Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1bu5sE5DVO9HQnjr29YDlFw86-Y.roa
File: 1bu5sE5DVO9HQnjr29YDlFw86-Y.roa (raw, json)
Hash identifier: PNONyCdoTjNcnDiITgXd6ORXzJ1eB1EYsZ8xIa/7wtU=
Subject key identifier: D5:BB:B9:B0:4E:43:54:EF:47:42:78:EB:DB:D6:03:94:5C:3C:EB:E6
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C6B3442A4BA6CED5F19FAC3C5ADE2EE6B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1bu5sE5DVO9HQnjr29YDlFw86-Y.roa
Signing time: Tue 17 Feb 2026 10:45:12 +0000
ROA not before: Tue 17 Feb 2026 10:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:34:42:a4:ba:6c:ed:5f:19:fa:c3:c5:ad:e2:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 17 10:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5bbb9b04e4354ef474278ebdbd603945c3cebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:da:29:54:ca:ef:92:a4:d2:29:78:d9:12:
06:f1:9c:33:d9:9f:72:96:78:2b:c0:93:6e:12:b0:
91:d0:c5:fa:f9:6b:84:3d:65:dd:7d:cf:af:a2:bb:
8b:6c:22:f0:90:3b:23:20:84:ce:4e:e5:a2:6b:4a:
f0:5a:0a:a0:18:f4:12:15:0c:ad:f3:d7:8c:27:78:
2d:3a:64:69:1e:c8:1f:f4:c8:b3:7d:a0:bd:f0:1a:
f5:d3:8b:e6:53:63:3e:7c:65:a2:1e:45:00:ec:81:
d9:1e:16:95:eb:14:51:8f:97:89:c9:e7:38:4a:4f:
b0:8e:38:8a:72:94:7e:aa:06:79:a4:bb:18:48:eb:
50:09:70:12:2c:1c:81:66:68:ee:3b:7b:72:5f:f1:
fe:b5:cc:e5:7b:13:7d:2a:e7:b3:ab:13:75:48:d4:
61:fd:2b:34:47:07:5a:ba:18:4f:a8:b2:63:be:50:
57:b4:76:08:87:0a:ea:e3:46:51:d6:d6:07:9f:83:
6e:39:8d:26:58:50:3d:81:05:0a:3b:16:a9:a4:e9:
b6:2d:2c:b7:15:7d:e1:2f:70:c5:a0:b4:94:8e:a2:
30:0e:1e:0e:3c:86:c4:ed:33:7d:48:e4:5a:c0:4d:
ee:04:0c:65:4c:b8:b1:71:6a:c7:f5:6f:30:f3:ba:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BB:B9:B0:4E:43:54:EF:47:42:78:EB:DB:D6:03:94:5C:3C:EB:E6
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1bu5sE5DVO9HQnjr29YDlFw86-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:13::/48
Signature Algorithm: sha256WithRSAEncryption
5c:96:ac:6c:e6:f9:a0:4c:ae:77:f0:83:5d:c0:30:15:59:1e:
fd:fb:e3:c3:82:5f:06:3e:40:e1:ef:1f:e0:6d:5a:5e:b6:ed:
e8:fa:1b:14:4e:bc:9d:30:43:c0:2f:76:35:8a:cb:53:8d:e1:
0c:8f:46:8a:f7:23:3c:50:6d:91:4a:12:ca:72:b1:09:5b:1d:
f3:eb:da:33:3f:34:aa:b0:cd:a5:d5:2b:c4:9d:98:23:f4:2a:
7f:68:ad:d9:32:05:2c:82:e1:04:51:72:31:b7:b4:95:ff:76:
4e:8a:a8:ab:c2:38:5b:6d:12:35:b7:c5:02:14:68:da:e8:fc:
1b:28:b6:a3:78:76:75:5a:e0:13:ea:57:da:4b:f6:ac:4d:ca:
86:c6:9d:40:ce:c0:b9:3d:48:6d:c2:fb:86:45:23:f0:84:6b:
31:3d:c3:22:51:49:7c:93:61:a6:7a:27:7f:8b:ae:a8:fc:1b:
35:02:a0:93:35:d1:4d:94:d2:3d:01:c7:ff:9a:72:95:61:72:
68:23:00:63:b5:24:f0:0e:04:af:a6:40:39:43:da:ac:b2:35:
47:b8:6e:ed:f8:3d:ef:8d:c1:bd:65:bd:0b:e9:91:ec:6b:c7:
26:77:95:cd:98:51:a0:d4:47:3e:41:aa:76:bb:79:8d:2a:60:
6d:96:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 18:44:10 2026 by rpki-client