Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P6jW95e_PTua4GnFhUnoAS1JdZs.roa
File: P6jW95e_PTua4GnFhUnoAS1JdZs.roa (raw, json)
Hash identifier: jHDVt/ZXzlmco44Mxhu9E0Z73y0mp23uBJP3xm1KOB0=
Subject key identifier: 3F:A8:D6:F7:97:BF:3D:3B:9A:E0:69:C5:85:49:E8:01:2D:49:75:9B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C31FDABA2431A8090BF531148B7F2E47C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P6jW95e_PTua4GnFhUnoAS1JdZs.roa
Signing time: Fri 06 Feb 2026 08:07:13 +0000
ROA not before: Fri 06 Feb 2026 08:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 77.93.142.0/24 maxlen: 24
82.153.55.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:fd:ab:a2:43:1a:80:90:bf:53:11:48:b7:f2:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 6 08:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa8d6f797bf3d3b9ae069c58549e8012d49759b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:63:67:e9:08:cf:19:c6:88:14:a8:69:9b:
95:be:c1:a0:17:1a:33:13:74:4b:90:64:51:a5:c1:
f6:03:3b:01:18:d6:8b:ef:6a:f7:8f:9e:e8:2c:ce:
6d:0b:2c:df:16:5e:ca:7a:af:9e:63:74:a8:53:42:
a9:12:f5:1f:2b:6e:f0:47:08:5a:4b:c9:26:e7:1e:
ca:06:95:fa:f4:ef:7f:97:a6:21:08:f8:45:2a:e9:
b0:62:cb:90:53:63:d3:27:f0:0c:d9:6b:92:37:51:
fb:cc:f8:29:55:a7:90:63:22:5f:ee:22:fb:04:f9:
52:9d:c2:1f:dc:b6:2f:d9:f6:0f:c9:52:6f:79:c8:
b4:23:2d:f2:e6:51:18:4c:9a:e7:57:15:8c:63:4d:
f7:9b:2a:47:10:0d:8e:41:37:6c:4c:02:64:5b:64:
d2:c9:ed:07:a2:27:6f:c4:6c:3e:7b:54:41:17:6e:
31:21:64:76:bf:c3:b3:82:31:f0:3f:3d:9c:2b:bb:
d2:49:83:da:85:22:08:e2:a9:f6:04:2e:37:3c:fb:
7c:d4:8f:58:a8:13:90:cc:f1:aa:d7:cc:5d:62:0c:
be:fe:31:33:a8:f2:b6:4d:8f:aa:52:b2:97:c5:cc:
ca:cf:e5:57:ec:75:d2:c4:4c:b3:a2:41:b2:69:c2:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:D6:F7:97:BF:3D:3B:9A:E0:69:C5:85:49:E8:01:2D:49:75:9B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P6jW95e_PTua4GnFhUnoAS1JdZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.142.0/24
82.153.55.0/24
89.213.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f2:8c:31:89:f6:f2:91:39:87:1b:75:19:c7:45:bb:67:4b:
ca:c9:b5:0d:1f:18:e6:98:62:8e:84:78:c7:1f:b5:c1:6c:e2:
a2:0c:20:28:7e:b8:34:5c:98:e3:a7:d4:04:2b:01:58:2a:8e:
01:96:e0:d9:95:6f:80:4e:44:99:30:91:ef:de:6a:9f:8d:c3:
fe:78:20:2c:a6:fa:05:a0:4e:d4:90:4f:4e:c1:f2:6c:3b:2d:
15:eb:88:e9:5b:ee:b1:ac:95:95:58:22:c4:6e:fb:f0:70:26:
56:94:2f:9a:57:4d:b4:b8:68:77:f1:b8:9c:b6:a1:63:18:7a:
7c:c4:9c:17:07:06:15:11:47:d4:41:94:14:22:29:a0:5b:e4:
ef:ae:a7:f0:b4:2d:c9:c8:ba:03:50:f6:86:f0:94:de:8b:21:
10:21:0f:29:fd:af:db:1d:d0:7b:4e:6d:ad:04:c6:b6:3a:db:
ad:41:37:a0:7f:c1:1f:85:ba:aa:04:a8:2e:30:0f:2f:f2:94:
0d:66:4e:63:2d:0b:cd:81:2c:a8:1f:10:78:4c:bc:e4:47:a6:
a1:ad:4c:47:39:63:53:8e:ce:a3:7c:04:47:41:2b:26:b5:e7:
7a:ff:9f:75:3c:df:54:87:89:8c:51:fb:a4:59:bc:3c:27:ba:
42:e6:1a:56
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZwx/auiQxqAkL9TEUi38uR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMjA2MDgwNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmE4ZDZmNzk3YmYzZDNiOWFlMDY5YzU4NTQ5ZTgwMTJkNDk3NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVJjZ+kIzxnGiBSoaZuVvsGgFxoz
E3RLkGRRpcH2AzsBGNaL72r3j57oLM5tCyzfFl7Keq+eY3SoU0KpEvUfK27wRwha
S8km5x7KBpX69O9/l6YhCPhFKumwYsuQU2PTJ/AM2WuSN1H7zPgpVaeQYyJf7iL7
BPlSncIf3LYv2fYPyVJveci0Iy3y5lEYTJrnVxWMY033mypHEA2OQTdsTAJkW2TS
ye0HoidvxGw+e1RBF24xIWR2v8OzgjHwPz2cK7vSSYPahSII4qn2BC43PPt81I9Y
qBOQzPGq18xdYgy+/jEzqPK2TY+qUrKXxczKz+VX7HXSxEyzokGyacIDJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD+o1veXvz07muBpxYVJ6AEtSXWbMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUDZqVzk1ZV9QVHVhNEduRmhVbm9BUzFKZFpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATV2OAwQA
Upk3AwQAWdWSMA0GCSqGSIb3DQEBCwUAA4IBAQCO8owxifbykTmHG3UZx0W7Z0vK
ybUNHxjmmGKOhHjHH7XBbOKiDCAofrg0XJjjp9QEKwFYKo4BluDZlW+ATkSZMJHv
3mqfjcP+eCAspvoFoE7UkE9OwfJsOy0V64jpW+6xrJWVWCLEbvvwcCZWlC+aV020
uGh38bictqFjGHp8xJwXBwYVEUfUQZQUIimgW+TvrqfwtC3JyLoDUPaG8JTeiyEQ
IQ8p/a/bHdB7Tm2tBMa2OtutQTegf8EfhbqqBKguMA8v8pQNZk5jLQvNgSyoHxB4
TLzkR6ahrUxHOWNTjs6jfARHQSsmted6/591PN9Uh4mMUfukWbw8J7pC5hpW
-----END CERTIFICATE-----
Generated at Mon Feb 23 00:04:45 2026 by rpki-client