Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/RVVP5PD8dP-43J18hmU2HOb7Ac0.roa
File: RVVP5PD8dP-43J18hmU2HOb7Ac0.roa (raw, json)
Hash identifier: OTrvnZXSq87IsihJgFpcsrD3gfgWtAmyMOFW/2u0mbk=
Subject key identifier: 45:55:4F:E4:F0:FC:74:FF:B8:DC:9D:7C:86:65:36:1C:E6:FB:01:CD
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 019C760EE46BB5D0742F2931C120D71C6FE8
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/RVVP5PD8dP-43J18hmU2HOb7Ac0.roa
Signing time: Thu 19 Feb 2026 13:20:13 +0000
ROA not before: Thu 19 Feb 2026 13:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.60.0/24 maxlen: 24
195.13.61.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:0e:e4:6b:b5:d0:74:2f:29:31:c1:20:d7:1c:6f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Feb 19 13:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45554fe4f0fc74ffb8dc9d7c8665361ce6fb01cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a6:c7:8f:35:01:cf:6a:a0:fe:b6:69:8c:8d:
47:eb:7f:00:50:fe:0b:fe:76:e1:a7:01:4f:34:a6:
c4:b0:84:b4:43:56:91:ec:43:a2:9a:77:98:e0:de:
0c:27:40:fc:1e:85:3e:4c:1a:cb:96:e0:74:1e:8b:
ea:fe:a0:70:4c:84:d5:7c:d5:b2:ac:41:63:9a:d9:
55:8c:5b:32:f5:63:f2:d2:12:b0:bf:d4:05:ab:b6:
1b:ca:45:2d:9f:8c:43:12:57:2a:fc:27:b6:e0:75:
83:6d:30:74:c2:66:30:32:1a:47:96:2e:03:98:e3:
c0:f1:59:84:10:2c:1c:cd:5b:d0:96:c2:fc:35:d9:
09:67:9f:48:c1:a9:4b:5a:13:35:90:43:71:cd:3a:
66:46:1b:12:73:09:76:65:4f:a7:75:d6:63:bc:f3:
13:13:b5:d4:a5:77:f0:cb:56:fb:4e:84:86:53:33:
a0:9e:65:43:c3:c0:6e:57:8d:44:d5:bd:28:2e:33:
6a:d1:ba:8c:94:c9:58:d1:cf:10:bd:ac:ad:a1:70:
e8:2b:6f:93:86:1b:37:6b:58:fc:4f:7f:0d:b8:82:
5e:44:1d:93:a1:a1:02:45:45:20:43:5b:49:71:90:
a7:31:87:61:7a:19:2e:45:7c:95:89:18:b8:df:75:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:55:4F:E4:F0:FC:74:FF:B8:DC:9D:7C:86:65:36:1C:E6:FB:01:CD
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/RVVP5PD8dP-43J18hmU2HOb7Ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
193.34.51.0/24
195.13.60.0/22
Signature Algorithm: sha256WithRSAEncryption
84:49:0f:92:96:c3:b3:3d:6b:a1:7b:b8:e1:03:fe:79:7c:3b:
10:64:dd:0b:c2:a5:89:21:15:51:50:56:06:8e:c9:4b:81:34:
cc:22:ac:13:1c:0e:bf:34:ea:55:a3:7b:04:47:4b:bb:85:3b:
6d:0e:8c:a1:41:24:87:2f:d1:35:65:34:97:e1:77:91:79:10:
df:73:2e:70:cd:f3:30:89:3a:8a:77:f1:c3:52:0d:b0:ea:bf:
c6:f7:70:0d:df:c8:ae:fd:a7:95:58:5d:35:8f:0a:68:af:18:
a8:a2:6d:09:ca:ef:24:54:48:21:ad:71:37:8e:07:56:cb:68:
dd:c5:6d:4c:ad:9d:06:37:67:53:3d:59:0f:94:a4:b7:4b:cc:
7d:a6:aa:0c:dc:0f:63:9b:64:de:65:44:ee:27:bf:3a:dc:d4:
ff:30:c4:7e:c0:2e:d6:0b:9c:7b:f3:70:2b:5c:3d:54:6c:14:
a9:ec:b8:dc:4a:ff:35:eb:d3:66:04:83:0b:fa:3f:33:08:46:
ae:30:e5:22:f3:6f:be:0b:b3:36:22:59:74:8a:a2:7f:38:b9:
05:7b:93:d5:1d:1b:b4:8f:9b:77:a0:61:de:42:25:e3:a8:4d:
2a:82:98:b9:c5:e5:5e:49:2a:d6:50:7e:49:d3:2d:57:54:16:
0c:3b:4e:b1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZx2DuRrtdB0LykxwSDXHG/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjYwMjE5MTMyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTU1NGZlNGYwZmM3NGZmYjhkYzlkN2M4NjY1MzYxY2U2ZmIwMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7abHjzUBz2qg/rZpjI1H638AUP4L
/nbhpwFPNKbEsIS0Q1aR7EOimneY4N4MJ0D8HoU+TBrLluB0Hovq/qBwTITVfNWy
rEFjmtlVjFsy9WPy0hKwv9QFq7YbykUtn4xDElcq/Ce24HWDbTB0wmYwMhpHli4D
mOPA8VmEECwczVvQlsL8NdkJZ59IwalLWhM1kENxzTpmRhsScwl2ZU+nddZjvPMT
E7XUpXfwy1b7ToSGUzOgnmVDw8BuV41E1b0oLjNq0bqMlMlY0c8QvaytoXDoK2+T
hhs3a1j8T38NuIJeRB2ToaECRUUgQ1tJcZCnMYdhehkuRXyViRi433U2JwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEVVT+Tw/HT/uNydfIZlNhzm+wHNMB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvUlZWUDVQRDhkUC00M0oxOGhtVTJIT2I3QWMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwSIxAwQA
wSIzAwQCww08MA0GCSqGSIb3DQEBCwUAA4IBAQCESQ+SlsOzPWuhe7jhA/55fDsQ
ZN0LwqWJIRVRUFYGjslLgTTMIqwTHA6/NOpVo3sER0u7hTttDoyhQSSHL9E1ZTSX
4XeReRDfcy5wzfMwiTqKd/HDUg2w6r/G93AN38iu/aeVWF01jwporxioom0Jyu8k
VEghrXE3jgdWy2jdxW1MrZ0GN2dTPVkPlKS3S8x9pqoM3A9jm2TeZUTuJ7863NT/
MMR+wC7WC5x783ArXD1UbBSp7LjcSv8169NmBIML+j8zCEauMOUi82++C7M2Ill0
iqJ/OLkFe5PVHRu0j5t3oGHeQiXjqE0qgpi5xeVeSSrWUH5J0y1XVBYMO06x
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:39 2026 by rpki-client