Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_0-U_dvkW7gAc4cTDIIkcm_9VOw.roa
File: _0-U_dvkW7gAc4cTDIIkcm_9VOw.roa (raw, json)
Hash identifier: MWzK0oFmUyO4WRUo2MGNJz+fYJhtySMZ4mGR30tXxn0=
Subject key identifier: FF:4F:94:FD:DB:E4:5B:B8:00:73:87:13:0C:82:24:72:6F:FD:54:EC
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019C6C7CEFB12A6B4FF2B6F7F6F7738990C9
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_0-U_dvkW7gAc4cTDIIkcm_9VOw.roa
Signing time: Tue 17 Feb 2026 16:44:12 +0000
ROA not before: Tue 17 Feb 2026 16:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40950
IP address blocks: 185.24.151.0/24 maxlen: 24
185.143.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:7c:ef:b1:2a:6b:4f:f2:b6:f7:f6:f7:73:89:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 17 16:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff4f94fddbe45bb8007387130c8224726ffd54ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:0f:16:76:d8:2e:8d:ff:2e:d7:62:f8:a2:
59:41:53:90:62:0d:87:eb:62:f9:2e:2b:73:a6:0c:
7e:aa:84:c6:98:ed:bc:76:59:d2:a7:f5:65:f3:4a:
60:42:16:23:8d:7a:56:74:83:d5:8f:41:66:85:ea:
c1:e1:5e:73:4c:ce:73:40:10:75:10:c1:65:85:94:
72:1e:d8:e6:5f:84:0b:41:1b:af:e9:04:89:98:b8:
98:d6:8d:88:a3:78:55:c4:95:f2:fb:78:69:58:70:
b8:2f:5c:96:de:43:aa:bf:d0:7e:ab:fd:8c:fc:fa:
1c:d0:75:83:94:7f:af:2c:61:12:bc:80:8b:fa:f0:
44:50:65:63:c5:35:32:7b:61:c6:32:04:97:6b:04:
57:c0:83:ca:11:3d:97:4d:b3:06:14:f8:fa:5a:dd:
e5:95:15:9b:11:16:0e:e6:4f:91:13:d2:ed:b8:03:
fa:27:99:19:ed:aa:91:3b:f1:41:93:b4:66:fa:a1:
ac:69:c9:dd:9f:b7:a9:42:9b:80:6f:34:b8:f8:b3:
60:ab:b4:52:ec:8d:16:a3:b1:22:51:f2:aa:fc:13:
fc:38:d7:4b:15:e4:18:fa:25:c1:02:4b:09:81:e6:
d1:fb:6c:1b:8c:29:8c:82:a6:03:23:d1:31:35:7d:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:94:FD:DB:E4:5B:B8:00:73:87:13:0C:82:24:72:6F:FD:54:EC
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_0-U_dvkW7gAc4cTDIIkcm_9VOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.151.0/24
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:da:a4:6b:ff:a2:57:cf:27:3c:c5:d9:28:15:0c:30:80:9f:
67:e1:b2:a6:c4:d4:a8:18:11:98:39:c4:5f:3c:ba:62:49:63:
9c:32:ba:e0:31:11:1d:85:18:40:fe:2a:bb:12:21:2c:e8:e4:
31:76:55:9b:e9:17:a6:dd:c9:b3:4c:e4:96:f2:f0:11:ad:83:
3f:05:f2:0f:93:a9:91:22:32:b3:e3:9e:6d:91:08:e2:95:b0:
7e:35:b1:64:d5:69:2d:e5:9e:4b:59:f7:03:52:96:1f:51:c4:
c9:34:9b:77:2d:ed:3f:ba:2b:48:54:9a:a7:1e:d0:14:d7:1d:
44:05:bf:d1:0a:6f:32:02:e0:9f:ca:a3:0b:a1:5b:92:58:92:
d2:3a:d2:c1:bb:c6:b3:29:e1:81:29:e4:6f:49:e9:37:db:11:
ad:e0:1a:1f:5a:08:19:ab:f5:5b:1b:3d:03:7f:9e:d7:a1:d3:
33:d3:a2:50:21:c4:f1:ab:eb:81:50:66:f7:71:f9:c0:77:af:
79:91:a7:2c:f3:27:3a:8c:6e:32:06:ef:94:54:5b:f5:88:bf:
ef:25:9a:5f:2e:0a:c8:08:63:9f:95:99:e8:86:2e:43:38:88:
a1:c0:64:9a:0b:03:44:b3:5e:f1:7a:7a:5b:0e:44:2d:23:fb:
0d:40:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:16:34 2026 by rpki-client