Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/2V6tdUxiqVKneaVdrbJ3uovbgVA.roa
File: 2V6tdUxiqVKneaVdrbJ3uovbgVA.roa (raw, json)
Hash identifier: Yw91g0FZ9Kp1Cv1kNatYsOFvczojORt+cxvTk8TIlmo=
Subject key identifier: D9:5E:AD:75:4C:62:A9:52:A7:79:A5:5D:AD:B2:77:BA:8B:DB:81:50
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 019C705699002C118EBA698B48DB47D2FB02
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/2V6tdUxiqVKneaVdrbJ3uovbgVA.roa
Signing time: Wed 18 Feb 2026 10:40:49 +0000
ROA not before: Wed 18 Feb 2026 10:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52180
IP address blocks: 91.222.244.0/22 maxlen: 22
91.222.244.0/23 maxlen: 23
91.222.244.0/24 maxlen: 24
91.222.245.0/24 maxlen: 24
91.222.246.0/23 maxlen: 23
91.222.246.0/24 maxlen: 24
91.222.247.0/24 maxlen: 24
193.242.156.0/22 maxlen: 22
193.242.156.0/23 maxlen: 23
193.242.157.0/24 maxlen: 24
193.242.158.0/23 maxlen: 23
193.242.158.0/24 maxlen: 24
193.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:56:99:00:2c:11:8e:ba:69:8b:48:db:47:d2:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: Feb 18 10:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d95ead754c62a952a779a55dadb277ba8bdb8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:31:33:58:57:46:2b:06:f4:aa:8e:5f:df:
76:49:b4:55:6f:90:67:60:4c:08:77:04:8a:87:67:
77:ba:a4:6d:1b:ea:60:4e:80:de:37:aa:9c:97:5d:
b1:e2:d3:fe:b3:d5:5b:68:54:ad:5a:67:8a:3a:8e:
b3:89:f2:b9:58:7b:d1:f0:39:9d:92:c9:35:84:bc:
5c:b8:af:75:17:b0:66:30:43:76:4b:15:15:21:88:
9e:f0:ed:38:0f:3e:74:c6:06:f0:4c:ed:8c:e6:3c:
68:84:0d:bc:ec:42:ab:83:b5:d0:0c:11:1a:96:08:
9e:6c:c6:00:cd:00:42:17:69:10:ce:2b:ba:69:d3:
66:87:eb:4f:c0:a2:2e:c9:3c:74:b3:77:0f:a7:17:
0b:1e:d1:5c:06:cb:b6:47:96:4e:cf:d9:3e:24:70:
2a:e1:b0:c6:88:4e:f1:10:fb:0d:d6:3e:d5:27:58:
ba:1f:51:a7:e2:ef:b5:12:5f:06:71:a1:88:6c:24:
79:bd:eb:9c:fe:5f:dc:32:de:d3:0b:1b:f9:4f:3a:
eb:c4:32:4a:f9:88:d6:7e:97:68:f5:70:24:da:46:
8f:78:35:11:e7:9b:29:5c:75:19:47:ab:69:8c:51:
cd:ff:e7:1f:04:49:ed:17:e8:88:b1:d0:b9:5c:9d:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:AD:75:4C:62:A9:52:A7:79:A5:5D:AD:B2:77:BA:8B:DB:81:50
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/2V6tdUxiqVKneaVdrbJ3uovbgVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.244.0/22
193.242.156.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d7:29:39:1f:53:8f:07:d8:d7:e7:b2:9f:49:2a:2f:ba:6e:
67:65:71:a7:b6:e2:a4:81:58:aa:0c:40:c9:d3:9e:cd:4b:82:
40:38:e0:28:d7:88:44:08:52:32:70:13:d7:32:3f:d5:ba:0f:
7e:a7:24:ab:68:ec:d7:1d:6a:48:26:e3:36:0b:be:4d:14:1b:
41:59:d9:97:08:63:4a:a1:ca:03:3b:6e:21:df:a4:0a:38:75:
d1:97:6e:87:87:b6:88:df:d0:c3:7e:58:8a:1b:30:f6:b3:1a:
82:81:70:81:5e:cc:4a:57:d3:de:45:ba:c2:54:39:c2:0e:06:
07:37:97:c8:ac:22:fe:1a:c5:4b:33:49:23:52:d4:78:fd:c3:
cd:66:c3:74:5f:5d:72:c9:e9:a7:92:dd:ae:21:d8:18:92:bb:
83:b2:e9:f3:72:93:cd:54:55:58:01:7b:66:71:9c:7d:52:bb:
0d:30:34:d8:5e:7c:2c:5a:c2:07:07:19:44:ab:c5:f6:d4:1b:
0b:0a:8c:15:a7:6e:ec:a2:f7:e7:64:0f:71:2a:f9:1a:e3:13:
39:fb:88:79:49:9d:09:ee:0d:64:06:e0:a4:f3:9e:21:23:ac:
dd:c0:98:cf:a8:4d:3e:4a:48:9e:43:0d:8d:6b:18:53:21:c0:
92:b6:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:04 2026 by rpki-client