Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/DpcOVa9Nt6WyZo-jc4F2B8cvii4.roa
File: DpcOVa9Nt6WyZo-jc4F2B8cvii4.roa (raw, json)
Hash identifier: /w23cNA5keFWZ7eCICp43aq7lv6Ep32mf5by54qPxvI=
Subject key identifier: 0E:97:0E:55:AF:4D:B7:A5:B2:66:8F:A3:73:81:76:07:C7:2F:8A:2E
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019C77503C1A942607DF3F1422D4289C7E97
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/DpcOVa9Nt6WyZo-jc4F2B8cvii4.roa
Signing time: Thu 19 Feb 2026 19:11:12 +0000
ROA not before: Thu 19 Feb 2026 19:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.26.0.0/15 maxlen: 15
31.99.64.0/18 maxlen: 18
31.99.128.0/18 maxlen: 18
31.99.208.0/20 maxlen: 20
31.99.224.0/19 maxlen: 19
91.110.0.0/17 maxlen: 17
91.110.128.0/17 maxlen: 17
178.98.0.0/15 maxlen: 15
178.100.0.0/14 maxlen: 14
178.106.0.0/16 maxlen: 16
178.107.32.0/19 maxlen: 19
178.107.64.0/18 maxlen: 18
178.107.128.0/17 maxlen: 17
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:50:3c:1a:94:26:07:df:3f:14:22:d4:28:9c:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Feb 19 19:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e970e55af4db7a5b2668fa373817607c72f8a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:34:b6:7e:ae:ff:ba:81:32:71:4b:e0:9a:
8c:c7:9c:79:af:0d:01:97:2d:56:26:a2:ba:e3:84:
35:97:2a:ba:30:a0:51:10:2c:7c:cb:76:13:8b:dc:
6d:89:00:8d:b6:50:84:fc:7f:10:cf:73:d9:ca:7d:
2b:9d:f1:df:1a:87:bd:5b:5e:96:f1:7a:78:6a:69:
cf:a2:ed:99:c5:8e:76:af:ed:5c:93:a2:7b:58:42:
aa:f4:7b:00:c8:78:15:d3:d3:27:29:71:59:f8:68:
fb:ce:6b:d2:f0:4c:fd:36:28:35:29:91:52:0a:43:
9c:05:30:12:db:ae:e1:a7:91:fa:d9:2f:b8:98:a7:
31:7e:a9:3e:1a:c5:16:4f:a5:d2:5c:2c:0f:87:5e:
31:82:38:7f:cb:f7:e4:02:7e:d1:da:cd:77:67:58:
02:de:3d:ab:86:99:24:1f:13:31:0c:ab:12:f2:f9:
db:64:ae:54:2b:30:fc:c8:ea:94:3f:fd:5d:ea:15:
da:55:f6:e0:3e:86:23:86:6a:4f:07:38:a5:e5:b4:
f2:ae:a6:36:f4:9d:71:d7:bf:0a:20:bc:53:c2:a6:
a7:98:6a:02:d4:bc:6f:21:54:a7:04:ca:cd:97:49:
3d:ba:6e:32:8c:7e:3c:14:48:42:41:3e:60:05:03:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:0E:55:AF:4D:B7:A5:B2:66:8F:A3:73:81:76:07:C7:2F:8A:2E
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/DpcOVa9Nt6WyZo-jc4F2B8cvii4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.0.0/15
31.99.64.0-31.99.191.255
31.99.208.0-31.99.255.255
91.110.0.0/16
178.98.0.0-178.103.255.255
