Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/qC3m5FVKvdlgEIAYw2_PDVkKVnI.roa
File: qC3m5FVKvdlgEIAYw2_PDVkKVnI.roa (raw, json)
Hash identifier: FRZ4Ml9fVv6mY+l5y0agd1YNGaJAoAxGyN+W9AgJYAA=
Subject key identifier: A8:2D:E6:E4:55:4A:BD:D9:60:10:80:18:C3:6F:CF:0D:59:0A:56:72
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019C66C32D00B9CF15EFCC6CFB01667B39D5
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/qC3m5FVKvdlgEIAYw2_PDVkKVnI.roa
Signing time: Mon 16 Feb 2026 14:03:12 +0000
ROA not before: Mon 16 Feb 2026 14:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 81.85.72.0/24 maxlen: 24
81.85.74.0/24 maxlen: 24
81.85.75.0/24 maxlen: 24
185.5.75.0/24 maxlen: 24
185.9.24.0/24 maxlen: 24
185.9.25.0/24 maxlen: 24
185.9.26.0/24 maxlen: 24
185.28.172.0/24 maxlen: 24
185.28.173.0/24 maxlen: 24
185.28.174.0/24 maxlen: 24
213.155.28.0/24 maxlen: 24
217.177.44.0/24 maxlen: 24
217.177.45.0/24 maxlen: 24
217.177.46.0/24 maxlen: 24
217.177.47.0/24 maxlen: 24
217.179.48.0/24 maxlen: 24
2a11:2cc0:2::/47 maxlen: 47
2a11:2cc0:4::/47 maxlen: 47
2a11:2cc0:6::/47 maxlen: 47
2a11:2cc0:8::/47 maxlen: 47
2a11:2cc0:10::/47 maxlen: 47
2a11:2cc0:20::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:c3:2d:00:b9:cf:15:ef:cc:6c:fb:01:66:7b:39:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Feb 16 14:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a82de6e4554abdd960108018c36fcf0d590a5672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:06:ab:96:50:db:f8:00:77:b0:6c:59:0e:
24:c4:5a:a6:2c:15:98:c1:57:3b:de:ac:8b:0b:16:
52:c2:77:fc:0d:a9:3c:59:2e:df:0d:22:0a:44:dc:
bf:8c:ad:e3:54:f3:54:ea:25:26:2d:c1:71:c7:c5:
ec:a0:7f:57:6f:3a:19:d8:90:bc:04:d6:99:26:85:
16:7b:56:b1:93:15:1b:08:46:59:a1:58:3d:06:4d:
ec:af:a1:30:ce:3c:7d:b1:98:48:f5:49:e9:cb:f0:
66:59:60:f4:c8:c8:71:97:cd:61:66:62:81:df:b2:
4a:93:f1:09:71:eb:f3:de:91:87:cf:18:03:4c:3b:
86:84:92:a4:09:08:52:3f:90:42:21:47:11:79:55:
39:ab:68:4e:d2:ad:fb:99:77:38:53:80:2d:a9:ee:
98:c6:84:64:af:91:98:7c:5f:ac:71:d2:fa:54:85:
d6:7f:a8:49:91:49:19:cb:98:0c:cc:19:2e:21:d5:
21:ed:0c:57:a2:92:1b:d3:42:5e:2d:cc:94:0c:78:
b8:49:66:b2:cd:ad:ed:c6:9e:e1:cd:2c:3d:f8:6b:
1d:f7:51:d1:13:1f:ff:f5:29:d6:d3:f9:5c:ca:b9:
c0:e6:18:b3:3f:27:77:d3:30:c3:59:4f:27:b1:a1:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:E6:E4:55:4A:BD:D9:60:10:80:18:C3:6F:CF:0D:59:0A:56:72
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/qC3m5FVKvdlgEIAYw2_PDVkKVnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.72.0/24
81.85.74.0/23
185.5.75.0/24
185.9.24.0-185.9.26.255
185.28.172.0-185.28.174.255
