Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/0PHbd041nxhJwiuoDVCJZX9k2kI.roa
File: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (raw, json)
Hash identifier: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=
Subject key identifier: D0:F1:DB:77:4E:35:9F:18:49:C2:2B:A8:0D:50:89:65:7F:64:DA:42
Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Certificate serial: 019C81BD395A4D7DF6846900407E373D9BC7
Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/0PHbd041nxhJwiuoDVCJZX9k2kI.roa
Signing time: Sat 21 Feb 2026 19:46:27 +0000
ROA not before: Sat 21 Feb 2026 19:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 2a13:a740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bd:39:5a:4d:7d:f6:84:69:00:40:7e:37:3d:9b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Validity
Not Before: Feb 21 19:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0f1db774e359f1849c22ba80d5089657f64da42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:ca:84:7c:71:51:0e:43:a1:29:b9:7b:b5:
df:f1:1e:c5:ad:46:0d:f5:15:c6:28:0c:17:01:78:
a2:ab:06:61:0b:b2:91:3d:75:45:1a:0c:f9:f5:47:
da:0a:ca:c6:b6:49:42:cf:47:3f:f9:4c:96:d6:7c:
b5:76:12:d9:31:8c:eb:8d:9d:da:73:35:7b:11:7b:
53:32:95:cd:01:ca:68:b6:00:41:d9:11:9b:09:53:
12:2a:ca:e5:53:66:98:c8:c8:b1:77:be:a6:b4:c9:
12:3b:6b:e2:fe:d7:25:22:2f:27:dc:8f:44:bf:56:
9d:78:07:93:7a:d1:02:46:d1:5c:60:5a:2a:f0:d4:
93:b3:f5:45:c7:5d:c0:c7:8d:51:f6:98:27:31:b9:
7e:8a:ce:bb:71:80:85:6e:f7:5c:86:2c:74:1f:ca:
fe:74:30:5b:fb:06:77:b6:c1:21:dc:b0:8a:1f:38:
b4:20:ee:1c:02:dd:7c:97:16:c6:33:1d:9a:db:10:
33:d1:4c:2a:53:aa:c6:b7:de:0f:79:d2:0a:a6:9e:
1b:06:e8:e5:5b:b5:a9:7a:26:8a:b3:da:fb:69:cc:
1c:86:4d:71:9c:aa:34:cd:4e:1b:6c:e6:79:ef:f0:
e7:8e:59:97:fc:6b:14:95:ce:84:66:cf:f0:ca:0d:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:DB:77:4E:35:9F:18:49:C2:2B:A8:0D:50:89:65:7F:64:DA:42
X509v3 Authority Key Identifier:
keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/0PHbd041nxhJwiuoDVCJZX9k2kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a740::/29
Signature Algorithm: sha256WithRSAEncryption
71:bd:2b:7a:5e:0d:32:23:ac:58:d4:1f:f8:57:cb:8a:10:0c:
48:b0:c9:25:e7:08:3b:08:da:de:12:01:96:3a:56:15:c6:b9:
14:bb:fe:d2:9f:7b:22:a8:ca:d1:a1:a3:bc:55:3e:64:f4:89:
ad:e1:9a:d1:71:a9:86:54:9c:0e:45:ac:86:d3:1e:a1:24:f8:
dc:45:e8:7b:40:82:70:e6:9e:8c:31:a2:e7:b8:75:de:c2:b5:
de:8a:44:df:ab:5a:88:59:ac:44:8d:a2:06:79:6c:6a:03:13:
d8:37:c9:8e:90:4a:0f:44:7b:6e:bf:e2:36:00:74:15:2b:65:
a0:7b:d5:a9:44:7b:18:ba:1b:bb:58:4d:86:6c:9c:4e:be:4f:
3b:bf:c8:6e:9e:7d:fe:85:45:db:21:7e:54:99:86:3b:66:49:
f7:40:b8:4b:88:0e:ec:d4:cf:74:8e:3c:8d:d1:5a:72:85:2b:
7e:b3:4a:1a:e5:f8:07:c0:ae:23:4d:2e:f3:a2:f3:6d:59:83:
f8:ea:79:6c:69:f3:40:cd:3b:c0:c8:47:49:e1:fc:6b:07:3a:
be:f8:64:55:be:a3:e1:a3:74:31:91:24:12:82:9c:58:d4:fa:
c7:01:a8:4e:55:80:80:93:01:a4:c6:82:59:b7:ee:9f:31:d0:
90:a7:b7:73
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyBvTlaTX32hGkAQH43PZvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk
NjY5N2UwHhcNMjYwMjIxMTk0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGYxZGI3NzRlMzU5ZjE4NDljMjJiYTgwZDUwODk2NTdmNjRkYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T7KhHxxUQ5DoSm5e7Xf8R7FrUYN
9RXGKAwXAXiiqwZhC7KRPXVFGgz59UfaCsrGtklCz0c/+UyW1ny1dhLZMYzrjZ3a
czV7EXtTMpXNAcpotgBB2RGbCVMSKsrlU2aYyMixd76mtMkSO2vi/tclIi8n3I9E
v1adeAeTetECRtFcYFoq8NSTs/VFx13Ax41R9pgnMbl+is67cYCFbvdchix0H8r+
dDBb+wZ3tsEh3LCKHzi0IO4cAt18lxbGMx2a2xAz0UwqU6rGt94PedIKpp4bBujl
W7WpeiaKs9r7acwchk1xnKo0zU4bbOZ57/DnjlmX/GsUlc6EZs/wyg3zgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNDx23dONZ8YScIrqA1QiWV/ZNpCMB8GA1UdIwQY
MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt
MTZkYmE1NDNiNTU4LzEvMFBIYmQwNDFueGhKd2l1b0RWQ0paWDlrMmtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4
LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOnQDAN
BgkqhkiG9w0BAQsFAAOCAQEAcb0rel4NMiOsWNQf+FfLihAMSLDJJecIOwja3hIB
ljpWFca5FLv+0p97IqjK0aGjvFU+ZPSJreGa0XGphlScDkWshtMeoST43EXoe0CC
cOaejDGi57h13sK13opE36taiFmsRI2iBnlsagMT2DfJjpBKD0R7br/iNgB0FStl
oHvVqUR7GLobu1hNhmycTr5PO7/Ibp59/oVF2yF+VJmGO2ZJ90C4S4gO7NTPdI48
jdFacoUrfrNKGuX4B8CuI00u86LzbVmD+Op5bGnzQM07wMhHSeH8awc6vvhkVb6j
4aN0MZEkEoKcWNT6xwGoTlWAgJMBpMaCWbfunzHQkKe3cw==
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:34:10 2026 by rpki-client