Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/zyxXbI9OnQu5jq-ynP8CkpOvBoY.roa
File: zyxXbI9OnQu5jq-ynP8CkpOvBoY.roa (raw, json)
Hash identifier: oCay3sttgXTbZ2VbrlKNbQDyzc/lwZ/odvgbaMZNPfo=
Subject key identifier: CF:2C:57:6C:8F:4E:9D:0B:B9:8E:AF:B2:9C:FF:02:92:93:AF:06:86
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019C711AE1EAE9D7FAAB1DC0E33C748C0F0F
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/zyxXbI9OnQu5jq-ynP8CkpOvBoY.roa
Signing time: Wed 18 Feb 2026 14:15:12 +0000
ROA not before: Wed 18 Feb 2026 14:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 378
IP address blocks: 128.139.0.0/16 maxlen: 24
128.139.0.0/17 maxlen: 17
128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
128.139.128.0/17 maxlen: 17
128.139.199.0/24 maxlen: 24
128.139.200.0/24 maxlen: 24
132.78.0.0/16 maxlen: 16
185.115.212.0/22 maxlen: 22
192.114.0.0/21 maxlen: 21
192.114.0.0/24 maxlen: 24
192.114.1.0/24 maxlen: 24
192.114.2.0/24 maxlen: 24
192.114.16.0/21 maxlen: 21
192.114.48.0/21 maxlen: 21
192.114.49.0/24 maxlen: 24
192.114.50.0/24 maxlen: 24
192.114.56.0/22 maxlen: 22
192.114.60.0/23 maxlen: 23
192.114.92.0/22 maxlen: 22
192.114.96.0/20 maxlen: 20
192.114.100.0/24 maxlen: 24
192.114.101.0/24 maxlen: 24
192.114.102.0/24 maxlen: 24
192.114.124.0/22 maxlen: 22
192.114.128.0/20 maxlen: 20
192.114.192.0/18 maxlen: 18
192.115.32.0/20 maxlen: 20
192.115.40.0/24 maxlen: 24
192.115.46.0/24 maxlen: 24
192.115.64.0/22 maxlen: 22
192.115.164.0/22 maxlen: 22
192.115.168.0/21 maxlen: 21
192.115.192.0/21 maxlen: 21
192.117.80.0/20 maxlen: 20
2001:bf8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:1a:e1:ea:e9:d7:fa:ab:1d:c0:e3:3c:74:8c:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Feb 18 14:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf2c576c8f4e9d0bb98eafb29cff029293af0686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:f7:97:c2:49:61:6f:19:6e:84:04:72:a0:
4c:13:2b:92:09:db:92:c3:6b:fe:f1:33:f4:1f:27:
e9:b4:34:ca:bf:d6:3b:f3:dc:57:3f:2f:3a:f7:79:
22:58:79:48:ee:bc:7a:8c:24:c2:fd:89:8c:32:6f:
76:a6:f8:e7:ee:93:89:39:06:09:fa:48:3b:51:b5:
35:91:e0:9b:62:7b:d4:c7:78:d1:6d:4b:14:c7:29:
a3:40:61:42:35:c2:60:6e:e8:df:b9:37:79:c3:85:
73:15:cf:bd:53:cf:67:dc:7f:b7:be:9f:8c:17:83:
63:86:ae:87:31:ad:06:9b:45:ac:b9:2d:e2:ec:77:
bb:21:93:5b:35:84:65:98:d3:44:1b:a2:ca:63:4c:
32:b2:e5:0d:74:00:94:7e:a3:9f:f6:6c:f5:f5:6b:
05:75:df:ed:b7:a2:d5:f3:ae:2f:ce:d0:81:9b:56:
44:3d:77:ec:e4:45:59:5f:6d:05:ba:21:9e:08:dc:
96:b5:5b:8f:55:bf:5f:ad:81:0d:5d:14:a6:eb:5f:
4e:ec:bd:d8:d1:6e:97:03:ad:0a:0a:1d:51:65:60:
81:fe:b7:0d:e4:62:b6:dd:db:d6:e9:4a:fd:b6:65:
db:21:7a:10:13:8b:76:7b:f9:77:95:bb:6a:ea:14:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:57:6C:8F:4E:9D:0B:B9:8E:AF:B2:9C:FF:02:92:93:AF:06:86
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/zyxXbI9OnQu5jq-ynP8CkpOvBoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
132.78.0.0/16
185.115.212.0/22
192.114.0.0/21
192.114.16.0/21
192.114.48.0-192.114.61.255
192.114.92.0-192.114.111.255
192.114.124.0-192.114.143.255
192.114.192.0/18
192.115.32.0/20
192.115.64.0/22
192.115.164.0-192.115.175.255
192.115.192.0/21
192.117.80.0/20
IPv6:
2001:bf8::/32
Signature Algorithm: sha256WithRSAEncryption
99:c1:a3:30:39:c3:16:94:80:af:e9:87:ea:d6:d6:a3:f3:0d:
9f:b6:c0:49:49:26:48:8e:15:a0:b1:d7:75:5c:7a:2e:d6:f7:
8a:f4:2f:3b:3d:8a:4a:5d:ff:b8:91:b4:48:d7:37:09:75:39:
fc:30:fa:dc:4d:0a:64:3a:57:9c:0c:d1:be:67:53:be:67:a7:
7c:fb:70:ab:c0:62:2c:7c:f4:db:3c:19:79:70:d1:10:e5:89:
2b:1e:bf:a7:b8:2b:d7:b6:72:b7:f5:99:e6:64:71:08:ec:8d:
41:8f:43:35:88:f9:87:04:b5:3e:52:80:eb:79:ec:bb:2f:5c:
ae:fa:18:2e:f3:a1:90:eb:fb:d4:d2:18:25:d9:91:ea:8e:a9:
00:8d:bd:d7:8d:36:be:55:c3:e2:c0:21:98:01:01:d1:b7:85:
f6:2e:46:ed:a2:b8:ce:4f:03:80:eb:ce:78:7a:4c:13:e3:6c:
1d:d2:fc:30:88:f5:d3:b2:7a:6a:61:49:b8:20:20:46:5b:66:
3b:6f:20:6a:74:7b:2b:e7:33:8d:b6:45:74:77:2e:72:c8:ff:
e4:a5:08:e1:bb:1d:c7:2c:fe:d6:ed:14:80:53:c5:af:a1:40:
1e:77:be:c1:7f:56:2a:5e:f1:b9:26:08:c0:0e:96:3b:f8:c3:
0b:ac:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:24 2026 by rpki-client