Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6UJQDebczIQ-8G_kEZWeZrAhfOM.roa
File: 6UJQDebczIQ-8G_kEZWeZrAhfOM.roa (raw, json)
Hash identifier: RywvylfbaF0iWvHAC33rRkcgzrqYc9x6GHDUBkr9jiM=
Subject key identifier: E9:42:50:0D:E6:DC:CC:84:3E:F0:6F:E4:11:95:9E:66:B0:21:7C:E3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C75A9454BBF81CB039CADBD0C44B87C84
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6UJQDebczIQ-8G_kEZWeZrAhfOM.roa
Signing time: Thu 19 Feb 2026 11:29:13 +0000
ROA not before: Thu 19 Feb 2026 11:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.176.213.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
213.130.134.0/24 maxlen: 24
213.130.135.0/24 maxlen: 24
213.130.157.0/24 maxlen: 24
213.130.158.0/24 maxlen: 24
213.130.159.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:a9:45:4b:bf:81:cb:03:9c:ad:bd:0c:44:b8:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 19 11:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e942500de6dccc843ef06fe411959e66b0217ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:5a:8f:5a:34:f5:89:c6:50:66:43:1d:52:
68:75:75:35:80:b6:c5:94:b0:7f:4a:51:e0:a0:a1:
b7:3a:01:7d:85:ae:6b:f7:f4:27:c1:f7:b6:e0:8f:
f6:fb:08:24:38:02:49:b0:0e:69:f2:c9:9c:9a:4d:
24:4c:d0:d3:9b:02:87:24:db:cc:e4:79:1d:5b:0a:
15:e8:95:ad:8c:2f:2b:bc:fa:40:b0:f8:16:9d:22:
8c:5b:87:40:c2:6d:b6:35:db:fa:ce:b4:88:7c:74:
8f:97:23:0d:dd:32:34:15:f8:b1:f0:12:75:57:3f:
7f:ee:3d:e7:70:36:b4:f3:5e:4c:af:24:a9:ca:7a:
d0:a7:2d:2b:ec:47:ea:67:c5:85:10:80:d2:79:9c:
ab:94:4c:bf:a8:82:88:fd:75:3f:95:e7:40:fa:d4:
0a:16:9f:f3:cd:cd:ef:b1:ee:a6:f5:de:e7:34:36:
90:c9:1c:f3:39:1e:dd:89:32:58:ab:76:58:5a:a5:
b8:4d:8f:b2:1d:6d:95:72:4f:59:48:5c:54:aa:8f:
f5:91:97:f1:92:58:ac:81:dc:53:9d:81:fa:f1:5e:
a0:60:2d:ef:47:f3:23:1d:d0:f3:d9:31:43:7a:0d:
76:59:d4:d9:ef:ce:51:81:dd:fc:c5:55:65:06:39:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:50:0D:E6:DC:CC:84:3E:F0:6F:E4:11:95:9E:66:B0:21:7C:E3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6UJQDebczIQ-8G_kEZWeZrAhfOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.213.0/24
185.49.124.0/24
213.130.134.0/23
213.130.157.0-213.130.159.255
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2a:c2:ce:95:97:c3:e4:e3:78:47:bd:df:b8:cf:81:99:ba:
ab:b8:34:2c:10:99:d2:ee:fc:95:8f:e3:dc:d7:be:a7:62:a8:
13:e7:c3:55:c3:c5:df:42:c3:82:31:6d:04:48:db:0c:f0:1a:
82:2b:ca:fc:92:b7:3d:f9:17:ee:36:3f:43:ee:d9:dc:1d:da:
1b:f0:31:ce:fb:69:66:2b:50:d2:fa:5a:85:59:1a:04:06:c0:
d4:c4:d1:5f:48:00:73:b6:98:a1:c0:ee:d9:eb:08:f9:0a:8b:
1a:76:11:41:e6:26:7e:70:d2:52:20:54:ab:d0:d4:cd:a7:45:
6a:d5:d0:bc:84:d0:92:ed:f2:28:de:d7:41:65:f6:81:d8:68:
54:a6:03:ef:88:e7:66:89:85:ee:e7:84:7c:05:d8:9a:a1:54:
85:47:d2:68:82:20:4d:29:63:e7:80:de:32:b4:14:25:65:ff:
06:d1:fe:8e:7a:2f:35:cd:26:dc:a7:07:56:b5:ff:c1:1b:0f:
03:cf:77:97:6b:51:46:89:d4:9c:3c:63:81:4a:f5:01:e8:01:
05:97:c0:49:44:f4:cb:e7:74:ed:a2:1c:41:f4:16:fe:aa:a6:
d6:25:0e:0c:89:3e:d7:aa:a8:f2:52:d3:89:15:1e:8c:47:a8:
fc:c7:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:05:26 2026 by rpki-client