Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6bttEqeUNDTXp-zjtZvd2ILikSA.roa
File: 6bttEqeUNDTXp-zjtZvd2ILikSA.roa (raw, json)
Hash identifier: XhHuOgHjcdjIE54V9lIRi5oAtLbwLUIOBUi+XQ1N5rU=
Subject key identifier: E9:BB:6D:12:A7:94:34:34:D7:A7:EC:E3:B5:9B:DD:D8:82:E2:91:20
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C42416F9A5AED1FC658117AF0C38D03B8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6bttEqeUNDTXp-zjtZvd2ILikSA.roa
Signing time: Mon 09 Feb 2026 11:55:10 +0000
ROA not before: Mon 09 Feb 2026 11:55:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 178.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:41:6f:9a:5a:ed:1f:c6:58:11:7a:f0:c3:8d:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 9 11:55:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9bb6d12a7943434d7a7ece3b59bddd882e29120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:20:ef:d0:23:e6:32:e5:d8:e3:1c:2c:54:
e7:21:01:a2:46:a5:7a:ea:31:fe:29:05:c7:2e:56:
63:4d:62:79:35:c6:3d:c0:ca:eb:19:9c:ad:26:06:
2a:06:75:0e:d0:c5:cd:cc:db:36:93:96:a9:a9:a6:
8e:65:e0:e2:5d:85:6f:05:07:75:ae:6f:0a:bf:90:
29:82:fc:68:b8:61:fc:fd:0c:ff:20:83:7a:d3:9f:
f8:97:2f:ee:bc:85:21:0d:83:30:8c:2e:d5:16:c7:
1e:b2:42:81:36:64:92:a0:a4:f8:cd:00:07:db:1d:
fa:61:ee:99:a7:d8:f8:58:b9:8a:ca:99:a7:70:10:
8d:e8:04:fb:e9:fb:33:1a:37:6c:f0:93:82:32:9f:
ca:d5:50:56:21:70:60:62:b4:93:8c:1c:37:3e:f5:
70:93:96:62:81:35:5c:6c:06:b2:9c:a9:4d:53:22:
2e:2e:48:41:3c:29:63:78:b8:93:84:cf:81:ea:95:
bc:b5:3b:65:6f:34:ae:26:de:20:82:ea:94:2e:e0:
7a:c6:25:d5:ed:48:96:04:97:4a:4c:10:9b:e7:71:
d5:39:dd:20:0e:99:a9:7e:4a:c7:5f:48:d1:81:c0:
b8:ba:6e:31:5a:39:a9:55:dd:6b:b9:89:6a:e5:df:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:6D:12:A7:94:34:34:D7:A7:EC:E3:B5:9B:DD:D8:82:E2:91:20
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6bttEqeUNDTXp-zjtZvd2ILikSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e2:72:0d:bf:0c:fb:71:01:37:f6:19:b3:5d:22:c3:d3:dc:
34:35:19:41:46:22:cd:fe:24:b1:5f:9f:74:28:82:e0:62:4c:
5f:e2:85:35:45:c5:56:35:2f:c6:63:09:7c:f3:fa:87:15:71:
0c:88:32:bd:6c:ad:19:86:dd:bf:0b:aa:e6:a1:dc:53:7a:a8:
b3:eb:a9:47:a4:ab:9d:e3:d4:eb:4f:67:18:d3:a0:68:e1:7b:
2b:da:4f:95:a1:f6:9b:ca:0f:6f:bf:ab:f4:bf:3d:e2:ab:1b:
f6:70:1b:f1:e4:ca:fa:80:e2:f6:c5:e8:7f:49:4a:ff:8c:6d:
3f:f6:ba:ce:c5:31:c4:3e:ba:18:4d:bc:b9:cc:5f:6c:3d:f1:
49:ef:c0:e7:49:5a:79:78:2a:16:e2:fc:3d:d5:1f:dc:67:8e:
dc:a3:7e:6b:60:55:c3:ca:34:99:d3:b3:48:40:28:eb:1b:45:
4c:2a:bb:2e:80:67:b1:c3:9f:f2:cc:43:c7:83:7b:c9:65:d2:
8d:4b:d9:cc:f2:4c:a4:18:e8:af:f4:e8:16:1f:c3:2d:1b:dc:
ce:90:6d:94:cf:03:30:fd:e4:09:d0:d9:93:aa:24:76:ac:a6:
33:3e:d6:08:ca:fd:f8:f9:ad:9f:f2:38:22:8f:5c:89:3f:98:
68:85:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 23:30:40 2026 by rpki-client