Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R-NZP3Kz-ga0tinl8GVpmuk8qng.roa
File: R-NZP3Kz-ga0tinl8GVpmuk8qng.roa (raw, json)
Hash identifier: hQrmEA+cyyyCFvZ6diz/0UxS2Ie42BJwXdLsd6BdLtQ=
Subject key identifier: 47:E3:59:3F:72:B3:FA:06:B4:B6:29:E5:F0:65:69:9A:E9:3C:AA:78
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C664163F52F912D2B881620D90367C347
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R-NZP3Kz-ga0tinl8GVpmuk8qng.roa
Signing time: Mon 16 Feb 2026 11:41:27 +0000
ROA not before: Mon 16 Feb 2026 11:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 192.36.247.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
192.71.254.0/23 maxlen: 24
192.121.62.0/24 maxlen: 24
192.176.43.0/24 maxlen: 24
193.182.113.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
193.234.53.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
194.103.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:41:63:f5:2f:91:2d:2b:88:16:20:d9:03:67:c3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 16 11:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47e3593f72b3fa06b4b629e5f065699ae93caa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:14:6d:12:c5:78:03:d1:26:a1:d8:68:8b:
2f:9f:02:3b:7d:c4:59:bc:e7:08:3e:16:76:7a:f9:
27:6c:64:c4:61:6d:5c:70:77:57:82:a3:10:97:92:
92:61:55:8e:e4:65:b8:90:df:f9:1f:0f:38:7e:50:
f0:f3:9e:e3:bf:0d:14:ac:1d:ba:7b:2a:bd:83:d6:
4b:5a:e8:3a:bc:54:fc:d1:39:30:48:10:ee:34:4f:
92:00:d3:ac:98:f9:f1:ae:f0:fd:e5:71:ca:25:8c:
50:07:75:57:7e:ac:4d:3f:66:35:44:01:80:a2:e8:
90:73:f4:98:ff:a6:fc:2e:57:66:16:99:a3:36:43:
86:b0:ec:e5:50:af:be:64:1e:ed:8f:6e:a4:48:c6:
59:5b:4f:e1:5f:a4:e0:8e:11:b7:37:7b:a9:9b:e9:
78:0e:45:27:13:51:02:ad:10:4c:b8:7d:e5:86:0d:
34:6d:1d:49:5f:82:2c:4d:17:52:46:c9:93:ec:cd:
5c:bf:5e:16:b7:3a:43:18:5f:fe:1d:80:0d:7a:f6:
2c:64:34:44:de:55:32:5c:82:30:19:9a:ed:14:fe:
29:6a:b3:b5:3a:15:47:06:7d:12:2f:71:79:7a:2c:
32:c2:66:53:c2:95:a6:dd:4d:5a:14:b3:b6:5f:19:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:59:3F:72:B3:FA:06:B4:B6:29:E5:F0:65:69:9A:E9:3C:AA:78
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R-NZP3Kz-ga0tinl8GVpmuk8qng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
192.121.62.0/24
192.176.43.0/24
193.182.113.0/24
193.183.118.0/24
193.234.52.0/23
193.234.120.0/22
194.103.8.0/24
Signature Algorithm: sha256WithRSAEncryption
31:17:b4:f6:57:21:50:27:30:f1:5a:02:b8:ab:65:6e:8d:a0:
7a:f1:5d:48:98:8f:aa:7b:bb:d8:81:b4:95:1b:9c:01:eb:8c:
08:e5:73:f0:bb:14:e0:4c:1f:dd:83:e4:dd:f4:bd:99:00:da:
88:64:73:0b:36:26:f3:d0:18:3c:d7:fc:56:e6:e1:b0:89:bc:
16:9e:05:1a:18:41:76:fa:7b:8f:07:e7:b2:a9:96:a5:7e:c8:
44:b8:48:69:cc:48:30:42:c9:1c:51:af:68:aa:73:a8:21:61:
6b:0d:d1:b9:73:82:6d:6b:67:12:7f:e6:a1:ad:8a:52:f7:fd:
a4:cd:b6:36:08:d8:a0:06:4b:99:82:59:ca:56:82:88:55:62:
f8:0f:41:6a:fb:df:00:2e:99:01:a3:2e:2b:bf:37:31:c3:93:
e7:58:99:1e:33:54:f7:37:a1:e8:c0:4a:9d:6a:3a:1c:32:dc:
81:bc:4e:b8:d5:88:df:96:60:2c:0b:0b:c6:6e:dd:38:29:14:
71:ad:b3:56:f4:76:10:c2:73:ac:7d:7e:9b:a7:42:36:e2:5e:
23:58:88:11:93:27:51:0f:9f:f2:d0:90:de:e9:a5:9f:81:c4:
75:f1:4a:08:3a:7e:76:b8:89:92:99:dc:e2:b7:18:28:00:ef:
a1:2a:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:02 2026 by rpki-client