Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/nj4mvFqfvEUyr5giiKwR4BVZQno.roa
File: nj4mvFqfvEUyr5giiKwR4BVZQno.roa (raw, json)
Hash identifier: 9KFIbmVJvCtQC4dokjtpRH9fFECm3xNQnDEDkj0ZLgE=
Subject key identifier: 9E:3E:26:BC:5A:9F:BC:45:32:AF:98:22:88:AC:11:E0:15:59:42:7A
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 019C7B95DC4399250E852D9D79D33002C07E
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/nj4mvFqfvEUyr5giiKwR4BVZQno.roa
Signing time: Fri 20 Feb 2026 15:05:44 +0000
ROA not before: Fri 20 Feb 2026 15:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 45.156.131.0/24 maxlen: 24
109.105.208.0/24 maxlen: 24
109.105.209.0/24 maxlen: 24
109.105.210.0/24 maxlen: 24
109.105.211.0/24 maxlen: 24
185.180.141.0/24 maxlen: 24
185.226.196.0/24 maxlen: 24
185.226.197.0/24 maxlen: 24
2a10:3c0:3::/48 maxlen: 48
2a10:3c0:4::/48 maxlen: 48
2a10:3c0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:95:dc:43:99:25:0e:85:2d:9d:79:d3:30:02:c0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Feb 20 15:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3e26bc5a9fbc4532af982288ac11e01559427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:29:60:65:fe:06:82:09:b2:d0:1b:fe:d2:
77:f4:99:91:c3:b0:7d:a7:ef:63:2d:82:dc:c8:ec:
40:f3:64:df:cc:77:5f:e9:bf:14:44:91:53:52:99:
36:a7:a9:ad:c4:e4:21:07:26:57:5e:00:46:73:38:
cf:99:09:8f:82:d4:d1:ed:cd:c8:53:a5:66:4e:0c:
4e:84:20:80:c0:52:b5:56:a6:eb:bd:40:f9:0b:8f:
90:4e:01:c2:62:b8:0e:f5:dd:d7:32:3a:b1:21:0a:
98:35:72:ae:f5:17:0b:da:de:46:a8:8d:58:61:c7:
7b:58:3b:fc:03:85:b5:c2:48:6f:e0:bf:97:8f:69:
3c:22:50:f7:bd:fa:34:dc:e1:54:d4:02:fb:c5:c7:
85:4a:11:01:16:72:42:be:89:fc:d5:c2:f9:31:54:
d2:84:cf:37:ab:8f:40:27:b9:88:f4:e3:bb:e4:59:
70:5e:2a:35:ad:85:a3:bd:3a:90:70:a5:9b:14:1a:
77:c8:66:9c:72:62:d9:72:6f:08:09:c9:71:65:dc:
c2:29:be:47:6f:55:63:d2:66:c9:ec:70:31:fc:d3:
f2:7d:ae:c1:2d:3e:7b:d4:ba:e6:94:e7:e6:3a:24:
ba:e0:3e:c2:57:bc:43:bd:14:66:12:cf:f7:48:36:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:26:BC:5A:9F:BC:45:32:AF:98:22:88:AC:11:E0:15:59:42:7A
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/nj4mvFqfvEUyr5giiKwR4BVZQno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.131.0/24
109.105.208.0/22
185.180.141.0/24
185.226.196.0/23
IPv6:
2a10:3c0:3::-2a10:3c0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:dd:56:35:71:82:35:7a:3d:95:8e:09:f6:da:2e:3c:b9:6d:
cf:18:80:3e:88:f1:ad:6d:9c:d0:57:60:69:cb:66:97:a6:36:
13:b7:ca:08:e0:c0:ad:a1:d3:72:7d:9c:92:45:20:d8:4c:19:
60:07:08:ca:4f:6e:2d:48:a5:fb:2c:3f:79:32:2a:6d:83:15:
07:e6:f6:53:d4:a1:7b:88:2c:72:6c:66:bd:00:16:00:e6:61:
85:15:2f:9e:e4:3a:07:b6:47:54:55:38:b7:36:2c:ba:b2:c5:
a4:4f:de:97:3e:33:61:03:0c:0f:4f:8a:b0:10:d3:e1:4d:4c:
ab:9a:1f:bc:76:16:98:79:37:e3:69:2e:a2:c6:e0:24:34:b8:
2e:9e:81:96:95:ad:56:9b:5f:cf:39:bb:7f:e6:3b:90:0b:35:
b7:52:71:a7:eb:e1:be:37:d8:0f:a3:ad:c6:d1:bd:fb:d1:c1:
fd:20:a5:0d:de:2f:65:76:2b:b3:ad:79:46:14:99:ec:a8:0d:
2d:ee:39:30:d0:d2:9e:ea:29:df:f6:6f:2b:67:a5:73:aa:f4:
9b:5e:e0:97:36:73:1b:e8:9b:90:cd:83:2b:f3:2f:33:62:c4:
83:83:e7:b4:7e:88:89:e7:98:87:bc:7a:94:cb:16:c5:42:44:
e1:f2:98:96
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZx7ldxDmSUOhS2dedMwAsB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2
YWYxN2EwHhcNMjYwMjIwMTUwNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTNlMjZiYzVhOWZiYzQ1MzJhZjk4MjI4OGFjMTFlMDE1NTk0MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+cpYGX+BoIJstAb/tJ39JmRw7B9
p+9jLYLcyOxA82TfzHdf6b8URJFTUpk2p6mtxOQhByZXXgBGczjPmQmPgtTR7c3I
U6VmTgxOhCCAwFK1VqbrvUD5C4+QTgHCYrgO9d3XMjqxIQqYNXKu9RcL2t5GqI1Y
Ycd7WDv8A4W1wkhv4L+Xj2k8IlD3vfo03OFU1AL7xceFShEBFnJCvon81cL5MVTS
hM83q49AJ7mI9OO75FlwXio1rYWjvTqQcKWbFBp3yGaccmLZcm8ICclxZdzCKb5H
b1Vj0mbJ7HAx/NPyfa7BLT571LrmlOfmOiS64D7CV7xDvRRmEs/3SDYXoQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFJ4+Jrxan7xFMq+YIoisEeAVWUJ6MB8GA1UdIwQY
MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt
N2JmODI3N2Q4YTJmLzEvbmo0bXZGcWZ2RVV5cjVnaWlLd1I0QlZaUW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm
LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAeBAIAATAYAwQALZyDAwQC
bWnQAwQAubSNAwQBueLEMBoEAgACMBQwEgMHACoQA8AAAwMHASoQA8AABDANBgkq
hkiG9w0BAQsFAAOCAQEAeN1WNXGCNXo9lY4J9touPLltzxiAPojxrW2c0Fdgactm
l6Y2E7fKCODAraHTcn2ckkUg2EwZYAcIyk9uLUil+yw/eTIqbYMVB+b2U9She4gs
cmxmvQAWAOZhhRUvnuQ6B7ZHVFU4tzYsurLFpE/elz4zYQMMD0+KsBDT4U1Mq5of
vHYWmHk342kuosbgJDS4Lp6BlpWtVptfzzm7f+Y7kAs1t1Jxp+vhvjfYD6OtxtG9
+9HB/SClDd4vZXYrs615RhSZ7KgNLe45MNDSnuop3/ZvK2elc6r0m17glzZzG+ib
kM2DK/MvM2LEg4PntH6IieeYh7x6lMsWxUJE4fKYlg==
-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:03 2026 by rpki-client