Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/vFIwAzBWf5hLUk_C60sKa4u-Hgg.roa
File: vFIwAzBWf5hLUk_C60sKa4u-Hgg.roa (raw, json)
Hash identifier: 80SZxBpW+GH4V/rwts3MicZ6OM8HiXOFlZ60y63Wyrw=
Subject key identifier: BC:52:30:03:30:56:7F:98:4B:52:4F:C2:EB:4B:0A:6B:8B:BE:1E:08
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019C77503C73E460F96352AB6C2A38F7C66A
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/vFIwAzBWf5hLUk_C60sKa4u-Hgg.roa
Signing time: Thu 19 Feb 2026 19:11:12 +0000
ROA not before: Thu 19 Feb 2026 19:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 31.64.0.0/12 maxlen: 12
31.90.0.0/15 maxlen: 15
31.92.0.0/15 maxlen: 15
31.94.0.0/16 maxlen: 16
31.96.0.0/16 maxlen: 16
31.100.0.0/14 maxlen: 14
31.104.0.0/16 maxlen: 16
31.106.0.0/15 maxlen: 15
31.112.0.0/14 maxlen: 14
31.116.0.0/14 maxlen: 14
31.116.0.0/16 maxlen: 16
31.117.0.0/16 maxlen: 16
31.118.0.0/16 maxlen: 16
31.119.0.0/16 maxlen: 16
31.120.0.0/16 maxlen: 16
31.121.0.0/16 maxlen: 16
31.122.0.0/15 maxlen: 15
31.124.0.0/16 maxlen: 16
31.126.0.0/15 maxlen: 15
46.68.0.0/15 maxlen: 15
46.68.66.0/24 maxlen: 24
91.111.0.0/16 maxlen: 16
95.144.0.0/13 maxlen: 13
109.180.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:50:3c:73:e4:60:f9:63:52:ab:6c:2a:38:f7:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Feb 19 19:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc52300330567f984b524fc2eb4b0a6b8bbe1e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:04:8c:93:11:2b:ba:78:9e:19:b0:51:9c:
2d:14:60:09:a7:0d:48:db:2e:28:91:d8:91:53:45:
c1:4f:b6:80:90:ce:2c:5d:55:03:b6:f4:b7:36:66:
6c:21:dc:52:84:db:37:95:ef:ff:52:2e:74:4b:ac:
76:91:53:f7:45:94:f4:a2:85:05:20:f4:bd:07:36:
ae:59:72:8d:67:6a:57:18:5f:a1:7f:3d:7d:1c:97:
03:bf:29:9d:98:75:4c:8a:24:0a:39:ea:58:87:40:
e9:51:c3:06:80:6d:ee:4b:6e:f8:a4:2e:7b:43:81:
20:63:3e:07:96:70:20:44:a3:1e:6a:54:3a:38:46:
6d:b0:52:72:55:96:5c:a2:98:aa:56:8a:aa:29:bb:
31:d2:e6:4d:40:d7:32:2d:fa:ce:a1:0f:95:db:86:
0c:01:5f:2a:b3:95:a6:b1:01:2e:09:0f:5d:6d:81:
2e:71:0c:05:34:92:ef:4b:f0:fe:7e:8e:22:77:35:
ff:91:27:66:43:10:d5:f6:dc:a2:d6:ff:37:89:18:
ad:4b:0c:1d:7f:85:2c:23:91:de:c5:e0:3e:37:e6:
c0:8a:c4:fb:43:62:93:a4:c1:66:a3:2b:d8:dc:48:
56:10:7f:76:d6:d7:41:37:2e:f4:51:9f:02:bd:a5:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:30:03:30:56:7F:98:4B:52:4F:C2:EB:4B:0A:6B:8B:BE:1E:08
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/vFIwAzBWf5hLUk_C60sKa4u-Hgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.64.0.0/12
31.90.0.0-31.94.255.255
31.96.0.0/16
31.100.0.0-31.104.255.255
31.106.0.0/15
31.112.0.0-31.124.255.255
31.126.0.0/15
46.68.0.0/15
91.111.0.0/16
95.144.0.0/13
109.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
16:6f:cb:11:25:a1:24:2d:41:09:7d:94:f0:37:6d:fb:f9:b3:
1d:88:52:af:64:93:fe:38:d1:0c:96:ff:83:77:37:c8:62:9a:
83:7a:51:ce:34:03:49:e7:b8:42:27:84:0b:b0:2c:02:e9:94:
10:5b:33:1f:6d:57:7b:63:b2:a5:0f:7c:0e:72:24:28:90:e1:
8f:92:79:7f:4a:4d:93:73:16:f7:0c:71:56:99:fe:19:ac:ef:
20:f9:b0:16:36:3a:1d:46:07:07:f3:4a:3b:4d:5c:a2:c9:ce:
e7:ed:97:da:6e:f0:00:13:90:4d:25:9a:16:ea:0f:14:2f:ce:
d8:9d:a3:d5:ab:74:56:c3:f4:7e:cd:b6:3e:74:cf:73:e6:cb:
54:97:6e:ad:fa:ab:0f:75:6d:25:ea:39:82:27:d5:e2:32:b2:
93:d1:b6:c7:4f:25:f3:ff:cc:fb:31:dc:97:7e:48:e6:20:0d:
a4:67:7b:bb:41:f5:e7:69:05:a9:96:78:03:8e:ed:97:ef:3a:
0f:c0:db:66:4b:3e:de:92:78:49:26:b3:6b:62:8f:25:f7:4c:
a8:cf:de:2a:3d:2e:21:2f:45:db:e6:3d:50:ef:42:b7:6e:86:
43:61:b1:59:e9:a5:25:d9:3c:8b:98:b1:28:97:e5:59:d5:ff:
b5:8f:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 07:12:22 2026 by rpki-client