57:b9:fe:f4:da:f2:d5:f1:53:1f:79:
dd:d4:17:f3:ee:a6:a7:c7:99:10:ab:dc:4a:21:28:13:d4:48:
98:cd:22:e1:05:f1:bc:a7:c9:0c:2d:75:90:8d:7d:5f:5e:84:
29:97:e5:77:de:e3:2f:1a:45:2b:77:14:16:c7:ab:41:db:fb:
a9:2f:4a:cf:5c:38:0c:30:1b:18:83:23:a9:5b:85:8d:55:b7:
26:79:aa:8f:3e:01:b8:e2:64:ea:be:75:ce:11:d4:c3:ff:d8:
6d:fc:e4:7b:75:a4:c2:97:c2:43:80:19:19:49:df:85:c2:52:
18:52:8c:98:75:5c:32:24:c1:b8:5e:4a:2c:55:fb:9c:ec:8a:
3e:8d:cf:85:dd:a0:04:ca:08:69:1c:de:31:29:9a:92:63:1b:
37:ea:cd:ce:cb:0c:01:4b:93:18:3d:1a:61:de:d7:31:8b:e7:
01:bd:d0:90:93:7b:e6:74:b2:de:f8:15:e1:31:8a:49:c7:fd:
31:14:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:57:25 2026 by rpki-client