Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/AV49wejGjr9Hxex13Q4l2cqGohs.roa
File: AV49wejGjr9Hxex13Q4l2cqGohs.roa (raw, json)
Hash identifier: R5bHWz2gU7R0C+az37mAsWmVht2m6Ethy9QvAiIWbnA=
Subject key identifier: 01:5E:3D:C1:E8:C6:8E:BF:47:C5:EC:75:DD:0E:25:D9:CA:86:A2:1B
Certificate issuer: /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial: 019C770E521115A6CA95EDCB1E574CB2F6F6
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/AV49wejGjr9Hxex13Q4l2cqGohs.roa
Signing time: Thu 19 Feb 2026 17:59:13 +0000
ROA not before: Thu 19 Feb 2026 17:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 195.146.163.0/24 maxlen: 24
195.146.164.0/24 maxlen: 24
195.146.165.0/24 maxlen: 24
195.146.166.0/24 maxlen: 24
195.146.167.0/24 maxlen: 24
195.146.168.0/24 maxlen: 24
195.146.169.0/24 maxlen: 24
195.146.170.0/24 maxlen: 24
195.146.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:0e:52:11:15:a6:ca:95:ed:cb:1e:57:4c:b2:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Validity
Not Before: Feb 19 17:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=015e3dc1e8c68ebf47c5ec75dd0e25d9ca86a21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:a9:55:34:0a:43:bc:fc:ef:19:1b:2e:da:
a8:8d:13:34:c5:f6:96:53:e9:7f:7c:f4:76:de:38:
0d:2c:d1:ed:b3:d4:f0:2b:fa:07:87:f7:99:cd:64:
d4:06:0d:62:41:10:88:02:88:22:e4:f9:b4:2f:e2:
32:a2:51:8a:fd:54:60:9f:41:36:a9:f9:36:40:59:
f5:04:46:3e:15:a8:49:2c:50:81:80:aa:58:34:f7:
fe:59:91:ec:62:60:37:8d:e8:1a:c5:ee:89:1e:38:
4c:c9:b6:84:e4:37:9c:f1:0d:f6:49:c5:6a:f7:50:
93:67:3e:af:89:b5:03:07:50:4d:57:22:0d:66:21:
0d:17:ba:42:70:af:3b:04:79:90:e4:81:f0:20:ed:
c4:54:2b:5e:ae:5a:01:7f:f0:22:36:f1:4a:d4:26:
06:75:c2:46:e4:6c:e0:20:34:6a:ab:66:a8:26:7d:
3f:30:79:c0:84:12:02:99:c8:8f:49:37:72:7b:5d:
97:42:3c:5f:bb:f5:48:d1:88:24:56:08:60:44:59:
c8:07:d8:8b:79:cb:c4:58:e8:52:7b:52:41:75:b0:
ea:53:84:91:d8:98:7e:b3:a2:d7:20:e4:ca:90:1a:
43:3e:ed:c8:fa:f6:1a:9c:01:cf:f6:76:5c:24:50:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:3D:C1:E8:C6:8E:BF:47:C5:EC:75:DD:0E:25:D9:CA:86:A2:1B
X509v3 Authority Key Identifier:
keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/AV49wejGjr9Hxex13Q4l2cqGohs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.163.0-195.146.171.255
Signature Algorithm: sha256WithRSAEncryption
5c:c3:f6:c1:24:0a:62:e8:26:f4:ed:10:a8:e4:0f:19:35:4e:
f5:66:4c:90:2c:ae:85:fe:a1:a4:62:11:b9:39:18:d4:3f:2d:
