Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I1V-48RcdvC3GT3zOIBpZhqoHew.roa
File: I1V-48RcdvC3GT3zOIBpZhqoHew.roa (raw, json)
Hash identifier: 7C5uo5bJmcfTwCwIbSWdF3bY23cVmmLG+A1TJ2JDlFw=
Subject key identifier: 23:55:7E:E3:C4:5C:76:F0:B7:19:3D:F3:38:80:69:66:1A:A8:1D:EC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C6667A062A7561D30836A043F4B39BDE2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I1V-48RcdvC3GT3zOIBpZhqoHew.roa
Signing time: Mon 16 Feb 2026 12:23:13 +0000
ROA not before: Mon 16 Feb 2026 12:23:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.152.0/22 maxlen: 22
206.245.158.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:67:a0:62:a7:56:1d:30:83:6a:04:3f:4b:39:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 16 12:23:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23557ee3c45c76f0b7193df3388069661aa81dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:e2:9a:00:de:a5:61:f5:0d:42:7f:b6:55:
7e:ed:a8:a7:3c:db:f1:37:c4:e3:64:67:28:12:35:
dd:e6:6b:63:f0:08:f8:7d:1e:4f:7d:26:f4:4e:73:
33:07:02:4b:4a:5a:3b:aa:a6:8f:60:8c:db:d9:a0:
00:1c:09:db:63:f7:fc:a1:73:58:b2:9d:f0:10:e4:
7c:52:c2:a2:ec:e8:14:f8:89:62:b9:f8:e3:a4:c6:
94:00:41:28:7b:dd:5d:c5:07:df:8a:3a:86:09:81:
e8:db:ae:75:6c:83:8c:6a:41:4c:6c:f7:1b:34:2e:
52:7b:bd:1c:b4:f8:dd:45:41:f7:f4:62:b6:70:ce:
67:5c:51:67:8f:88:d6:97:dc:ad:f7:8f:61:40:f8:
e5:e0:43:50:b8:7f:69:bf:20:54:7c:e6:c0:2d:31:
61:a4:70:2a:6d:ea:30:55:77:75:99:c7:71:10:58:
86:a3:79:2e:4b:ab:4c:40:9b:4f:3b:af:7e:d2:b4:
4a:e1:be:7e:70:05:97:99:64:b3:1e:20:95:c2:cc:
99:71:68:b7:a6:dd:c0:ab:98:80:94:f3:e0:ba:1e:
f0:57:00:6f:21:ef:b5:dd:01:ff:6c:36:6a:8f:f0:
e0:45:a6:bc:71:a8:ac:fc:35:94:20:f7:09:17:e9:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:7E:E3:C4:5C:76:F0:B7:19:3D:F3:38:80:69:66:1A:A8:1D:EC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I1V-48RcdvC3GT3zOIBpZhqoHew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
89.34.106.0/24
89.125.126.0/24
91.132.50.0/24
93.114.183.0/24
103.245.228.0/23
167.17.191.0/24
185.141.217.0/24
193.124.224.0/24
194.58.47.0/24
206.245.152.0/22
206.245.158.0/24
212.192.0.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:64:15:7c:e5:d4:d3:20:a4:60:65:29:b7:9a:24:87:53:1a:
ed:af:ba:86:4d:6b:df:1a:c3:05:16:fb:9e:15:58:51:34:1e:
1f:74:0d:4d:9a:db:aa:97:ef:27:60:f9:60:e3:4e:cc:06:46:
e8:45:f4:9c:a1:01:b5:65:8a:dc:25:da:b9:50:64:fd:54:d5:
6e:55:45:4b:ef:83:bc:1b:af:d4:97:1a:74:87:80:89:74:5a:
af:b8:7b:9f:5e:fc:91:aa:9d:65:84:7a:a5:c3:f7:9d:a7:24:
a5:1a:f4:fb:2e:d5:6b:01:d2:2f:10:90:e5:ef:fe:93:c4:2d:
08:f7:85:1e:c3:5a:e6:2d:13:95:a8:66:bb:a9:b1:ed:8f:ad:
b9:66:03:5a:7f:00:a6:a0:25:3b:26:a9:ec:35:06:00:34:8f:
f1:bd:14:bc:6d:35:6e:7f:f7:97:ad:41:75:0f:d7:aa:b5:66:
c9:17:44:20:e7:4f:a5:ef:59:11:86:e5:98:bb:28:ed:df:0e:
9a:b1:1c:f6:a0:ea:4a:1a:2d:81:e1:00:24:3f:b1:82:76:58:
99:b4:f9:1a:e9:60:66:a6:f1:3b:25:05:d7:c2:1b:28:cc:24:
c2:81:1d:62:6a:d6:e5:5c:01:ee:ac:b9:62:5a:95:5e:02:08:
5b:5d:7d:05
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZxmZ6Bip1YdMINqBD9LOb3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMjE2MTIyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU1N2VlM2M0NWM3NmYwYjcxOTNkZjMzODgwNjk2NjFhYTgxZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBXimgDepWH1DUJ/tlV+7ainPNvx
N8TjZGcoEjXd5mtj8Aj4fR5PfSb0TnMzBwJLSlo7qqaPYIzb2aAAHAnbY/f8oXNY
sp3wEOR8UsKi7OgU+IliufjjpMaUAEEoe91dxQffijqGCYHo2651bIOMakFMbPcb
NC5Se70ctPjdRUH39GK2cM5nXFFnj4jWl9yt949hQPjl4ENQuH9pvyBUfObALTFh
pHAqbeowVXd1mcdxEFiGo3kuS6tMQJtPO69+0rRK4b5+cAWXmWSzHiCVwsyZcWi3
pt3Aq5iAlPPguh7wVwBvIe+13QH/bDZqj/DgRaa8cais/DWUIPcJF+lhLQIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFCNVfuPEXHbwtxk98ziAaWYaqB3sMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSTFWLTQ4UmNkdkMzR1Qzek9JQnBaaHFvSGV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAC5m7QME
AFkiagMEAFl9fgMEAFuEMgMEAF1ytwMEAWf15AMEAKcRvwMEALmN2QMEAMF84AME
AMI6LwMEAs71mAMEAM71ngMEANTAADAMAwQA1MAHAwQA1MAIAwQA1MAKAwQA1MAe
AwQA1MDQMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZBV85dTTIKRgZSm3miSHUxrtr7qG
TWvfGsMFFvueFVhRNB4fdA1Nmtuql+8nYPlg407MBkboRfScoQG1ZYrcJdq5UGT9
VNVuVUVL74O8G6/Ulxp0h4CJdFqvuHufXvyRqp1lhHqlw/edpySlGvT7LtVrAdIv
EJDl7/6TxC0I94Uew1rmLROVqGa7qbHtj625ZgNafwCmoCU7JqnsNQYANI/xvRS8
bTVuf/eXrUF1D9eqtWbJF0Qg50+l71kRhuWYuyjt3w6asRz2oOpKGi2B4QAkP7GC
dliZtPka6WBmpvE7JQXXwhsozCTCgR1iatblXAHurLliWpVeAghbXX0F
-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:36 2026 by rpki-client