Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/d3URZqZU61DXU8Pxx8p7KdaQhTk.roa
File: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (raw, json)
Hash identifier: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=
Subject key identifier: 77:75:11:66:A6:54:EB:50:D7:53:C3:F1:C7:CA:7B:29:D6:90:85:39
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C6AE75B2DF31048FFB96F70D99F649EDF
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/d3URZqZU61DXU8Pxx8p7KdaQhTk.roa
Signing time: Tue 17 Feb 2026 09:21:12 +0000
ROA not before: Tue 17 Feb 2026 09:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 195.254.165.0/24 maxlen: 24
2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:e7:5b:2d:f3:10:48:ff:b9:6f:70:d9:9f:64:9e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 17 09:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77751166a654eb50d753c3f1c7ca7b29d6908539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:8f:85:f0:43:67:71:5f:97:0b:45:4f:a2:
9c:59:0c:7a:ae:42:55:ff:b3:5a:8d:8f:41:7f:dc:
10:35:4a:64:31:96:73:e8:d9:3e:bd:63:e6:24:76:
b5:da:9b:00:f8:96:8d:75:2b:56:4d:e7:fb:c9:a3:
7e:19:59:c9:71:07:f6:4d:f6:80:fd:7f:22:c9:e2:
de:b2:02:7c:5a:19:b5:d4:92:95:f7:4b:f0:ea:ae:
25:11:04:44:7d:d4:be:59:65:17:12:20:10:cc:1e:
0f:51:dd:da:bf:15:a9:45:e3:3b:69:3c:8c:0e:c6:
30:69:f2:ef:30:e6:4b:39:34:62:40:a9:8a:98:88:
4a:87:95:5a:dd:7a:38:b5:22:fc:41:64:2b:e9:38:
77:80:5b:03:96:0a:bf:74:31:04:97:f9:01:4d:c0:
6d:e3:76:ba:52:2e:f3:f9:08:6d:c4:3a:da:31:95:
ab:46:51:9d:33:42:be:6b:ae:66:64:86:b1:f9:01:
1b:66:78:61:8d:9e:c4:fd:2a:ae:bb:1f:0f:2e:37:
e1:42:d5:1f:19:84:bb:84:a2:2e:78:53:9a:18:f6:
2a:1f:8b:64:4b:c1:20:6d:40:a9:8c:25:bd:83:ca:
b8:f1:91:fe:a3:ba:3d:ff:96:4a:b1:5f:34:0f:ab:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:11:66:A6:54:EB:50:D7:53:C3:F1:C7:CA:7B:29:D6:90:85:39
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/d3URZqZU61DXU8Pxx8p7KdaQhTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
0a:f8:20:f9:17:27:2f:0e:8d:af:98:9e:41:28:17:55:fb:d3:
d7:19:5a:f6:ab:90:1c:c1:b6:5a:a5:ba:ef:66:68:ce:8f:06:
d9:65:92:7b:db:7d:bc:84:51:03:6c:5d:45:3a:e2:43:b4:ed:
ae:84:68:be:19:2a:11:55:06:f6:57:4a:b5:e9:9a:03:cf:99:
1f:32:ed:56:28:b8:d4:ad:86:af:5b:f6:31:6d:ef:b3:d3:49:
bc:06:c7:ce:64:7f:7d:7c:b4:a5:2c:ec:ac:8c:56:3d:7e:62:
c4:e8:8c:db:00:33:d5:fe:49:16:01:ee:90:4c:5c:e7:54:c9:
28:09:b4:fb:a5:59:bb:2c:e5:14:8e:a1:c4:1f:f6:62:7b:d5:
0b:11:de:8b:f7:3b:db:b1:19:56:4b:7f:ee:3f:11:4e:95:eb:
25:ba:b2:c5:66:b5:a5:94:69:ad:b6:50:66:40:e6:44:02:80:
44:d3:5b:45:db:e7:a2:7f:cf:81:3d:79:44:8c:87:7f:51:22:
15:ae:44:2a:d5:cd:c4:e3:63:56:0b:72:14:0b:4c:46:0a:ad:
59:3e:23:52:81:b4:d6:b5:b2:8f:6f:4e:92:cd:da:1b:d8:09:
07:a9:52:72:5e:a0:06:08:7d:d1:90:b4:26:49:2a:30:78:bd:
30:3a:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 18:43:59 2026 by rpki-client