Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa
File: 1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa (raw, json)
Hash identifier: jv0midgpTJeUMCUfbjDUlxTZCO6xs8bC/AB49kze9Rk=
Subject key identifier: D6:B6:7D:96:FA:B8:CF:91:94:AC:AD:6E:6C:1B:8F:1E:A6:9F:DE:4D
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019C4639B4711C54ADCDA0C8582D550EDA7E
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa
Signing time: Tue 10 Feb 2026 06:25:12 +0000
ROA not before: Tue 10 Feb 2026 06:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 95.129.184.0/21 maxlen: 21
185.52.108.0/22 maxlen: 22
192.122.217.0/24 maxlen: 24
192.122.218.0/23 maxlen: 23
192.122.220.0/22 maxlen: 22
192.122.224.0/21 maxlen: 21
192.122.232.0/23 maxlen: 23
192.122.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:39:b4:71:1c:54:ad:cd:a0:c8:58:2d:55:0e:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Feb 10 06:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6b67d96fab8cf9194acad6e6c1b8f1ea69fde4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:52:43:09:f7:87:87:9c:ed:a7:52:f8:ef:
2b:f5:02:2f:1c:a1:82:80:f0:d0:1e:47:95:fb:6d:
3b:29:77:a3:da:17:75:1d:dc:25:21:6d:dd:c5:ca:
f4:35:ab:47:fb:e0:57:3e:09:bf:f0:97:c7:2d:dd:
13:13:b3:9b:94:2f:90:00:ad:5c:fb:8c:c0:e6:b2:
ed:6d:f0:00:12:dc:0b:b7:b3:45:e0:dc:a7:e7:ad:
7c:04:89:6f:e5:64:ec:02:0f:dc:a1:40:83:2c:d5:
48:70:26:ac:0f:5c:e7:ef:3c:a6:68:d3:d5:3a:66:
10:21:cb:2b:2a:78:cd:c3:13:7c:33:a0:ce:eb:f6:
40:30:a2:91:ac:16:ba:ca:66:19:23:aa:58:27:ee:
37:3e:f9:76:24:bd:40:23:98:63:fb:d4:b2:ea:7d:
22:b0:09:77:7b:93:f6:e1:1f:e9:b4:e5:ad:0c:3e:
0c:57:c1:8f:d1:ed:42:19:f3:34:bb:56:84:7a:ee:
dd:d6:aa:79:40:35:ec:a4:46:a9:60:e3:f8:db:e9:
9a:7c:ad:6c:38:3b:4d:0b:4d:55:54:1e:a1:9e:78:
e4:1c:b1:dd:a5:20:b9:2d:bb:11:5b:95:8d:0a:39:
5f:6b:05:a7:bc:05:01:27:fb:a6:d7:e8:8b:6c:a0:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B6:7D:96:FA:B8:CF:91:94:AC:AD:6E:6C:1B:8F:1E:A6:9F:DE:4D
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.184.0/21
185.52.108.0/22
192.122.217.0-192.122.234.255
Signature Algorithm: sha256WithRSAEncryption
89:ea:42:1a:e9:f8:b9:6c:35:e9:5a:3d:36:a4:4a:24:0d:88:
9a:26:b9:e2:f9:98:c4:2c:8f:cd:03:69:17:bf:9e:0c:38:22:
35:ba:68:3b:a4:9b:d3:e3:d9:8d:b6:7b:e7:ad:ae:cf:9b:21:
40:7f:f3:8b:4e:03:36:76:41:24:06:87:78:64:f9:35:c2:1a:
e3:79:6c:45:28:40:c4:03:41:54:23:4b:e2:1e:01:a5:a3:f1:
4a:36:76:90:46:ee:7c:bd:ad:72:93:fc:d4:9c:fc:ac:28:6d:
d0:51:24:ed:b3:f8:1d:6e:d7:cc:8d:f2:94:87:81:8b:8e:0d:
43:3b:a9:19:f6:41:54:27:b7:73:5f:30:4e:cb:cd:8b:12:79:
bf:1b:37:43:a5:13:7c:e4:84:69:07:59:ab:fe:6a:04:ef:59:
28:66:e8:ed:fe:3b:4c:71:7d:22:c2:67:68:58:22:9a:f5:5c:
e6:0f:74:48:54:a2:19:77:35:be:b8:7b:7a:61:a1:6d:d8:49:
5a:a6:e4:0d:2c:0f:3a:e0:d1:52:74:87:60:c6:76:d8:88:fc:
2d:8b:2d:7c:11:56:58:e0:91:46:b5:36:f1:d0:56:9c:cf:e5:
84:d6:6c:b3:10:34:42:50:25:49:fc:61:2f:b4:c2:18:8f:c5:
70:db:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:06 2026 by rpki-client