Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/UfARrHXeiUIJqskLrsVKgJwltG0.roa
File: UfARrHXeiUIJqskLrsVKgJwltG0.roa (raw, json)
Hash identifier: ljvtP3m6SP6vh8vDOaYytltYwth+FPzMInizFqCzcgA=
Subject key identifier: 51:F0:11:AC:75:DE:89:42:09:AA:C9:0B:AE:C5:4A:80:9C:25:B4:6D
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C70467B0E18BD57E02A158E68EA9BD46C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/UfARrHXeiUIJqskLrsVKgJwltG0.roa
Signing time: Wed 18 Feb 2026 10:23:13 +0000
ROA not before: Wed 18 Feb 2026 10:23:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 91.217.166.0/24 maxlen: 24
2a05:9080:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 10:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:46:7b:0e:18:bd:57:e0:2a:15:8e:68:ea:9b:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 18 10:23:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51f011ac75de894209aac90baec54a809c25b46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:c5:d4:04:a5:35:da:e7:6c:78:7b:ef:65:
3f:e8:a7:71:92:0d:f8:4e:55:25:60:b9:11:7f:95:
71:d0:f2:be:e1:94:b7:12:03:cf:06:6b:17:b9:53:
90:a1:7a:9b:60:9a:b7:fa:95:b4:e3:cf:4d:c8:59:
3a:35:3f:40:b7:3a:eb:9a:1a:05:03:07:a3:16:71:
3d:59:44:5b:16:d5:ea:f5:20:cb:bb:8b:d4:fc:8f:
f8:c5:64:6c:19:4d:75:0f:82:ed:5c:f6:40:80:50:
ae:61:d9:9e:b2:ef:a7:d0:c2:1c:0f:fd:91:80:c5:
52:25:92:b3:79:db:93:63:ea:a8:a9:a8:c3:78:97:
53:14:c7:eb:25:f7:6b:51:2f:54:a9:26:27:9d:37:
e8:ff:1d:69:49:b0:df:93:8f:6c:94:24:43:0a:64:
c5:ad:74:e6:d5:50:62:f0:72:1f:bd:ff:48:37:91:
36:1a:30:5a:c3:56:12:05:2c:2d:9d:11:2e:ba:50:
d0:fc:46:50:5c:8e:70:1c:f3:a8:b2:34:22:a8:44:
2f:0d:2a:e2:43:38:4c:1c:11:a7:a7:32:66:3d:3e:
e6:3c:1a:ea:00:16:a8:26:df:8b:15:91:80:d7:26:
e1:2c:40:ed:28:c6:e6:70:e5:df:02:01:c0:6d:fa:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:11:AC:75:DE:89:42:09:AA:C9:0B:AE:C5:4A:80:9C:25:B4:6D
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/UfARrHXeiUIJqskLrsVKgJwltG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
IPv6:
2a05:9080:12::/48
Signature Algorithm: sha256WithRSAEncryption
4e:5e:0d:c6:53:8a:47:02:07:47:bc:f0:f6:b0:93:57:78:7e:
33:5b:49:85:a6:4a:89:4a:15:70:c5:5e:36:0f:82:85:b0:0e:
6d:0b:d6:c3:a3:66:1a:37:c3:73:be:12:f2:51:61:d2:b3:dc:
e2:27:0a:23:36:c1:23:0a:9e:2a:b1:b6:49:fd:0f:3d:91:16:
dc:fd:0a:ed:5b:98:ca:c6:e1:cd:66:bb:e4:89:b7:7b:44:87:
89:6f:87:8f:12:de:30:d4:4e:50:6f:95:f7:02:85:de:14:be:
d0:c2:75:c4:cb:75:41:ec:13:ed:f6:36:e2:8b:65:9a:c3:07:
01:29:ea:28:aa:c4:ae:72:e2:82:71:0e:fc:df:1f:37:87:7e:
c0:7f:c0:1f:80:5b:1a:c4:bf:26:b1:b7:97:71:05:1b:bd:17:
44:f6:45:17:92:27:4a:48:c2:a3:d7:78:49:4c:f1:f3:86:67:
15:9c:e7:df:9d:d6:07:57:d2:36:59:ed:1f:7e:6b:14:3c:3f:
f6:56:aa:29:6c:6e:4e:6c:f0:05:f3:8f:da:64:dc:02:9b:62:
62:b5:65:d1:0b:3a:6b:af:11:04:7a:04:e9:4e:14:11:04:6f:
32:90:51:13:c4:91:ae:5e:de:13:24:f2:94:01:b4:e0:80:5c:
ca:78:19:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZxwRnsOGL1X4CoVjmjqm9RsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMjE4MTAyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWYwMTFhYzc1ZGU4OTQyMDlhYWM5MGJhZWM1NGE4MDljMjViNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaPF1ASlNdrnbHh772U/6Kdxkg34
TlUlYLkRf5Vx0PK+4ZS3EgPPBmsXuVOQoXqbYJq3+pW0489NyFk6NT9AtzrrmhoF
AwejFnE9WURbFtXq9SDLu4vU/I/4xWRsGU11D4LtXPZAgFCuYdmesu+n0MIcD/2R
gMVSJZKzeduTY+qoqajDeJdTFMfrJfdrUS9UqSYnnTfo/x1pSbDfk49slCRDCmTF
rXTm1VBi8HIfvf9IN5E2GjBaw1YSBSwtnREuulDQ/EZQXI5wHPOosjQiqEQvDSri
QzhMHBGnpzJmPT7mPBrqABaoJt+LFZGA1ybhLEDtKMbmcOXfAgHAbfp6HwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFHwEax13olCCarJC67FSoCcJbRtMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvVWZBUnJIWGVpVUlKcXNrTHJzVktnSndsdEcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9mmMA8E
AgACMAkDBwAqBZCAABIwDQYJKoZIhvcNAQELBQADggEBAE5eDcZTikcCB0e88Paw
k1d4fjNbSYWmSolKFXDFXjYPgoWwDm0L1sOjZho3w3O+EvJRYdKz3OInCiM2wSMK
niqxtkn9Dz2RFtz9Cu1bmMrG4c1mu+SJt3tEh4lvh48S3jDUTlBvlfcChd4UvtDC
dcTLdUHsE+32NuKLZZrDBwEp6iiqxK5y4oJxDvzfHzeHfsB/wB+AWxrEvyaxt5dx
BRu9F0T2RReSJ0pIwqPXeElM8fOGZxWc59+d1gdX0jZZ7R9+axQ8P/ZWqilsbk5s
8AXzj9pk3AKbYmK1ZdELOmuvEQR6BOlOFBEEbzKQURPEka5e3hMk8pQBtOCAXMp4
GfU=
-----END CERTIFICATE-----
Generated at Wed Feb 18 19:21:24 2026 by rpki-client