Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fDb1uZ6AVQ1AA4eIGSrECmb8-dg.roa
File: fDb1uZ6AVQ1AA4eIGSrECmb8-dg.roa (raw, json)
Hash identifier: 6YCyfosfyZybfBv9OYwnbjyNTnAhqHZ0UvyMETtPWu4=
Subject key identifier: 7C:36:F5:B9:9E:80:55:0D:40:03:87:88:19:2A:C4:0A:66:FC:F9:D8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019C661F4E0DAACDE48C1277832EA2EC2497
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fDb1uZ6AVQ1AA4eIGSrECmb8-dg.roa
Signing time: Mon 16 Feb 2026 11:04:13 +0000
ROA not before: Mon 16 Feb 2026 11:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 185.223.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:1f:4e:0d:aa:cd:e4:8c:12:77:83:2e:a2:ec:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 16 11:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c36f5b99e80550d40038788192ac40a66fcf9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:1f:d1:87:e0:1a:94:93:c1:57:ec:3e:50:
a1:51:6b:6f:75:ea:72:89:35:48:9b:0a:61:7e:08:
a7:6c:1b:c4:55:ff:80:10:27:83:bd:bd:13:97:12:
51:bb:5c:4f:18:66:69:97:ec:6a:71:da:49:37:8e:
6a:e8:60:86:00:87:be:66:c0:86:ea:a6:1b:7f:8b:
77:97:01:ca:22:2c:5a:37:20:16:f9:82:43:5f:a7:
1d:ad:97:f9:db:f2:66:f3:7a:fd:e8:d3:23:57:f4:
8a:62:14:45:f5:c8:5f:32:5e:bd:f8:e4:5a:4f:93:
d5:22:b6:b1:97:38:10:ba:47:b4:1a:27:52:79:d8:
84:12:5b:de:09:45:a1:aa:1e:43:bb:5a:2e:41:79:
0e:8b:04:40:3e:c7:9a:89:5a:bf:10:2b:50:01:c6:
2a:38:0e:5e:eb:3c:7d:c5:fc:fa:e4:98:27:a1:00:
26:80:c1:d6:4f:90:8a:55:a6:e2:e0:55:34:7a:5d:
66:6c:e3:c6:d1:b5:4e:77:52:0b:c8:e7:f4:f3:b9:
94:02:1c:23:96:2a:c6:cf:08:98:0d:0a:80:1c:38:
d7:d5:80:82:eb:d8:da:47:fe:a4:23:ad:85:ff:92:
c5:8f:f9:d6:f1:4c:e6:96:0d:82:07:1a:25:09:d5:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:F5:B9:9E:80:55:0D:40:03:87:88:19:2A:C4:0A:66:FC:F9:D8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fDb1uZ6AVQ1AA4eIGSrECmb8-dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8f:63:c1:75:ac:39:f1:d4:08:cf:39:d4:73:a7:8b:a7:c1:
86:aa:02:5a:b9:98:fa:b0:62:5f:9c:8d:e1:31:cc:0e:11:2e:
f9:6d:90:77:ef:69:38:06:66:d9:8d:ff:e0:fe:3b:36:15:60:
53:97:e6:8d:3b:73:aa:29:20:be:7f:c4:b5:e6:8b:23:3c:5f:
52:3b:f3:65:56:a9:60:6c:44:42:2c:64:fc:7c:e8:ff:0a:0b:
aa:16:2b:70:4a:c0:a7:99:f8:77:b0:56:dd:4e:a9:d5:70:b9:
21:df:49:88:71:f4:73:67:4a:5f:36:ee:be:a6:e7:a5:ef:2c:
0a:19:c2:f1:2b:64:8c:34:cf:61:5f:17:a7:cc:47:8d:85:60:
b2:51:44:58:76:59:96:16:14:c3:e3:df:0a:00:b5:e4:d4:65:
38:cc:d6:a6:01:07:96:77:35:71:35:2c:98:9e:52:75:e4:36:
14:2b:83:e3:0d:91:40:6b:04:d9:3e:1d:fc:7a:7e:91:b8:30:
ac:33:57:a1:35:d9:01:43:58:02:cf:25:87:0f:41:3c:77:6f:
56:32:06:40:be:f3:44:3f:06:4f:5c:a8:03:31:2a:d1:83:65:
f5:91:28:1a:37:d6:dd:57:49:e9:52:a0:7b:db:91:fb:2a:e1:
7b:25:e6:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxmH04Nqs3kjBJ3gy6i7CSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwMjE2MTEwNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzM2ZjViOTllODA1NTBkNDAwMzg3ODgxOTJhYzQwYTY2ZmNmOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPMf0YfgGpSTwVfsPlChUWtvdepy
iTVImwphfginbBvEVf+AECeDvb0TlxJRu1xPGGZpl+xqcdpJN45q6GCGAIe+ZsCG
6qYbf4t3lwHKIixaNyAW+YJDX6cdrZf52/Jm83r96NMjV/SKYhRF9chfMl69+ORa
T5PVIraxlzgQuke0GidSediEElveCUWhqh5Du1ouQXkOiwRAPseaiVq/ECtQAcYq
OA5e6zx9xfz65JgnoQAmgMHWT5CKVabi4FU0el1mbOPG0bVOd1ILyOf087mUAhwj
lirGzwiYDQqAHDjX1YCC69jaR/6kI62F/5LFj/nW8Uzmlg2CBxolCdWfoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHw29bmegFUNQAOHiBkqxApm/PnYMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZkRiMXVaNkFWUTFBQTRlSUdTckVDbWI4LWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud+bMA0G
CSqGSIb3DQEBCwUAA4IBAQCaj2PBdaw58dQIzznUc6eLp8GGqgJauZj6sGJfnI3h
McwOES75bZB372k4BmbZjf/g/js2FWBTl+aNO3OqKSC+f8S15osjPF9SO/NlVqlg
bERCLGT8fOj/CguqFitwSsCnmfh3sFbdTqnVcLkh30mIcfRzZ0pfNu6+puel7ywK
GcLxK2SMNM9hXxenzEeNhWCyUURYdlmWFhTD498KALXk1GU4zNamAQeWdzVxNSyY
nlJ15DYUK4PjDZFAawTZPh38en6RuDCsM1ehNdkBQ1gCzyWHD0E8d29WMgZAvvNE
PwZPXKgDMSrRg2X1kSgaN9bdV0npUqB725H7KuF7JeZv
-----END CERTIFICATE-----
Generated at Tue Feb 17 18:54:15 2026 by rpki-client