Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/lIG1b91dGC5ndWbmzjIp_fubDNE.roa
File: lIG1b91dGC5ndWbmzjIp_fubDNE.roa (raw, json)
Hash identifier: Bvl3uk2S1zwHFCA6eMLSAsz9eN2bKrsslaZc1w8UTMY=
Subject key identifier: 94:81:B5:6F:DD:5D:18:2E:67:75:66:E6:CE:32:29:FD:FB:9B:0C:D1
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019C76C8BCE412018BA853253AB740A792C3
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/lIG1b91dGC5ndWbmzjIp_fubDNE.roa
Signing time: Thu 19 Feb 2026 16:43:12 +0000
ROA not before: Thu 19 Feb 2026 16:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214504
IP address blocks: 132.243.242.0/24 maxlen: 24
132.243.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:c8:bc:e4:12:01:8b:a8:53:25:3a:b7:40:a7:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Feb 19 16:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9481b56fdd5d182e677566e6ce3229fdfb9b0cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:26:60:09:9a:f0:50:f5:2d:be:7f:5b:e6:
6d:41:46:0a:90:fd:df:00:75:28:d2:65:65:25:42:
6f:64:e7:73:6c:25:e6:88:e4:c9:e0:b1:08:a6:b4:
b8:7f:44:cc:34:99:0b:6c:4a:9b:71:1d:f8:20:1b:
89:69:0a:c8:4e:91:99:c9:a4:07:be:95:8c:ec:7d:
cf:dc:f0:2c:21:d6:28:3e:be:9a:a0:54:da:8a:96:
b5:78:04:d4:c0:d9:34:36:5e:ae:89:de:f1:eb:18:
8a:0b:4a:66:6e:9d:b9:db:4d:eb:15:8f:83:b1:cc:
00:bb:bc:10:46:6c:e4:38:be:db:f3:0d:df:cb:d2:
df:33:49:51:40:45:ee:e6:0f:ab:30:b4:77:85:64:
c8:c2:8d:00:f6:e5:c4:48:c9:b9:85:fa:2f:84:0f:
36:fc:a3:dd:cb:bd:57:92:ca:91:88:6c:8e:48:66:
24:26:c9:3c:aa:ee:d9:90:69:5f:4e:33:80:54:ed:
36:72:0b:2f:a8:45:8a:44:8d:f6:aa:66:84:98:af:
ad:74:45:88:66:73:e0:11:74:66:58:65:2a:e3:2d:
d3:7b:f6:a0:aa:1c:27:e9:b4:7b:73:59:76:8e:de:
a5:9c:82:66:60:e3:f3:11:07:3f:ca:78:44:f1:24:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:B5:6F:DD:5D:18:2E:67:75:66:E6:CE:32:29:FD:FB:9B:0C:D1
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/lIG1b91dGC5ndWbmzjIp_fubDNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.242.0/23
Signature Algorithm: sha256WithRSAEncryption
58:93:bf:49:5c:26:01:a7:fd:91:a9:db:01:60:0f:bd:13:6a:
a8:5a:03:59:4d:d9:96:32:62:0a:75:b5:c5:ab:c5:a0:6e:15:
72:06:4c:57:83:8b:d3:01:25:36:0c:08:1a:5b:98:9e:61:18:
05:86:8b:51:db:bb:e5:9a:9e:41:05:ac:c2:3c:55:2a:09:e4:
a6:c9:e0:03:b7:fa:a4:c0:63:9e:28:f0:07:88:3c:72:3a:3a:
a9:4d:f5:41:82:93:31:dd:ae:ee:7a:86:39:a4:6a:00:42:33:
06:a8:43:45:db:a7:a2:5a:59:1e:f4:3e:fe:d0:99:b3:fa:f1:
9b:0b:67:99:74:78:29:54:da:64:ad:7e:8b:d8:d1:a4:64:03:
38:2c:36:ee:aa:ae:5f:44:4f:e4:7e:a4:a3:ef:e2:71:ba:b4:
12:39:90:be:8d:dc:8d:6c:71:06:a0:fa:51:be:fa:ba:27:64:
1b:8e:3a:71:31:c4:dd:0e:fa:15:82:b3:87:74:3a:61:06:85:
73:e1:5a:58:0e:ab:b5:47:e1:6b:37:b3:5b:9d:0c:b8:3c:94:
cb:f3:40:9e:61:c4:77:4a:0c:31:da:8d:5e:17:55:92:eb:02:
f6:c9:93:db:b0:58:19:f6:b6:ac:57:3f:19:67:a4:be:6c:c2:
09:ac:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:41 2026 by rpki-client