Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/50-0mnPvSMOf_DZyORWIrFZAwoQ.roa
File: 50-0mnPvSMOf_DZyORWIrFZAwoQ.roa (raw, json)
Hash identifier: S82KBQm1q9p9h9HYYMe6W3qDJxMTCRcG5t6Can7Hy1s=
Subject key identifier: E7:4F:B4:9A:73:EF:48:C3:9F:FC:36:72:39:15:88:AC:56:40:C2:84
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019C4DEDC0CFBDE2DD6EC8ECB535C6D5BC6A
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/50-0mnPvSMOf_DZyORWIrFZAwoQ.roa
Signing time: Wed 11 Feb 2026 18:19:12 +0000
ROA not before: Wed 11 Feb 2026 18:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 89.185.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:ed:c0:cf:bd:e2:dd:6e:c8:ec:b5:35:c6:d5:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Feb 11 18:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74fb49a73ef48c39ffc3672391588ac5640c284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:da:8c:28:05:22:a8:2f:52:10:f6:cb:2a:
b7:05:33:7e:05:28:47:47:54:31:2f:93:b5:28:ce:
2d:25:35:f0:c2:fa:ac:ab:a3:8e:05:8e:75:d2:0d:
85:5c:15:ac:27:36:45:ff:bb:37:48:46:a5:f2:24:
8b:06:32:36:fc:ba:ad:ea:41:73:22:f5:8a:1c:f6:
2a:99:74:92:73:11:cc:0e:56:69:85:e1:88:56:86:
ca:ce:fb:a2:4f:b6:42:99:b4:22:a6:a8:76:8e:ec:
b0:3a:06:6a:e4:e6:92:4d:c9:b1:7b:b1:67:f7:4a:
4e:23:aa:87:77:32:54:d4:2c:c1:c5:d1:a7:bd:3e:
f5:22:77:f8:40:f9:fd:10:7b:27:19:c1:c1:fb:c3:
91:f8:48:6f:52:f1:ea:2d:71:e3:c8:09:54:0b:4d:
28:8c:8a:8c:ab:b4:16:b7:82:4f:8c:2e:b7:27:89:
2f:d1:6b:6f:2f:46:3f:c5:e7:24:bc:9a:be:da:92:
b2:86:85:56:23:39:80:3b:0a:d1:b0:8f:18:42:e4:
52:75:35:fb:f4:fc:73:0b:4f:26:67:3c:7f:66:dc:
72:94:36:f5:81:9d:26:e3:2e:f0:65:85:8f:18:bf:
3a:c2:a6:6f:d2:9a:8c:37:1a:3d:ea:5a:6e:27:aa:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:B4:9A:73:EF:48:C3:9F:FC:36:72:39:15:88:AC:56:40:C2:84
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/50-0mnPvSMOf_DZyORWIrFZAwoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.83.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0d:60:df:86:33:fe:9f:f8:d6:e5:51:82:05:94:23:01:c7:
24:f3:ed:f0:4b:c4:e1:3d:9e:5e:1d:a6:dd:e9:84:1b:fa:01:
0f:f6:66:99:a4:24:88:16:66:ed:36:09:d1:c3:a7:e3:f8:b3:
0a:04:16:d4:3e:fe:fe:64:da:34:a4:76:8e:94:0d:03:00:4d:
46:f2:2d:db:f0:12:89:ec:5f:82:e5:38:c2:ae:80:99:46:cf:
51:56:00:68:36:ea:bc:bf:e3:f4:82:d6:99:0a:c0:e4:27:0e:
c3:f7:59:bc:d6:b7:0f:81:16:0a:60:09:99:b2:ea:0e:c7:8d:
2e:23:f6:bf:ff:69:d5:0d:57:47:5a:46:53:72:36:7f:3f:f1:
34:7f:f5:52:41:7c:fb:d4:06:44:82:d5:45:31:c0:d1:5f:f4:
5c:0d:a2:f6:c7:2b:9b:31:36:9c:e9:f9:31:fd:c9:f2:9b:e7:
4a:f1:5c:57:05:ef:a6:83:26:fa:4d:78:59:08:66:86:e8:93:
4f:1f:89:00:ca:95:4b:11:18:dc:e7:33:47:0a:a6:f0:94:f1:
18:ed:5e:f4:f9:d7:bf:1e:22:7e:68:30:59:de:4a:cb:55:a1:
35:c6:7e:30:01:e7:0d:de:5c:0c:b1:0c:03:2a:ca:14:2d:a9:
e0:19:1f:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxN7cDPveLdbsjstTXG1bxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjYwMjExMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzRmYjQ5YTczZWY0OGMzOWZmYzM2NzIzOTE1ODhhYzU2NDBjMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaDajCgFIqgvUhD2yyq3BTN+BShH
R1QxL5O1KM4tJTXwwvqsq6OOBY510g2FXBWsJzZF/7s3SEal8iSLBjI2/Lqt6kFz
IvWKHPYqmXSScxHMDlZpheGIVobKzvuiT7ZCmbQipqh2juywOgZq5OaSTcmxe7Fn
90pOI6qHdzJU1CzBxdGnvT71Inf4QPn9EHsnGcHB+8OR+EhvUvHqLXHjyAlUC00o
jIqMq7QWt4JPjC63J4kv0WtvL0Y/xeckvJq+2pKyhoVWIzmAOwrRsI8YQuRSdTX7
9PxzC08mZzx/ZtxylDb1gZ0m4y7wZYWPGL86wqZv0pqMNxo96lpuJ6rmpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdPtJpz70jDn/w2cjkViKxWQMKEMB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvNTAtMG1uUHZTTU9mX0RaeU9SV0lyRlpBd29RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWblTMA0G
CSqGSIb3DQEBCwUAA4IBAQABDWDfhjP+n/jW5VGCBZQjAcck8+3wS8ThPZ5eHabd
6YQb+gEP9maZpCSIFmbtNgnRw6fj+LMKBBbUPv7+ZNo0pHaOlA0DAE1G8i3b8BKJ
7F+C5TjCroCZRs9RVgBoNuq8v+P0gtaZCsDkJw7D91m81rcPgRYKYAmZsuoOx40u
I/a//2nVDVdHWkZTcjZ/P/E0f/VSQXz71AZEgtVFMcDRX/RcDaL2xyubMTac6fkx
/cnym+dK8VxXBe+mgyb6TXhZCGaG6JNPH4kAypVLERjc5zNHCqbwlPEY7V70+de/
HiJ+aDBZ3krLVaE1xn4wAecN3lwMsQwDKsoULangGR8W
-----END CERTIFICATE-----
Generated at Tue Feb 17 14:02:21 2026 by rpki-client