Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NBVuBNCEOWplLiSkwMOtKmWCc-w.roa
File: NBVuBNCEOWplLiSkwMOtKmWCc-w.roa (raw, json)
Hash identifier: iAeZDfQ66wK/Fhms7SCmQlzFL3hFrqOfHY26iHcdkiI=
Subject key identifier: 34:15:6E:04:D0:84:39:6A:65:2E:24:A4:C0:C3:AD:2A:65:82:73:EC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019C6BEFF36D5214649F21995E09DBC696D2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NBVuBNCEOWplLiSkwMOtKmWCc-w.roa
Signing time: Tue 17 Feb 2026 14:10:13 +0000
ROA not before: Tue 17 Feb 2026 14:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216392
IP address blocks: 45.81.152.0/23 maxlen: 24
45.144.228.0/24 maxlen: 24
45.144.230.0/24 maxlen: 24
2a0b:da80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:ef:f3:6d:52:14:64:9f:21:99:5e:09:db:c6:96:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 17 14:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34156e04d084396a652e24a4c0c3ad2a658273ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:22:86:64:88:09:3b:65:61:c9:b4:1c:d1:
03:4a:8f:99:e1:fa:62:97:b3:83:86:94:55:b9:1f:
a7:1b:ed:a7:dc:a5:10:87:3e:9e:6f:06:43:b6:bf:
6a:ba:93:19:2e:63:cb:8e:48:dc:fe:c5:f0:29:cd:
96:b6:3d:e6:31:ce:22:e7:03:1a:6c:67:e2:9b:ae:
7b:38:8d:b8:37:e4:78:d4:b7:6c:98:35:ba:40:57:
b7:06:7c:b3:04:ed:94:9a:18:e2:46:f2:ef:4f:b8:
05:a3:4b:07:8c:f7:2c:2f:7c:50:a2:24:ab:9d:9f:
21:e6:e5:37:a2:42:2c:9e:47:ed:19:97:1d:25:81:
3b:92:b4:a9:74:af:96:5c:72:b9:10:f4:d4:72:71:
b5:6f:50:c9:71:94:2f:f0:d2:91:88:df:ed:cc:eb:
cc:21:5b:ba:fa:d1:de:06:c6:8b:b9:04:2c:16:1a:
a9:cc:9a:90:53:b0:95:ae:06:60:c0:90:03:a1:57:
36:4f:75:90:d9:c9:37:b1:21:af:09:00:c3:f4:08:
9e:11:f0:12:f1:63:30:0f:ed:eb:ed:d6:11:39:d3:
31:3f:cc:fe:14:1c:50:98:14:c5:d4:ff:d6:84:21:
43:5d:57:52:b9:b5:47:40:3d:5f:0e:24:7c:87:cd:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:6E:04:D0:84:39:6A:65:2E:24:A4:C0:C3:AD:2A:65:82:73:EC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NBVuBNCEOWplLiSkwMOtKmWCc-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.152.0/23
45.144.228.0/24
45.144.230.0/24
IPv6:
2a0b:da80::/32
Signature Algorithm: sha256WithRSAEncryption
68:de:ff:54:fe:67:0c:6c:98:42:ff:ea:4a:ff:af:e5:ae:c6:
df:78:95:35:b2:c1:6c:4a:80:8e:61:4a:c6:9a:d3:27:e6:61:
f8:82:c3:e5:08:68:04:f7:fa:99:39:15:22:8c:97:ef:70:05:
ae:f1:d9:bc:7d:6e:1a:fc:c6:67:f4:e9:6d:3c:6f:48:ad:64:
4b:dd:7c:4d:eb:9e:80:6a:02:e2:ce:9c:c2:9a:c1:ac:83:b9:
5a:a7:29:22:3f:e3:60:45:82:9f:29:0c:4d:59:8a:0b:03:67:
bc:3d:19:c9:a3:07:e9:eb:b2:fb:2e:63:a8:be:3f:17:50:48:
c6:a1:23:1c:84:5a:5a:a6:5a:c2:36:ec:07:04:aa:05:c5:47:
1d:68:56:71:c8:f3:b8:ee:fc:42:47:9c:38:ee:44:2b:96:70:
91:05:b2:d2:d7:87:e1:8b:ff:ff:1a:eb:8f:74:80:39:db:99:
f1:2d:7f:d2:8c:b0:24:0a:2b:7e:d5:11:14:bb:38:07:45:56:
6d:6e:94:80:f0:ef:f9:97:44:08:5b:51:2d:a0:21:69:2a:dd:
d8:06:68:4f:30:40:6b:08:30:ab:8a:85:d2:0b:ea:ff:ce:aa:
f1:bf:ea:ba:9e:60:52:a0:c9:89:65:3e:6e:47:6c:52:b1:ca:
a8:fe:fd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 18:54:07 2026 by rpki-client