Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eEdEwszcsrvDwQ-zZCoz3BF5N08.roa
File: eEdEwszcsrvDwQ-zZCoz3BF5N08.roa (raw, json)
Hash identifier: UYrlnVbyPLrdPvG1y+icYfI9zlTSEPDMil8obn+kT5w=
Subject key identifier: 78:47:44:C2:CC:DC:B2:BB:C3:C1:0F:B3:64:2A:33:DC:11:79:37:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C5B41068FCDC7C75456A6C7CF2D334B0B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eEdEwszcsrvDwQ-zZCoz3BF5N08.roa
Signing time: Sat 14 Feb 2026 08:25:14 +0000
ROA not before: Sat 14 Feb 2026 08:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 217.60.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5b:41:06:8f:cd:c7:c7:54:56:a6:c7:cf:2d:33:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 14 08:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=784744c2ccdcb2bbc3c10fb3642a33dc1179374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:77:0e:bc:35:60:b8:91:dd:32:e5:ad:87:
76:7e:86:40:04:5b:8b:ed:70:15:c8:a6:48:ab:6a:
42:80:cd:96:79:ef:ef:02:44:7d:d1:07:09:25:17:
e1:1b:d8:6b:1a:b0:a2:db:93:29:8a:fe:f6:da:b6:
d9:33:a0:10:db:5d:b4:18:47:38:86:d1:56:84:08:
40:b9:8b:d6:8b:b1:42:7e:dc:a7:38:7e:57:60:fd:
74:dd:9f:fe:38:34:dd:cb:70:4f:90:4f:e3:37:54:
65:52:e2:db:bc:f2:87:ff:38:ce:21:11:89:5d:d6:
c3:91:a4:f5:f1:b8:11:b9:aa:59:9e:e2:78:af:35:
b5:d8:ab:b1:a0:ff:ec:29:fc:be:b7:90:49:ff:6a:
32:af:38:31:0a:0e:88:7c:2f:78:f3:75:66:6d:5b:
cb:1d:51:dd:75:a1:c7:3b:f1:d0:51:10:b0:0e:5c:
7c:16:96:c8:1b:f5:b8:43:6f:d4:71:8a:89:ac:14:
93:ec:5f:5b:08:3c:78:41:91:57:75:4b:ad:d6:95:
f3:56:f8:0b:98:2a:21:d4:6c:8e:ae:65:95:95:7e:
c6:6d:20:08:55:4e:ca:bf:84:33:32:3b:14:f1:38:
08:c5:a3:02:0c:d6:c7:73:b6:31:0f:56:19:dc:17:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:44:C2:CC:DC:B2:BB:C3:C1:0F:B3:64:2A:33:DC:11:79:37:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eEdEwszcsrvDwQ-zZCoz3BF5N08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:04:68:be:60:89:2b:41:50:35:e2:e8:53:dd:06:85:ed:9e:
88:f9:cb:a1:6c:99:a4:1e:82:7b:f6:d4:80:4d:52:55:26:91:
a8:8f:33:bf:16:6a:56:17:45:72:5d:8d:19:65:ae:98:f2:8b:
fa:58:d5:0f:32:c1:97:8e:d7:9c:93:32:1b:ee:a5:6f:53:89:
9f:7a:f1:31:75:03:9e:5f:1f:78:55:f3:5c:c4:4b:ab:1b:c9:
59:99:fa:e8:0e:66:fb:f3:76:cd:d5:1e:69:7c:be:18:41:81:
21:3f:fc:da:67:61:3b:7f:7b:47:06:ac:31:7a:ee:fa:e1:ae:
be:ce:fb:b7:a2:84:b9:ff:8b:8e:e7:0c:22:e3:5a:e8:28:26:
12:d2:a4:73:da:71:a6:7a:8b:48:79:64:96:ec:7c:9e:d1:ce:
f5:64:07:a9:0a:d2:d1:8d:08:bd:27:be:6c:54:23:41:23:14:
22:e5:59:f3:c5:d4:ea:27:45:cb:e9:c6:86:85:c0:b6:bc:c8:
26:c5:a7:48:a5:53:d2:8d:a9:f9:a1:c4:fc:18:6a:43:88:ec:
da:76:44:fb:1e:de:5d:ea:5c:a0:bc:7a:18:89:29:76:9f:83:
cc:2b:7f:02:16:c4:80:46:a5:23:ce:38:9c:a5:64:11:bd:4d:
2f:cc:8e:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxbQQaPzcfHVFamx88tM0sLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjE0MDgyNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODQ3NDRjMmNjZGNiMmJiYzNjMTBmYjM2NDJhMzNkYzExNzkzNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslx3Drw1YLiR3TLlrYd2foZABFuL
7XAVyKZIq2pCgM2Wee/vAkR90QcJJRfhG9hrGrCi25Mpiv722rbZM6AQ2120GEc4
htFWhAhAuYvWi7FCftynOH5XYP103Z/+ODTdy3BPkE/jN1RlUuLbvPKH/zjOIRGJ
XdbDkaT18bgRuapZnuJ4rzW12KuxoP/sKfy+t5BJ/2oyrzgxCg6IfC9483VmbVvL
HVHddaHHO/HQURCwDlx8FpbIG/W4Q2/UcYqJrBST7F9bCDx4QZFXdUut1pXzVvgL
mCoh1GyOrmWVlX7GbSAIVU7Kv4QzMjsU8TgIxaMCDNbHc7YxD1YZ3Bd/vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhHRMLM3LK7w8EPs2QqM9wReTdPMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZUVkRXdzemNzcnZEd1EtelpDb3ozQkY1TjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TztMA0G
CSqGSIb3DQEBCwUAA4IBAQCjBGi+YIkrQVA14uhT3QaF7Z6I+cuhbJmkHoJ79tSA
TVJVJpGojzO/FmpWF0VyXY0ZZa6Y8ov6WNUPMsGXjteckzIb7qVvU4mfevExdQOe
Xx94VfNcxEurG8lZmfroDmb783bN1R5pfL4YQYEhP/zaZ2E7f3tHBqwxeu764a6+
zvu3ooS5/4uO5wwi41roKCYS0qRz2nGmeotIeWSW7Hye0c71ZAepCtLRjQi9J75s
VCNBIxQi5VnzxdTqJ0XL6caGhcC2vMgmxadIpVPSjan5ocT8GGpDiOzadkT7Ht5d
6lygvHoYiSl2n4PMK38CFsSARqUjzjicpWQRvU0vzI5B
-----END CERTIFICATE-----
Generated at Mon Feb 23 08:47:42 2026 by rpki-client