3c:0d:31:69:5e:a8:0c:9b:24:79:c5:41:5f:51:8d:5d:ad:e7:
c5:bc:e5:ba:c2:c1:9b:90:ac:3e:b5:c1:5a:3d:6f:c9:6d:7f:
42:ce:ee:d3:4f:c1:80:8a:e1:8c:d5:ce:d3:e0:c2:76:42:7c:
13:78:30:d0:b8:cd:58:6b:c2:c5:e5:71:3d:ce:4b:ed:ae:ed:
e6:82:be:82:76:dd:fa:26:7b:29:3d:c2:27:d9:ff:d7:5d:f4:
cc:b9:2b:36:bd:48:ab:6d:f5:20:f7:e6:ee:3f:e1:49:17:71:
b0:19:2b:a4:d2:0b:46:16:21:84:a9:7e:39:f9:88:1a:ed:a4:
87:6a:7e:28:00:16:a9:04:a0:9a:29:c5:c5:19:9a:c1:1b:ab:
29:6d:6d:ea:72:7a:72:bb:06:eb:de:1d:db:86:fd:3f:76:db:
c5:6e:95:0c:85:2f:48:77:e5:33:1d:2b:7a:c7:43:aa:c5:83:
54:70:85:cc:dc:c7:4f:a9:c0:dd:4e:8b:9b:09:16:56:87:d9:
3f:f9:f0:ab:90:fe:6d:38:75:66:4c:ab:4c:d0:65:7f:26:f5:
05:99:2e:a9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZx3DlIRFabKle3LHldMsvb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODQ0ZTEzNzRmMWM0NTgxYmZiZjdhZDQ2MzhhMTEyZDMx
NmZiZTQwHhcNMjYwMjE5MTc1OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTVlM2RjMWU4YzY4ZWJmNDdjNWVjNzVkZDBlMjVkOWNhODZhMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyWpVTQKQ7z87xkbLtqojRM0xfaW
U+l/fPR23jgNLNHts9TwK/oHh/eZzWTUBg1iQRCIAogi5Pm0L+IyolGK/VRgn0E2
qfk2QFn1BEY+FahJLFCBgKpYNPf+WZHsYmA3jegaxe6JHjhMybaE5Dec8Q32ScVq
91CTZz6vibUDB1BNVyINZiENF7pCcK87BHmQ5IHwIO3EVCterloBf/AiNvFK1CYG
dcJG5GzgIDRqq2aoJn0/MHnAhBICmciPSTdye12XQjxfu/VI0YgkVghgRFnIB9iL
ecvEWOhSe1JBdbDqU4SR2Jh+s6LXIOTKkBpDPu3I+vYanAHP9nZcJFCTxQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAFePcHoxo6/R8Xsdd0OJdnKhqIbMB8GA1UdIwQY
MBaAFGmEThN08cRYG/v3rUY4oRLTFvvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlST0UzVHh4RmdiLV9ldFJqaWhFdE1XLS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZDU0YjktYTc2My00NTE0LTk0Njct
OGFhZWY3NmMyZTk4LzEvQVY0OXdlakdqcjlIeGV4MTNRNGwyY3FHb2hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zZDU0YjktYTc2My00NTE0LTk0NjctOGFhZWY3NmMyZTk4
LzEvYVlST0UzVHh4RmdiLV9ldFJqaWhFdE1XLS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDkqMD
BALDkqgwDQYJKoZIhvcNAQELBQADggEBAFzD9sEkCmLoJvTtEKjkDxk1TvVmTJAs
roX+oaRiEbk5GNQ/LTwNMWleqAybJHnFQV9RjV2t58W85brCwZuQrD61wVo9b8lt
f0LO7tNPwYCK4YzVztPgwnZCfBN4MNC4zVhrwsXlcT3OS+2u7eaCvoJ23fomeyk9
wifZ/9dd9My5Kza9SKtt9SD35u4/4UkXcbAZK6TSC0YWIYSpfjn5iBrtpIdqfigA
FqkEoJopxcUZmsEbqyltbepyenK7BuveHduG/T9228VulQyFL0h35TMdK3rHQ6rF
g1Rwhczcx0+pwN1Oi5sJFlaH2T/58KuQ/m04dWZMq0zQZX8m9QWZLqk=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:01 2026 by rpki-client