Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nCjzuQP6sDGVUtEXoz5l9ASoBcY.roa
File: nCjzuQP6sDGVUtEXoz5l9ASoBcY.roa (raw, json)
Hash identifier: DgsZgHGYMBo5kW8lvPwoMgqt+OZ31MgFyorA9E4tGbo=
Subject key identifier: 9C:28:F3:B9:03:FA:B0:31:95:52:D1:17:A3:3E:65:F4:04:A8:05:C6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019C484BCDD81AA8CE4F610F6E4BC6DEB648
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nCjzuQP6sDGVUtEXoz5l9ASoBcY.roa
Signing time: Tue 10 Feb 2026 16:04:13 +0000
ROA not before: Tue 10 Feb 2026 16:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 176.125.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 14:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:4b:cd:d8:1a:a8:ce:4f:61:0f:6e:4b:c6:de:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 10 16:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c28f3b903fab0319552d117a33e65f404a805c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:a3:19:10:a2:f3:fb:85:bd:3e:c6:f9:ee:
5e:50:99:14:d7:cb:6a:fa:7f:4b:cd:0c:d1:36:0a:
74:e4:13:2d:18:b7:65:52:8c:31:07:81:1e:63:5a:
58:51:4b:77:c5:fd:9b:48:83:ee:82:f4:61:a5:a5:
6d:dc:a8:45:17:58:01:b9:71:c7:48:33:48:66:bb:
f2:e7:bb:28:7e:3b:11:c7:20:55:2f:c3:85:4f:8f:
c4:7c:92:fa:e0:31:5e:75:78:50:69:c7:b0:00:5f:
a1:17:bd:1b:2a:3e:f0:0b:f6:f3:ee:6f:c4:18:3b:
10:6e:30:bd:8b:26:be:0f:28:61:ed:b5:a8:be:70:
2d:52:ba:6c:db:9a:ec:6e:32:32:f6:f9:e4:ac:8e:
ad:8c:2d:8d:cb:57:72:7b:11:24:79:4f:ad:93:f2:
7d:09:4c:dc:9a:b3:53:58:5d:f8:bb:1b:7e:86:a0:
19:1c:6e:cf:78:4a:a6:8e:81:40:d9:cc:e4:6f:af:
70:ae:ec:4d:88:88:f1:f7:67:86:ca:ae:19:87:0f:
b0:63:62:85:6c:0b:6e:83:95:ab:9a:d8:91:0a:b8:
e7:4e:8b:a0:48:37:b0:14:6f:7b:97:bf:c5:0d:5a:
61:4a:0a:3e:a6:f2:81:99:f8:a3:74:24:99:f4:30:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:F3:B9:03:FA:B0:31:95:52:D1:17:A3:3E:65:F4:04:A8:05:C6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nCjzuQP6sDGVUtEXoz5l9ASoBcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.210.232.0/24
185.210.235.0/24
185.214.102.0/24
185.225.0.0/24
185.225.2.0/24
185.227.145.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c7:4b:4f:b3:2c:a1:a0:8c:03:2a:44:1c:03:86:01:cc:32:
3f:6f:9a:11:0c:33:73:d6:a0:6a:b9:9a:f2:65:ad:0e:9e:1e:
a6:26:80:6f:95:77:ad:18:54:12:74:c7:53:75:60:75:88:4b:
41:4a:3b:ab:6a:6b:fb:14:f3:7a:7c:2e:aa:7d:f2:b9:d3:be:
27:9f:ec:62:51:f0:be:1d:28:2c:de:be:84:e4:f9:db:1b:e5:
97:7f:78:73:a0:3f:93:df:35:d4:66:62:c7:60:ce:2b:1b:56:
bd:77:14:cd:37:a7:b0:2a:8c:38:4c:23:75:af:ea:29:36:97:
0a:a3:2f:dc:06:fb:b2:15:85:89:73:ab:d7:78:14:c4:70:da:
22:75:5e:56:dc:29:5e:ea:51:98:42:82:59:d5:04:6d:24:fb:
04:a8:3c:b1:55:9d:b6:4b:de:c4:7e:74:75:ad:d9:46:08:11:
e5:05:3f:58:0f:df:dc:9b:61:c6:9f:44:cb:e1:47:38:bc:32:
fa:96:28:05:83:93:ba:cf:a7:9d:1a:2f:a7:34:54:b2:5c:f2:
5d:15:bf:e2:f4:0a:51:fd:9c:93:bd:83:18:af:d1:3f:05:be:
72:9b:f7:f3:52:d6:10:45:99:37:75:0e:33:06:36:c4:a3:02:
9e:64:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 18:54:13 2026 by rpki-client