Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/t9jgbkajP4bgz-72tnzsAbLz6Zo.roa
File: t9jgbkajP4bgz-72tnzsAbLz6Zo.roa (raw, json)
Hash identifier: j151ROcqO3Oq8bsuJyTu+/ctXAelC/kdZlJSTGHMiTo=
Subject key identifier: B7:D8:E0:6E:46:A3:3F:86:E0:CF:EE:F6:B6:7C:EC:01:B2:F3:E9:9A
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019C329EC8D54FEC7CF515E11143934D8C59
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/t9jgbkajP4bgz-72tnzsAbLz6Zo.roa
Signing time: Fri 06 Feb 2026 11:03:12 +0000
ROA not before: Fri 06 Feb 2026 11:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398704
IP address blocks: 81.17.160.0/21 maxlen: 24
81.17.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Feb 2026 22:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:9e:c8:d5:4f:ec:7c:f5:15:e1:11:43:93:4d:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Feb 6 11:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7d8e06e46a33f86e0cfeef6b67cec01b2f3e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:b5:9e:1a:be:5e:98:b2:bc:71:51:85:b9:
48:04:e8:92:30:af:5e:fe:df:e8:a2:bc:c1:97:c0:
07:47:11:c1:28:dc:ef:d9:d1:02:17:5c:1e:7a:b4:
77:8c:70:94:1e:ae:11:c2:4c:c6:88:53:ce:0c:2d:
91:cc:e3:d1:8f:9e:9c:f5:7d:b0:7d:e2:6e:70:d7:
e9:12:24:13:c5:26:cf:0b:8e:6d:97:5a:66:6f:ba:
ea:8e:50:67:14:b3:d9:c7:1b:bd:54:02:d5:9f:8e:
09:9e:29:fc:e4:08:2d:e6:a2:f7:02:97:24:9d:72:
aa:6b:ed:37:3c:51:57:48:ac:e2:ba:22:93:92:bf:
52:d8:04:77:eb:8e:20:88:a8:d2:17:03:64:54:ea:
70:6d:34:01:c4:5f:c2:a7:76:bd:c5:ef:7f:e7:3e:
da:bb:ba:50:2d:c6:d4:fe:fe:49:57:86:7d:2d:cf:
31:df:f4:1d:b2:14:96:b1:4a:8a:5e:12:78:2a:d4:
97:b0:15:da:30:1c:49:d6:17:38:d9:e0:e0:44:c4:
66:67:ff:a3:33:8c:eb:e4:b3:71:50:30:e8:23:7a:
a3:d8:e8:ab:2c:d6:8f:7b:00:fa:0b:29:dd:56:8a:
a1:01:2b:d8:ab:7e:7d:11:be:d0:52:30:b6:b1:0f:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:E0:6E:46:A3:3F:86:E0:CF:EE:F6:B6:7C:EC:01:B2:F3:E9:9A
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/t9jgbkajP4bgz-72tnzsAbLz6Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
Signature Algorithm: sha256WithRSAEncryption
90:36:4e:b5:d3:23:67:4a:ec:56:5b:cd:1d:6c:0a:3e:25:8c:
79:97:52:78:72:e0:1f:64:10:49:44:67:3d:25:e0:4e:f5:9b:
86:61:ff:33:d7:ff:6f:69:ee:43:8c:05:5c:d9:90:37:4e:33:
3e:0a:60:a0:36:f9:fb:bb:ec:88:4f:dc:4f:ca:2f:9e:cd:75:
d6:df:15:44:9b:4c:30:71:f5:df:28:68:6f:68:f1:b7:62:e7:
f1:bf:cf:d8:90:51:fb:b7:07:2a:ba:58:48:9c:99:d0:1c:65:
f1:c5:1c:95:66:ce:b6:27:59:dd:94:05:e1:3f:f4:b8:28:41:
b4:fa:b4:62:75:07:9b:99:75:5a:34:8d:4a:cb:22:fd:40:0a:
2e:e4:3a:63:10:43:d6:6f:60:0e:52:60:ce:21:40:ea:df:3d:
1a:c7:b0:43:07:2f:63:2e:82:03:cc:ff:82:a7:62:e0:35:a9:
e8:12:83:31:55:8d:65:82:e8:de:c9:85:de:0e:98:f4:9e:13:
7e:8f:88:00:3e:e8:9d:71:72:1a:88:1d:f0:fb:aa:83:02:7a:
8d:4c:2f:45:b2:42:3d:ab:53:5c:26:80:a4:ae:7a:fa:8d:80:
fc:82:bb:1a:65:fb:c3:15:69:59:bf:b0:91:d3:14:ed:5e:2f:
d7:32:1d:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwynsjVT+x89RXhEUOTTYxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5
Y2JlNzMwHhcNMjYwMjA2MTEwMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2Q4ZTA2ZTQ2YTMzZjg2ZTBjZmVlZjZiNjdjZWMwMWIyZjNlOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gO1nhq+XpiyvHFRhblIBOiSMK9e
/t/oorzBl8AHRxHBKNzv2dECF1weerR3jHCUHq4RwkzGiFPODC2RzOPRj56c9X2w
feJucNfpEiQTxSbPC45tl1pmb7rqjlBnFLPZxxu9VALVn44Jnin85Agt5qL3Apck
nXKqa+03PFFXSKziuiKTkr9S2AR3644giKjSFwNkVOpwbTQBxF/Cp3a9xe9/5z7a
u7pQLcbU/v5JV4Z9Lc8x3/QdshSWsUqKXhJ4KtSXsBXaMBxJ1hc42eDgRMRmZ/+j
M4zr5LNxUDDoI3qj2OirLNaPewD6CyndVoqhASvYq359Eb7QUjC2sQ93cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLfY4G5Goz+G4M/u9rZ87AGy8+maMB8GA1UdIwQY
MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt
ZTYwNGI2MWJlMGVhLzEvdDlqZ2JrYWpQNGJnei03MnRuenNBYkx6NlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh
LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEURGgMA0G
CSqGSIb3DQEBCwUAA4IBAQCQNk610yNnSuxWW80dbAo+JYx5l1J4cuAfZBBJRGc9
JeBO9ZuGYf8z1/9vae5DjAVc2ZA3TjM+CmCgNvn7u+yIT9xPyi+ezXXW3xVEm0ww
cfXfKGhvaPG3Yufxv8/YkFH7twcqulhInJnQHGXxxRyVZs62J1ndlAXhP/S4KEG0
+rRidQebmXVaNI1KyyL9QAou5DpjEEPWb2AOUmDOIUDq3z0ax7BDBy9jLoIDzP+C
p2LgNanoEoMxVY1lgujeyYXeDpj0nhN+j4gAPuidcXIaiB3w+6qDAnqNTC9FskI9
q1NcJoCkrnr6jYD8grsaZfvDFWlZv7CR0xTtXi/XMh1J
-----END CERTIFICATE-----
Generated at Tue Feb 17 02:40:36 2026 by rpki-client