Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_PQDHQEIw5iTOozFM9AOL6fLH9U.roa
File: _PQDHQEIw5iTOozFM9AOL6fLH9U.roa (raw, json)
Hash identifier: KZGHXOTva/lnVDELIbo80/e1vCJCVsA/tIIY9bib6uk=
Subject key identifier: FC:F4:03:1D:01:08:C3:98:93:3A:8C:C5:33:D0:0E:2F:A7:CB:1F:D5
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019C2D9ABB5D529F45F792028753CD36C57F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_PQDHQEIw5iTOozFM9AOL6fLH9U.roa
Signing time: Thu 05 Feb 2026 11:40:41 +0000
ROA not before: Thu 05 Feb 2026 11:40:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 79.132.180.0/24 maxlen: 24
79.132.181.0/24 maxlen: 24
79.132.183.0/24 maxlen: 24
79.132.188.0/24 maxlen: 24
79.132.190.0/24 maxlen: 24
88.223.154.0/23 maxlen: 24
88.223.164.0/24 maxlen: 24
88.223.165.0/24 maxlen: 24
88.223.166.0/24 maxlen: 24
88.223.167.0/24 maxlen: 24
88.223.176.0/20 maxlen: 24
88.223.180.0/24 maxlen: 24
88.223.183.0/24 maxlen: 24
88.223.189.0/24 maxlen: 24
88.223.190.0/24 maxlen: 24
88.223.191.0/24 maxlen: 24
88.223.208.0/24 maxlen: 24
88.223.211.0/24 maxlen: 24
88.223.216.0/24 maxlen: 24
88.223.217.0/24 maxlen: 24
88.223.218.0/24 maxlen: 24
88.223.219.0/24 maxlen: 24
88.223.228.0/22 maxlen: 22
88.223.232.0/22 maxlen: 22
88.223.244.0/22 maxlen: 22
213.164.96.0/20 maxlen: 24
213.164.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:9a:bb:5d:52:9f:45:f7:92:02:87:53:cd:36:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Feb 5 11:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcf4031d0108c398933a8cc533d00e2fa7cb1fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:38:4e:1c:32:30:37:79:89:fc:53:19:fa:
5d:c0:cb:e5:0d:63:fe:b9:94:13:49:0f:8e:78:1c:
ef:29:3c:0b:20:85:85:80:c3:3e:0b:5f:db:f1:7a:
fb:e2:a8:7c:87:1a:15:30:9c:62:48:28:e3:9e:c3:
77:af:bd:82:ec:74:09:cb:c3:3e:44:5e:fc:d7:5f:
38:b7:2d:a8:cb:72:8a:3a:63:2f:4f:f7:3c:eb:79:
57:5b:f2:d1:21:bd:0e:2a:a8:29:3b:cd:0d:c0:e2:
b1:89:f7:cd:b8:47:fa:87:82:ad:94:6b:6c:11:83:
cf:74:ea:2e:f5:76:04:07:6f:e1:06:09:c9:fc:c0:
71:9d:09:17:0a:35:f6:f7:8c:e7:ea:71:fa:6d:8e:
ce:f2:2e:05:93:a8:84:5a:2e:85:07:c3:5b:38:50:
96:01:4a:42:0c:15:b9:3e:ee:55:e3:ae:28:58:68:
52:70:6f:f2:26:4d:91:1b:d4:c2:66:d2:bf:ad:62:
59:6f:bd:f3:91:6f:63:b6:69:41:73:32:9e:63:8d:
5a:68:e0:5b:c4:3e:79:4f:20:d2:32:9c:50:6a:40:
fe:0c:7d:df:5f:31:7e:f1:34:77:2a:7b:db:cf:8c:
5e:dd:5a:21:5f:56:89:05:bc:bd:67:02:f7:78:22:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:03:1D:01:08:C3:98:93:3A:8C:C5:33:D0:0E:2F:A7:CB:1F:D5
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_PQDHQEIw5iTOozFM9AOL6fLH9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.180.0/23
79.132.183.0/24
79.132.188.0/24
79.132.190.0/24
88.223.154.0/23
88.223.164.0/22
88.223.176.0/20
88.223.208.0/24
88.223.211.0/24
88.223.216.0/22
88.223.228.0-88.223.235.255
88.223.244.0/22
213.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
28:73:7e:fd:eb:b6:64:49:d3:23:a7:73:95:e6:c9:51:35:8f:
90:ab:74:3a:71:c8:61:dc:ef:cd:3c:21:5e:f4:4e:17:d0:1d:
9f:a9:c0:bd:0f:d1:06:de:c3:89:51:ff:75:8d:1c:e7:c8:c6:
7c:b6:b8:23:e6:3c:a6:3b:50:ad:c6:c4:f8:8c:ca:13:bb:19:
00:e7:3d:f0:d9:1a:7a:5f:fc:f6:58:9f:45:f3:e9:12:ed:63:
20:a4:ea:a3:4b:30:c6:03:df:07:d5:ac:08:d4:67:f8:7f:a3:
37:36:53:5c:04:7e:03:6d:57:99:5a:86:9b:5f:21:b6:5e:86:
d2:f2:06:f7:0c:96:41:ea:77:6d:eb:b0:9b:bd:0e:59:89:8c:
de:4b:c0:3f:92:ad:99:bd:12:7c:ed:b4:69:b6:79:b7:d9:d0:
87:10:42:e5:12:c2:05:04:33:40:02:e0:c1:71:57:06:2c:2a:
62:28:25:3e:0c:72:ff:11:dc:de:25:19:62:2c:cc:bb:e9:cf:
66:48:bd:11:88:f5:04:ec:ea:b2:4c:97:e6:bd:bb:40:29:ea:
57:e8:2a:84:26:9d:ee:f1:43:64:e3:8b:7a:c9:fb:82:65:73:
d4:f5:03:57:5c:1a:70:68:ed:81:19:b2:41:2b:5d:b3:ef:84:
0f:ea:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:14 2026 by rpki-client