Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa
File: 6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa (raw, json)
Hash identifier: Xu4eAyvLY8fcHbJYD67JsRTonGok8ykhcr1+fNZCbpw=
Subject key identifier: E8:1B:55:71:0F:D9:62:D7:6E:BF:55:CB:69:FC:8E:2C:42:73:63:49
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019C4861C514E162BE7F6C5A4FA0A2AA09D2
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa
Signing time: Tue 10 Feb 2026 16:28:12 +0000
ROA not before: Tue 10 Feb 2026 16:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 65.87.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:61:c5:14:e1:62:be:7f:6c:5a:4f:a0:a2:aa:09:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Feb 10 16:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e81b55710fd962d76ebf55cb69fc8e2c42736349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:7c:23:ff:5c:d0:b2:09:e8:3c:f4:c0:b0:
ab:00:3a:8e:ae:77:e0:cf:99:d2:2c:d1:25:57:3a:
ba:ee:3e:c3:2a:4e:94:a4:e3:e9:c0:de:3d:f5:2f:
96:8d:f6:a1:31:4c:cf:1a:42:26:59:ed:41:9d:56:
60:49:a1:66:9e:b4:32:0a:c8:c5:2c:19:11:05:f2:
97:90:bc:8d:d0:84:ac:82:8b:bc:7d:71:e6:e8:d8:
55:02:dc:64:99:3b:91:3a:a8:51:05:52:b2:7f:a0:
cb:8a:0e:42:35:4b:e6:0f:ac:66:4d:66:56:87:fe:
23:c5:13:e2:14:4a:73:14:69:b6:3a:b9:9d:ba:af:
5f:9f:70:bc:fd:8e:cf:a5:b0:07:c5:c6:87:a2:21:
2b:25:9e:b9:f8:2d:9e:db:d3:29:50:e4:f4:87:6e:
61:0a:8d:f0:17:20:f1:64:12:c0:29:6b:2b:0a:ad:
4e:27:c2:97:3d:c6:93:34:93:bf:34:48:62:89:fc:
e4:8c:a2:85:01:f7:aa:a1:bf:34:56:55:7c:56:6f:
ec:fd:75:f2:ae:29:0b:7a:2b:78:84:9f:67:65:bb:
06:91:04:9d:ad:5c:af:e7:07:37:eb:99:9c:99:82:
5c:72:d9:c7:af:2f:d9:79:3e:f8:09:a0:ae:4b:c5:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1B:55:71:0F:D9:62:D7:6E:BF:55:CB:69:FC:8E:2C:42:73:63:49
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.128.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:37:57:c8:d6:0a:b2:f3:19:a7:b4:c3:f9:ca:d5:90:ac:cd:
b2:f3:c2:39:e7:ed:75:b8:37:50:2b:a4:d1:0b:e4:57:66:a0:
b4:36:42:7b:f5:f0:d9:b2:86:5c:22:16:1a:64:eb:04:71:a6:
dd:cd:f8:0e:e8:d5:b7:51:4e:4f:32:7b:74:cc:d7:b8:f9:36:
00:e2:90:84:42:64:2f:ab:2b:a8:ff:48:6b:8e:65:a0:42:38:
5b:fa:40:1e:84:75:f9:76:45:42:d9:c5:5a:7f:b6:1d:e4:b7:
db:4b:28:b6:7e:2c:a8:16:4a:e6:6d:2c:e3:b3:9b:e2:e7:74:
fa:63:86:52:fb:f8:c1:c8:0e:c1:af:9c:b1:ae:a2:23:f2:34:
0d:ee:87:d5:5e:d6:8b:29:2f:e1:36:80:38:9e:4c:28:f8:83:
a7:c2:01:bd:ec:7a:3d:96:0e:56:12:22:99:c7:b5:ee:89:8f:
de:1a:62:b6:7b:1b:87:8a:2f:bb:0b:d5:84:08:05:18:57:cf:
f7:e1:0d:f0:9f:41:35:f4:0d:7d:4b:36:51:48:f0:b6:d7:11:
e3:6e:ca:13:bb:92:be:ce:00:9f:e8:d8:e4:f6:3a:1f:18:f3:
34:4e:8b:c5:4f:ca:07:5f:8a:8c:39:7e:63:f9:7f:5d:d2:84:
2f:7b:fd:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxIYcUU4WK+f2xaT6CiqgnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MmY4MTVlN2MxNjA3ZDBiZDNiMzk5ZmJhOWEzNTNmZWM1
NDQzMTUwHhcNMjYwMjEwMTYyODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFiNTU3MTBmZDk2MmQ3NmViZjU1Y2I2OWZjOGUyYzQyNzM2MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AN8I/9c0LIJ6Dz0wLCrADqOrnfg
z5nSLNElVzq67j7DKk6UpOPpwN499S+WjfahMUzPGkImWe1BnVZgSaFmnrQyCsjF
LBkRBfKXkLyN0ISsgou8fXHm6NhVAtxkmTuROqhRBVKyf6DLig5CNUvmD6xmTWZW
h/4jxRPiFEpzFGm2Ormduq9fn3C8/Y7PpbAHxcaHoiErJZ65+C2e29MpUOT0h25h
Co3wFyDxZBLAKWsrCq1OJ8KXPcaTNJO/NEhiifzkjKKFAfeqob80VlV8Vm/s/XXy
rikLeit4hJ9nZbsGkQSdrVyv5wc365mcmYJcctnHry/ZeT74CaCuS8VLfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgbVXEP2WLXbr9Vy2n8jixCc2NJMB8GA1UdIwQY
MBaAFAcvgV58FgfQvTs5n7qaNT/sVEMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMDc4MzQtNWZhMy00YjQwLWJiOWUt
NzVlM2NiYjA0YjYwLzEvNkJ0VmNRX1pZdGR1djFYTGFmeU9MRUp6WTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hMDc4MzQtNWZhMy00YjQwLWJiOWUtNzVlM2NiYjA0YjYw
LzEvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQVeAMA0G
CSqGSIb3DQEBCwUAA4IBAQCqN1fI1gqy8xmntMP5ytWQrM2y88I55+11uDdQK6TR
C+RXZqC0NkJ79fDZsoZcIhYaZOsEcabdzfgO6NW3UU5PMnt0zNe4+TYA4pCEQmQv
qyuo/0hrjmWgQjhb+kAehHX5dkVC2cVaf7Yd5LfbSyi2fiyoFkrmbSzjs5vi53T6
Y4ZS+/jByA7Br5yxrqIj8jQN7ofVXtaLKS/hNoA4nkwo+IOnwgG97Ho9lg5WEiKZ
x7XuiY/eGmK2exuHii+7C9WECAUYV8/34Q3wn0E19A19SzZRSPC21xHjbsoTu5K+
zgCf6Njk9jofGPM0TovFT8oHX4qMOX5j+X9d0oQve/3u
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:50:47 2026 by rpki-client