Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/nm5emazZKaYdFn8NsWwKL-2TAeM.roa
File: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (raw, json)
Hash identifier: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=
Subject key identifier: 9E:6E:5E:99:AC:D9:29:A6:1D:16:7F:0D:B1:6C:0A:2F:ED:93:01:E3
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C70467A89ABF3AE679A12D3DD480CFCA1
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/nm5emazZKaYdFn8NsWwKL-2TAeM.roa
Signing time: Wed 18 Feb 2026 10:23:12 +0000
ROA not before: Wed 18 Feb 2026 10:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34918
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 10:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:46:7a:89:ab:f3:ae:67:9a:12:d3:dd:48:0c:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 18 10:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e6e5e99acd929a61d167f0db16c0a2fed9301e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:d0:1e:78:5b:be:5a:af:f6:b6:56:84:37:
25:8b:bc:1b:b4:47:6a:81:25:e7:49:cb:9a:f7:05:
2e:b7:0d:33:f2:d3:e1:8d:8b:ec:67:4d:4b:31:38:
b7:25:14:31:fc:33:c3:8c:ff:df:c8:1c:a6:58:50:
8e:04:b8:24:5a:63:99:e9:4f:2b:09:f8:d2:04:1a:
62:6b:37:e5:65:72:09:18:b8:18:91:0d:76:9e:e9:
f9:3e:1c:e2:24:c8:2d:3d:f5:77:48:c7:27:f9:d5:
d6:a0:7d:d8:01:30:94:2c:c7:0a:fe:1b:1c:29:22:
0b:64:fe:d9:64:93:8e:40:58:a1:8a:ce:b8:5c:11:
6f:99:8c:d6:20:66:18:d9:b5:fb:71:34:6d:9a:8b:
cb:f7:b2:f4:4d:3d:45:7a:fd:61:bc:91:ab:1e:30:
cf:6d:17:1a:ac:a8:50:2d:2d:e1:aa:81:e8:57:41:
0b:d3:22:fc:52:dc:82:dd:d5:94:39:d2:6f:69:36:
2a:5a:46:f3:f0:da:13:72:65:47:30:63:c1:6a:fc:
c1:83:56:8d:e6:a1:f8:2a:41:22:0d:31:c7:0e:36:
1c:ae:7d:80:39:11:81:24:91:05:43:fa:fe:2d:cb:
ab:16:79:5a:29:82:b3:82:6f:89:04:50:28:1d:5f:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6E:5E:99:AC:D9:29:A6:1D:16:7F:0D:B1:6C:0A:2F:ED:93:01:E3
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/nm5emazZKaYdFn8NsWwKL-2TAeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
50:78:4b:03:c1:0d:33:a8:3c:13:91:57:13:75:2c:55:38:ed:
c7:67:03:7d:aa:e0:aa:49:ed:0a:63:e4:51:b6:11:c1:7e:87:
f9:44:d5:6d:fb:d1:f6:6d:32:c8:8a:41:49:df:24:32:58:f3:
ec:55:ad:09:9a:22:8f:68:d2:ac:66:28:32:65:42:db:16:70:
14:e8:72:16:e7:4d:c6:39:3d:55:2f:28:b8:55:e7:28:ef:2c:
44:0e:16:cc:fb:ef:5d:7f:93:4a:ba:01:c1:c9:1a:82:39:63:
44:f2:73:b3:da:44:2f:b1:b3:f6:5c:95:47:09:a2:ef:68:49:
25:27:24:0e:47:2b:89:41:98:6d:6e:a8:ef:49:00:38:d4:48:
50:54:1f:ef:d5:03:6f:39:f4:86:21:b7:f2:d7:3b:8d:ca:a3:
3a:03:54:9e:74:1a:75:a5:94:95:2c:db:b0:b1:e8:ba:cd:37:
d8:02:2f:bc:47:c3:c7:8f:2c:e2:e4:24:24:65:1d:8a:21:06:
59:32:cb:4c:69:a8:92:c6:d6:02:62:3a:4e:8d:97:5f:04:b4:
6f:c1:85:83:ff:14:1f:68:42:09:e2:bd:e8:4a:c6:33:a9:6a:
43:50:a8:a8:c5:b6:54:67:ac:89:eb:de:ce:af:26:d5:9a:6a:
f3:0d:00:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxwRnqJq/OuZ5oS091IDPyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMjE4MTAyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZlNWU5OWFjZDkyOWE2MWQxNjdmMGRiMTZjMGEyZmVkOTMwMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsPQHnhbvlqv9rZWhDcli7wbtEdq
gSXnScua9wUutw0z8tPhjYvsZ01LMTi3JRQx/DPDjP/fyBymWFCOBLgkWmOZ6U8r
CfjSBBpiazflZXIJGLgYkQ12nun5PhziJMgtPfV3SMcn+dXWoH3YATCULMcK/hsc
KSILZP7ZZJOOQFihis64XBFvmYzWIGYY2bX7cTRtmovL97L0TT1Fev1hvJGrHjDP
bRcarKhQLS3hqoHoV0EL0yL8UtyC3dWUOdJvaTYqWkbz8NoTcmVHMGPBavzBg1aN
5qH4KkEiDTHHDjYcrn2AORGBJJEFQ/r+LcurFnlaKYKzgm+JBFAoHV/TUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5uXpms2SmmHRZ/DbFsCi/tkwHjMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvbm01ZW1helpLYVlkRm44TnNXd0tMLTJUQWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu7MA0G
CSqGSIb3DQEBCwUAA4IBAQBQeEsDwQ0zqDwTkVcTdSxVOO3HZwN9quCqSe0KY+RR
thHBfof5RNVt+9H2bTLIikFJ3yQyWPPsVa0JmiKPaNKsZigyZULbFnAU6HIW503G
OT1VLyi4Veco7yxEDhbM++9df5NKugHByRqCOWNE8nOz2kQvsbP2XJVHCaLvaEkl
JyQORyuJQZhtbqjvSQA41EhQVB/v1QNvOfSGIbfy1zuNyqM6A1SedBp1pZSVLNuw
sei6zTfYAi+8R8PHjyzi5CQkZR2KIQZZMstMaaiSxtYCYjpOjZdfBLRvwYWD/xQf
aEIJ4r3oSsYzqWpDUKioxbZUZ6yJ697OrybVmmrzDQBt
-----END CERTIFICATE-----
Generated at Wed Feb 18 19:21:34 2026 by rpki-client