Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/n9mxzIt_205s9vyeaLn8CBdcCG4.roa
File: n9mxzIt_205s9vyeaLn8CBdcCG4.roa (raw, json)
Hash identifier: rvZ5m2zISXN1TJw2DOfdTsy2gRGtTRFcUGePQPD44jY=
Subject key identifier: 9F:D9:B1:CC:8B:7F:DB:4E:6C:F6:FC:9E:68:B9:FC:08:17:5C:08:6E
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019C6904DFF197BAC236A537ADDEA278538D
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/n9mxzIt_205s9vyeaLn8CBdcCG4.roa
Signing time: Tue 17 Feb 2026 00:34:13 +0000
ROA not before: Tue 17 Feb 2026 00:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202767
IP address blocks: 185.135.116.0/22 maxlen: 22
185.135.117.0/24 maxlen: 24
185.135.118.0/24 maxlen: 24
185.135.119.0/24 maxlen: 24
185.155.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:04:df:f1:97:ba:c2:36:a5:37:ad:de:a2:78:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Feb 17 00:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd9b1cc8b7fdb4e6cf6fc9e68b9fc08175c086e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:43:39:d8:ef:8a:b4:94:9a:33:48:9b:85:
fc:51:d7:d1:f3:a0:e2:dd:02:d9:68:aa:52:00:a5:
5b:88:3f:d7:90:8f:c6:29:55:c5:cd:a1:b8:36:64:
65:c2:58:fd:84:7d:38:c6:0a:ec:e5:a1:62:f4:f9:
47:61:34:fe:0e:9a:0d:ac:3b:32:f8:fa:87:57:cd:
39:92:a8:48:e4:04:b9:ec:97:ab:19:10:03:18:4c:
76:37:63:73:e3:0e:bc:1c:39:f6:20:36:f9:35:d1:
de:70:08:9a:b8:1a:3e:6d:81:28:9e:03:bf:6b:d6:
3d:c4:b3:11:c9:32:b4:b5:59:80:72:c4:bc:49:97:
4c:5d:b2:7e:ec:fb:a2:15:4d:e2:f5:d4:17:b6:e5:
ec:0a:c8:d6:7b:7b:8b:39:2c:2e:25:8b:be:24:a0:
88:44:be:12:8a:08:96:7a:30:bf:13:5f:64:c8:3e:
d2:1e:ba:1a:e7:e5:2f:87:7b:49:25:45:97:07:d4:
06:12:cc:95:5f:83:a7:80:0b:50:91:19:44:61:a6:
83:c5:bc:0e:c4:1e:58:f0:42:ad:b4:c3:78:1d:b7:
86:88:50:c8:a2:1a:7e:1e:3c:b3:56:56:b5:6a:fd:
dd:81:8b:a2:81:94:fa:90:7e:e5:06:d1:4d:36:05:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:B1:CC:8B:7F:DB:4E:6C:F6:FC:9E:68:B9:FC:08:17:5C:08:6E
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/n9mxzIt_205s9vyeaLn8CBdcCG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
185.155.60.0/22
Signature Algorithm: sha256WithRSAEncryption
20:4f:9e:9e:e1:37:63:07:f9:b3:c9:a1:6e:c1:d1:30:a5:49:
59:dd:46:5b:f2:34:f8:7c:54:80:f4:97:89:d4:5d:c0:4b:52:
38:e6:7e:1e:11:83:3b:b2:f4:76:55:f0:a9:e5:b1:96:9a:04:
19:1d:5d:14:ad:ec:97:52:9a:f0:df:b7:cb:46:3c:69:ac:3d:
0d:3a:7a:6f:6c:b2:a1:24:e2:01:60:14:d0:c0:b2:05:1d:32:
c5:b4:2c:92:7d:ab:45:27:da:58:da:20:87:2f:7e:bc:5a:66:
8f:b6:0e:ac:52:be:26:f2:3c:99:f0:87:6f:8c:d6:d8:6b:84:
1c:fc:0b:22:83:90:4c:8c:44:f2:6e:03:16:29:22:5e:83:db:
29:39:20:fa:b7:f2:18:02:7b:9b:00:10:f3:8b:f0:b1:52:b1:
75:9f:92:a6:d6:30:6d:d9:15:e3:dc:20:4f:e3:16:6e:9c:06:
cd:c1:74:f2:3c:64:e4:31:d6:bb:59:a8:60:d2:a4:d2:2a:58:
04:d3:b9:8c:7f:6d:3b:6a:b9:65:bb:83:cf:f5:d8:dc:35:49:
94:0e:72:c3:35:4c:f2:b3:57:fc:c1:f9:91:1a:26:ff:b5:4f:
a2:85:e5:25:e3:7a:9a:66:5a:eb:60:c0:8c:6c:3d:a1:ea:cd:
fb:33:6e:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxpBN/xl7rCNqU3rd6ieFONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmI5YmEyMTllMzYyYjJhODI3NzIwYTA1YzQzYzdkMWMx
ZmE4ZWYwHhcNMjYwMjE3MDAzNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmQ5YjFjYzhiN2ZkYjRlNmNmNmZjOWU2OGI5ZmMwODE3NWMwODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLxDOdjvirSUmjNIm4X8UdfR86Di
3QLZaKpSAKVbiD/XkI/GKVXFzaG4NmRlwlj9hH04xgrs5aFi9PlHYTT+DpoNrDsy
+PqHV805kqhI5AS57JerGRADGEx2N2Nz4w68HDn2IDb5NdHecAiauBo+bYEongO/
a9Y9xLMRyTK0tVmAcsS8SZdMXbJ+7PuiFU3i9dQXtuXsCsjWe3uLOSwuJYu+JKCI
RL4SigiWejC/E19kyD7SHroa5+Uvh3tJJUWXB9QGEsyVX4OngAtQkRlEYaaDxbwO
xB5Y8EKttMN4HbeGiFDIohp+HjyzVla1av3dgYuigZT6kH7lBtFNNgVDLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ/ZscyLf9tObPb8nmi5/AgXXAhuMB8GA1UdIwQY
MBaAFGBrm6IZ42KyqCdyCgXEPH0cH6jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTIt
YjRmYjU3MDhkYjE1LzEvbjlteHpJdF8yMDVzOXZ5ZWFMbjhDQmRjQ0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTItYjRmYjU3MDhkYjE1
LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYd0AwQC
uZs8MA0GCSqGSIb3DQEBCwUAA4IBAQAgT56e4TdjB/mzyaFuwdEwpUlZ3UZb8jT4
fFSA9JeJ1F3AS1I45n4eEYM7svR2VfCp5bGWmgQZHV0UreyXUprw37fLRjxprD0N
OnpvbLKhJOIBYBTQwLIFHTLFtCySfatFJ9pY2iCHL368WmaPtg6sUr4m8jyZ8Idv
jNbYa4Qc/Asig5BMjETybgMWKSJeg9spOSD6t/IYAnubABDzi/CxUrF1n5Km1jBt
2RXj3CBP4xZunAbNwXTyPGTkMda7Wahg0qTSKlgE07mMf207arllu4PP9djcNUmU
DnLDNUzys1f8wfmRGib/tU+iheUl43qaZlrrYMCMbD2h6s37M25t
-----END CERTIFICATE-----
Generated at Sat Feb 21 07:24:35 2026 by rpki-client