Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/WfVSAaqTi8wZ0M8IUwCeMrO949o.roa
File: WfVSAaqTi8wZ0M8IUwCeMrO949o.roa (raw, json)
Hash identifier: hOCJVDvOU9mlVeAUAsALNCqzHZYQxzPib4YOIRqjjiE=
Subject key identifier: 59:F5:52:01:AA:93:8B:CC:19:D0:CF:08:53:00:9E:32:B3:BD:E3:DA
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019C7625C7B22F49B9B7911199B509F56F18
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/WfVSAaqTi8wZ0M8IUwCeMrO949o.roa
Signing time: Thu 19 Feb 2026 13:45:13 +0000
ROA not before: Thu 19 Feb 2026 13:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 188.95.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:25:c7:b2:2f:49:b9:b7:91:11:99:b5:09:f5:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Feb 19 13:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f55201aa938bcc19d0cf0853009e32b3bde3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:e0:b2:8e:e0:d1:cd:91:ac:6b:76:e0:4a:
01:7c:05:1c:11:a2:f2:94:1b:be:07:de:d2:7f:4e:
d6:0e:fb:6f:c7:df:5f:19:dc:9f:a8:30:40:a2:56:
0c:d5:bc:99:30:04:81:8c:5b:9c:55:31:7b:c8:4e:
ac:54:23:ec:99:48:10:b1:e5:15:02:a5:a2:b6:72:
67:b4:fc:9f:7e:2a:40:27:d2:f0:9c:cc:47:d9:52:
1e:76:90:78:5c:12:6b:fb:56:b7:ae:0f:cb:ba:5a:
e6:e8:99:08:b4:f3:61:9c:6b:65:a4:fa:43:a1:15:
8b:af:51:d2:85:38:db:e3:cd:6d:2a:4c:bc:4b:fe:
bd:39:e3:df:45:74:d3:56:36:29:a7:d4:b0:43:7a:
39:99:98:69:bd:0c:ba:98:59:a7:cc:b4:f8:63:5e:
81:62:5f:e2:e9:3e:20:bc:1d:7a:ef:d9:c8:1f:65:
16:b4:9e:0a:6b:c9:a6:6e:db:c6:27:3d:5a:20:7f:
a0:ab:19:38:d3:78:f5:5e:e0:9f:ba:d5:81:15:bc:
f1:aa:06:9a:86:e0:99:ac:f7:73:84:d3:ec:a8:a7:
c9:7f:db:bb:d1:be:4d:1c:25:d1:8e:7a:fc:87:6a:
18:42:04:c9:ee:cd:84:ab:ba:4c:95:7b:7d:38:a3:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:52:01:AA:93:8B:CC:19:D0:CF:08:53:00:9E:32:B3:BD:E3:DA
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/WfVSAaqTi8wZ0M8IUwCeMrO949o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.197.0/24
Signature Algorithm: sha256WithRSAEncryption
61:52:f4:34:0d:f2:b5:21:ca:c5:e5:c1:ac:b2:16:7d:1a:a1:
7e:b9:12:0d:a9:7b:86:1c:b2:8f:17:01:8c:66:89:42:5c:13:
ac:99:2e:02:75:16:28:06:e4:80:07:9a:f8:cb:1f:02:25:c4:
bd:e4:d8:7c:fc:e7:97:9c:3c:ca:e0:c2:ae:52:d7:c3:67:97:
39:ba:b4:ac:7f:27:47:db:f6:01:c7:78:b5:37:1b:2c:04:06:
c2:38:ab:9c:34:a2:0f:2c:91:82:b3:86:d0:c9:dc:91:05:97:
f7:31:1c:67:14:97:c5:f5:d0:b6:48:72:5c:bd:98:69:ed:b9:
60:09:43:ac:62:ad:89:bd:44:5d:8c:8d:8b:82:c5:16:6a:e0:
c0:e6:4b:9b:d7:18:74:61:62:ed:6e:3a:59:75:57:c0:b1:1c:
91:fd:6f:94:84:f7:a8:bb:64:88:38:bd:b3:ea:c1:86:03:7a:
92:b4:a6:db:7f:0e:d4:8d:01:d7:fc:5e:cf:52:ca:13:0e:72:
2f:72:a4:40:92:8e:bc:b4:7c:08:bd:71:39:ff:f9:64:76:cd:
fe:71:a2:8b:ce:6e:24:1d:da:02:a8:53:e9:38:5d:1b:1e:23:
f1:b7:5c:09:ed:46:02:14:39:38:4d:4a:b2:d6:25:6f:4d:55:
5e:25:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:30 2026 by rpki-client