Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa
File: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (raw, json)
Hash identifier: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=
Subject key identifier: 14:BD:6C:A9:C4:5E:8C:32:0C:4A:1D:2C:32:12:FF:66:A2:70:E3:03
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019C661F4C2D923286812B57485A2C777EAE
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa
Signing time: Mon 16 Feb 2026 11:04:12 +0000
ROA not before: Mon 16 Feb 2026 11:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215028
IP address blocks: 81.85.48.0/22 maxlen: 22
81.85.48.0/24 maxlen: 24
81.85.49.0/24 maxlen: 24
81.85.50.0/24 maxlen: 24
81.85.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:1f:4c:2d:92:32:86:81:2b:57:48:5a:2c:77:7e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Feb 16 11:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14bd6ca9c45e8c320c4a1d2c3212ff66a270e303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:42:62:e0:07:96:cf:b3:fb:ed:24:a4:ab:
27:b6:bc:5d:3b:c7:12:b4:ab:7b:40:cd:0e:e0:0d:
d5:97:01:90:a1:46:f3:4d:2e:0d:fb:6d:cd:d9:34:
96:24:c2:36:e6:3c:ce:6b:66:30:06:ce:f7:2a:bb:
bf:d8:c4:37:88:a9:1e:1f:27:af:cd:df:86:64:87:
b9:73:91:a5:88:34:6b:26:1d:91:81:f2:e5:6d:db:
18:2c:fe:ce:56:47:29:cd:70:29:56:3f:96:47:d4:
d6:e9:26:5c:95:c1:c0:5d:dd:fb:b8:1c:0f:06:bd:
52:b8:5a:bc:19:c9:51:dd:67:41:3f:23:b4:74:8f:
b3:7f:20:81:f3:5d:76:f1:07:00:43:d1:56:30:23:
c2:6f:8f:18:a7:86:11:30:a7:a4:5d:ee:4a:7c:61:
27:92:40:d2:8f:16:7b:b1:06:60:16:92:55:f8:fa:
2d:a3:eb:10:ca:0f:ea:ec:5e:95:ad:8b:de:77:16:
6e:89:2d:a5:6b:7d:41:5c:1c:ce:8a:2e:eb:d4:86:
5e:d7:6a:06:38:e7:df:84:d8:67:51:9f:df:23:71:
63:48:8e:70:14:46:a3:ed:41:71:c6:86:4d:f3:04:
2b:b6:6e:07:b1:62:e4:e0:55:a7:31:54:7f:12:94:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:6C:A9:C4:5E:8C:32:0C:4A:1D:2C:32:12:FF:66:A2:70:E3:03
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.48.0/22
Signature Algorithm: sha256WithRSAEncryption
f0:41:f2:9e:a8:42:0a:4c:82:53:9a:87:d4:d6:c2:f4:35:1e:
42:1c:a5:fc:2a:be:8b:f7:5e:01:0d:6c:d9:ae:65:6f:b0:63:
f0:11:c1:f2:13:b4:c6:c1:f1:5e:55:a3:05:cd:e1:04:f0:ae:
bf:53:13:69:8a:17:48:88:79:25:86:b1:9f:48:a3:8c:e3:1d:
9f:10:da:d2:0c:68:60:6c:8c:ee:58:2d:2f:f4:1b:9e:9b:53:
4a:90:f3:d4:e0:fa:59:3b:49:7a:e7:39:96:3f:6e:e1:f8:03:
87:1f:da:ec:fc:81:ba:a4:8f:b8:9f:f7:99:e6:f4:f8:0f:da:
19:fe:b8:e7:1d:7d:b1:61:de:ea:38:82:64:57:72:72:b7:cc:
e0:ca:ff:a0:d2:2a:0e:28:2f:8c:cd:21:0d:85:3a:2e:1f:c5:
eb:41:75:5a:e0:f3:aa:8c:7e:e2:42:1c:57:d6:36:75:b0:13:
c3:ea:1c:c7:86:05:ad:b3:0a:49:f8:8f:69:0e:42:c1:70:39:
5f:8e:7d:ad:cf:b8:b5:fa:d8:58:fd:19:43:2e:79:f9:7a:ca:
f9:58:c7:41:ef:34:dc:cc:93:88:9b:f8:13:4b:de:26:08:a4:
b5:53:b5:5d:ae:f5:08:ec:a7:b6:c6:a2:4f:7f:f2:01:ed:64:
dc:8e:3e:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxmH0wtkjKGgStXSFosd36uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDgwNjhlNzM1OTk2YjhhYmU3MWRiODJjZTBkNmJhOTY1
YzI1M2IwHhcNMjYwMjE2MTEwNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGJkNmNhOWM0NWU4YzMyMGM0YTFkMmMzMjEyZmY2NmEyNzBlMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgFCYuAHls+z++0kpKsntrxdO8cS
tKt7QM0O4A3VlwGQoUbzTS4N+23N2TSWJMI25jzOa2YwBs73Kru/2MQ3iKkeHyev
zd+GZIe5c5GliDRrJh2RgfLlbdsYLP7OVkcpzXApVj+WR9TW6SZclcHAXd37uBwP
Br1SuFq8GclR3WdBPyO0dI+zfyCB81128QcAQ9FWMCPCb48Yp4YRMKekXe5KfGEn
kkDSjxZ7sQZgFpJV+Poto+sQyg/q7F6VrYvedxZuiS2la31BXBzOii7r1IZe12oG
OOffhNhnUZ/fI3FjSI5wFEaj7UFxxoZN8wQrtm4HsWLk4FWnMVR/EpSSGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBS9bKnEXowyDEodLDIS/2aicOMDMB8GA1UdIwQY
MBaAFH/YBo5zWZa4q+cduCzg1rqWXCU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlnR2puTlpscmlyNXgyNExPRFd1cFpjSlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82NzVkZjYtZmNlNi00Y2IxLWE3YmYt
MjJiOWFhYTI4NmY2LzEvRkwxc3FjUmVqRElNU2gwc01oTF9acUp3NHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82NzVkZjYtZmNlNi00Y2IxLWE3YmYtMjJiOWFhYTI4NmY2
LzEvZjlnR2puTlpscmlyNXgyNExPRFd1cFpjSlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUVUwMA0G
CSqGSIb3DQEBCwUAA4IBAQDwQfKeqEIKTIJTmofU1sL0NR5CHKX8Kr6L914BDWzZ
rmVvsGPwEcHyE7TGwfFeVaMFzeEE8K6/UxNpihdIiHklhrGfSKOM4x2fENrSDGhg
bIzuWC0v9Buem1NKkPPU4PpZO0l65zmWP27h+AOHH9rs/IG6pI+4n/eZ5vT4D9oZ
/rjnHX2xYd7qOIJkV3Jyt8zgyv+g0ioOKC+MzSENhTouH8XrQXVa4POqjH7iQhxX
1jZ1sBPD6hzHhgWtswpJ+I9pDkLBcDlfjn2tz7i1+thY/RlDLnn5esr5WMdB7zTc
zJOIm/gTS94mCKS1U7VdrvUI7Ke2xqJPf/IB7WTcjj5E
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:09:17 2026 by rpki-client