Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RmESIhmQIDqaWZovwArY5vbUuog.roa
File: RmESIhmQIDqaWZovwArY5vbUuog.roa (raw, json)
Hash identifier: SO/7U/gbVkbvG7TtvDr5bBEZSNV6fh8PyC5tTdoAs2g=
Subject key identifier: 46:61:12:22:19:90:20:3A:9A:59:9A:2F:C0:0A:D8:E6:F6:D4:BA:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019C4C4FF11590092D711EE79CA3C2F99701
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RmESIhmQIDqaWZovwArY5vbUuog.roa
Signing time: Wed 11 Feb 2026 10:47:13 +0000
ROA not before: Wed 11 Feb 2026 10:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202384
IP address blocks: 193.17.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:4f:f1:15:90:09:2d:71:1e:e7:9c:a3:c2:f9:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 11 10:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=466112221990203a9a599a2fc00ad8e6f6d4ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:0f:d7:d1:15:be:5a:5b:a4:6a:6d:de:52:
e1:23:f0:6a:56:1a:25:a0:08:59:4c:25:5b:5b:a0:
69:ed:93:d5:3c:60:fc:17:d7:ef:67:e2:e1:f1:e2:
9f:de:b6:04:9d:ff:47:df:34:71:34:b5:09:ab:4e:
5a:60:c3:a9:64:44:e1:ea:03:86:ba:d7:5e:d1:67:
58:a5:f7:a0:12:66:cd:e0:d2:e5:d9:d9:92:2f:46:
25:a8:5e:f6:21:1d:14:b8:32:a5:f4:5e:4f:ff:b3:
a2:54:93:fe:4d:36:c2:32:0b:25:56:d7:f4:1c:d0:
12:23:8d:50:78:ba:ab:5a:94:74:5e:c8:2d:85:c1:
57:f6:b4:ed:5d:e9:f6:13:cf:81:74:c0:24:b8:d0:
61:d5:78:4a:40:bd:be:a2:ea:51:d6:dc:45:1e:57:
b4:13:f7:c0:2e:68:94:d4:f2:b8:4e:d5:d5:20:31:
f9:05:c3:8f:3d:c5:6f:f6:f9:09:12:dc:b6:9e:72:
bd:42:69:59:fe:ab:78:d2:8a:0f:94:fa:28:2f:a4:
77:16:72:8c:2b:9e:8a:b3:a0:59:c8:8f:0c:ae:2a:
d2:c3:15:44:ca:4f:97:74:0d:b6:6f:24:f1:45:9d:
b8:1c:6e:a1:e9:b6:dd:90:89:2f:1c:9e:37:08:76:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:12:22:19:90:20:3A:9A:59:9A:2F:C0:0A:D8:E6:F6:D4:BA:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RmESIhmQIDqaWZovwArY5vbUuog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:da:38:01:97:33:af:3e:97:0c:f4:6a:95:4f:58:b2:f9:65:
55:b2:f6:72:6d:ed:8c:b5:70:14:f4:a7:d7:26:27:3b:e0:d2:
9c:d1:c3:86:12:ae:13:6a:7c:58:a1:69:a0:d6:e9:15:21:fe:
ab:57:70:de:78:45:50:58:9f:c1:fb:14:b0:8c:1f:22:1d:36:
da:19:55:d9:df:79:66:7e:36:f7:5c:aa:84:e2:02:30:a6:b1:
9d:1a:1c:1a:0e:19:8c:00:01:e2:20:30:52:83:d1:7f:46:9e:
13:f3:6f:be:19:3e:8f:33:b4:88:e4:96:4a:0c:8f:26:4d:ac:
5b:7f:81:c3:d2:36:1c:35:10:e6:18:1e:43:4c:5e:95:80:ff:
84:65:7a:72:66:84:7c:64:8c:b7:ed:95:5f:e6:72:53:31:5c:
06:f4:e3:ee:53:a6:e0:58:70:a2:0a:26:98:97:a7:8c:15:70:
3d:10:f3:9a:03:2e:f0:9f:9c:71:18:d3:f9:d3:79:cf:9f:4a:
af:89:94:eb:b6:aa:cf:32:37:0a:5e:2c:6e:76:da:e5:8c:27:
15:a1:84:73:a8:c9:65:65:35:8f:1d:22:ca:f8:a4:19:03:43:
ec:f0:21:17:43:1c:39:b4:66:07:91:69:bd:01:8f:25:43:90:
62:e9:79:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 18:54:09 2026 by rpki-client