178.106.0.0/16
178.107.32.0-178.107.255.255
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
62:21:c3:c0:f3:73:a5:a4:64:21:19:d2:67:01:91:17:01:77:
00:0d:18:50:55:14:6b:4e:4b:9c:bc:21:e9:60:2c:3d:99:d4:
25:b1:e5:41:a5:15:8f:51:dd:88:a7:18:b7:c6:2a:41:d7:df:
8f:21:f2:5d:02:45:a4:d0:c0:3f:2a:9e:0f:78:b7:f6:08:9b:
0f:43:47:59:2d:53:31:6f:6b:11:03:29:d3:e6:0e:4e:9f:e4:
d6:25:92:4c:f0:5c:34:a9:5d:15:c1:7c:09:d0:fe:28:fd:b7:
48:50:37:c6:b6:92:4e:9f:28:15:70:d9:f1:57:08:4a:b1:a9:
0b:4a:bd:9f:59:df:2d:5b:b0:74:73:2d:25:fa:34:cf:a4:e3:
fd:1f:d1:a3:db:6e:30:2e:a1:47:8d:7f:27:8f:0d:1d:b9:84:
3c:e9:a3:36:84:01:67:06:84:78:93:40:82:06:42:49:1f:f1:
61:ed:36:83:78:f9:1f:c8:f7:45:f7:fe:8c:ba:0c:a1:64:5f:
c7:41:14:50:53:1f:d3:f2:30:4a:12:a2:16:0d:f7:91:ed:cb:
68:95:e1:78:cf:82:0d:0d:cb:87:5a:c0:4e:0f:cb:66:9b:db:
35:10:5b:52:1f:cd:15:21:a3:e5:3b:bf:d0:28:36:10:97:f5:
82:29:66:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZx3UDwalCYH3z8UItQonH6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjYwMjE5MTkxMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTk3MGU1NWFmNGRiN2E1YjI2NjhmYTM3MzgxNzYwN2M3MmY4YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL80tn6u/7qBMnFL4JqMx5x5rw0B
ly1WJqK644Q1lyq6MKBRECx8y3YTi9xtiQCNtlCE/H8Qz3PZyn0rnfHfGoe9W16W
8Xp4amnPou2ZxY52r+1ck6J7WEKq9HsAyHgV09MnKXFZ+Gj7zmvS8Ez9Nig1KZFS
CkOcBTAS267hp5H62S+4mKcxfqk+GsUWT6XSXCwPh14xgjh/y/fkAn7R2s13Z1gC
3j2rhpkkHxMxDKsS8vnbZK5UKzD8yOqUP/1d6hXaVfbgPoYjhmpPBzil5bTyrqY2
9J1x178KILxTwqanmGoC1LxvIVSnBMrNl0k9um4yjH48FEhCQT5gBQMEgQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFA6XDlWvTbelsmaPo3OBdgfHL4ouMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvRHBjT1ZhOU50Nld5Wm8tamM0RjJCOGN2aWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBdBAIAATBXAwMBAhowDAME
Bh9jQAMEBh9jgDALAwQEH2PQAwMCH2ADAwBbbjAKAwMBsmIDAwOyYAMDALJqMAsD
BAWyayADAwKyaDAMAwQGuWbAAwQCuWbIAwQCwiTUMA0GCSqGSIb3DQEBCwUAA4IB
AQBiIcPA83OlpGQhGdJnAZEXAXcADRhQVRRrTkucvCHpYCw9mdQlseVBpRWPUd2I
pxi3xipB19+PIfJdAkWk0MA/Kp4PeLf2CJsPQ0dZLVMxb2sRAynT5g5On+TWJZJM
8Fw0qV0VwXwJ0P4o/bdIUDfGtpJOnygVcNnxVwhKsakLSr2fWd8tW7B0cy0l+jTP
pOP9H9Gj224wLqFHjX8njw0duYQ86aM2hAFnBoR4k0CCBkJJH/Fh7TaDePkfyPdF
9/6MugyhZF/HQRRQUx/T8jBKEqIWDfeR7ctoleF4z4INDcuHWsBOD8tmm9s1EFtS
H80VIaPlO7/QKDYQl/WCKWbK
-----END CERTIFICATE-----
Generated at Sat Feb 21 03:41:54 2026 by rpki-client