213.155.28.0/24
217.177.44.0/22
217.179.48.0/24
IPv6:
2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff
2a11:2cc0:10::/47
2a11:2cc0:20::/47
Signature Algorithm: sha256WithRSAEncryption
10:65:a3:e0:b4:43:5d:fd:92:59:93:b3:c0:ea:66:2b:f8:38:
b9:94:ba:55:5a:ee:e8:d0:dd:c7:7d:c1:ee:03:b3:d1:84:41:
e7:fc:26:d3:8e:1d:bb:77:f6:42:58:2c:a6:6f:9d:6b:ff:d5:
3a:2b:ca:64:b4:30:16:b7:b8:ad:1f:80:5b:98:00:0e:50:a9:
7c:fc:1e:8e:07:9f:63:75:17:2c:54:51:8d:e4:1a:0f:35:3b:
68:35:48:64:2c:dc:8d:6a:20:6b:32:2a:2c:47:85:94:5a:13:
03:2d:60:2a:8c:d7:d0:94:96:20:73:04:0b:88:92:35:ad:c0:
05:7f:8f:b3:82:8c:64:fa:52:e4:67:1a:a5:40:2f:a9:11:54:
33:8c:cb:d5:9e:93:66:5a:a3:71:a3:4a:c9:6e:07:92:6d:6d:
ec:be:3d:4c:e1:36:85:f5:3e:e3:c0:63:15:e7:63:4d:44:a9:
b9:85:97:cd:8b:37:41:7a:82:a1:79:08:95:80:05:30:ca:76:
9f:00:5d:f5:97:93:cf:c6:36:ff:5d:8f:27:e7:b2:66:b0:c9:
b2:b5:f0:c0:56:8d:85:2a:11:60:2d:8f:46:d8:61:78:bd:3c:
ac:d8:6f:76:d2:5b:61:47:b6:ac:3a:2f:99:f6:e3:a0:54:f5:
a5:d4:fd:5c
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZxmwy0Auc8V78xs+wFmeznVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm
NDI2MTEwHhcNMjYwMjE2MTQwMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODJkZTZlNDU1NGFiZGQ5NjAxMDgwMThjMzZmY2YwZDU5MGE1NjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsYGq5ZQ2/gAd7BsWQ4kxFqmLBWY
wVc73qyLCxZSwnf8Dak8WS7fDSIKRNy/jK3jVPNU6iUmLcFxx8XsoH9XbzoZ2JC8
BNaZJoUWe1axkxUbCEZZoVg9Bk3sr6Ewzjx9sZhI9Unpy/BmWWD0yMhxl81hZmKB
37JKk/EJcevz3pGHzxgDTDuGhJKkCQhSP5BCIUcReVU5q2hO0q37mXc4U4Atqe6Y
xoRkr5GYfF+scdL6VIXWf6hJkUkZy5gMzBkuIdUh7QxXopIb00JeLcyUDHi4SWay
za3txp7hzSw9+Gsd91HREx//9SnW0/lcyrnA5hizPyd30zDDWU8nsaGSRQIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFKgt5uRVSr3ZYBCAGMNvzw1ZClZyMB8GA1UdIwQY
MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct
MjQyNDY2ODJiZjAwLzEvcUMzbTVGVkt2ZGxnRUlBWXcyX1BEVmtLVm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw
LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwRgQCAAEwQAMEAFFVSAME
AVFVSgMEALkFSzAMAwQDuQkYAwQAuQkaMAwDBAK5HKwDBAC5HK4DBADVmxwDBALZ
sSwDBADZszAwLAQCAAIwJjASAwcBKhEswAACAwcBKhEswAAIAwcBKhEswAAQAwcB
KhEswAAgMA0GCSqGSIb3DQEBCwUAA4IBAQAQZaPgtENd/ZJZk7PA6mYr+Di5lLpV
Wu7o0N3HfcHuA7PRhEHn/CbTjh27d/ZCWCymb51r/9U6K8pktDAWt7itH4BbmAAO
UKl8/B6OB59jdRcsVFGN5BoPNTtoNUhkLNyNaiBrMiosR4WUWhMDLWAqjNfQlJYg
cwQLiJI1rcAFf4+zgoxk+lLkZxqlQC+pEVQzjMvVnpNmWqNxo0rJbgeSbW3svj1M
4TaF9T7jwGMV52NNRKm5hZfNizdBeoKheQiVgAUwynafAF31l5PPxjb/XY8n57Jm
sMmytfDAVo2FKhFgLY9G2GF4vTys2G920lthR7asOi+Z9uOgVPWl1P1c
-----END CERTIFICATE-----
Generated at Tue Feb 17 14:02:41 2026 by rpki-client