Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/14EntEiQKF7WbYUSCRCGbvKAnA8.roa
File: 14EntEiQKF7WbYUSCRCGbvKAnA8.roa (raw, json)
Hash identifier: fD/9auj6RlWoUjGIPuURL2poD9aDGdre6C/qaD3tr+U=
Subject key identifier: D7:81:27:B4:48:90:28:5E:D6:6D:85:12:09:10:86:6E:F2:80:9C:0F
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019C6FE4841D7FFF091BC65BA057B9DC2745
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/14EntEiQKF7WbYUSCRCGbvKAnA8.roa
Signing time: Wed 18 Feb 2026 08:36:12 +0000
ROA not before: Wed 18 Feb 2026 08:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43139
IP address blocks: 91.196.148.0/22 maxlen: 22
94.158.80.0/20 maxlen: 20
109.207.192.0/20 maxlen: 20
178.158.192.0/18 maxlen: 24
185.104.191.0/24 maxlen: 24
185.199.96.0/22 maxlen: 22
195.128.25.0/24 maxlen: 24
195.128.26.0/23 maxlen: 23
195.128.27.0/24 maxlen: 24
2001:67c:738::/48 maxlen: 48
2a0a:9b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:e4:84:1d:7f:ff:09:1b:c6:5b:a0:57:b9:dc:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Feb 18 08:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d78127b44890285ed66d85120910866ef2809c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:4a:ca:c7:29:d0:bb:29:b3:b1:d4:59:43:
cd:79:a3:53:ad:58:83:1b:0e:49:9b:60:56:d9:76:
52:8a:29:93:ed:59:32:00:22:81:76:7e:dd:1d:97:
24:17:fe:4a:0d:c6:07:0a:f0:48:41:f8:6f:9b:dc:
01:08:45:b3:ce:fa:5c:02:db:af:6d:49:b8:18:7a:
2a:d6:23:10:ba:9a:29:90:b0:cc:b1:a1:ba:23:33:
49:0c:e5:f5:33:e9:2c:c5:49:e8:db:7a:27:b3:66:
f0:c8:48:c2:e7:a4:c2:c4:c0:b8:a9:52:70:65:7b:
4b:7e:3e:9f:10:3d:90:a4:c3:97:46:a1:6c:34:b5:
f8:48:2d:e0:c2:17:3b:d9:d1:2d:57:08:55:96:8e:
19:b3:5f:e4:a3:df:bc:1e:0d:dd:26:4d:48:7c:7f:
d2:6c:40:66:2b:a1:d9:bf:91:cf:f0:15:ab:cc:97:
28:16:a3:7b:54:eb:7a:93:06:d3:b2:57:d5:0e:92:
49:52:d7:35:26:f5:9c:0c:f0:ec:82:0f:47:a3:f4:
c7:80:05:ae:39:83:4f:1e:7e:c0:30:25:a1:98:36:
fa:85:38:72:a9:b7:46:f1:d7:7f:d4:e3:59:c0:d1:
ad:d3:d0:ad:c8:e5:21:15:f7:15:a5:c7:12:37:ab:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:27:B4:48:90:28:5E:D6:6D:85:12:09:10:86:6E:F2:80:9C:0F
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/14EntEiQKF7WbYUSCRCGbvKAnA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.148.0/22
94.158.80.0/20
109.207.192.0/20
178.158.192.0/18
185.104.191.0/24
185.199.96.0/22
195.128.25.0-195.128.27.255
IPv6:
2001:67c:738::/48
2a0a:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
c0:64:9c:d1:8b:b0:73:7b:50:16:e0:75:51:ea:a4:6a:81:ec:
2d:d1:65:1e:a2:52:b6:ca:29:bb:f5:ea:6e:93:d5:a8:ee:ef:
ed:20:54:60:43:2f:4c:64:4d:c9:b7:f4:97:53:70:87:77:8c:
e3:a0:c4:b0:5f:6b:40:a6:9f:55:48:f1:ea:56:a4:5c:06:10:
43:be:3f:91:a1:0b:28:d6:3b:5d:79:3f:92:3c:81:83:30:69:
d7:da:ac:b5:ed:3e:8e:d3:56:bc:13:d9:dc:9a:4e:de:61:33:
16:e3:fb:64:75:85:35:63:d0:ed:91:9a:6f:c6:63:af:ce:50:
b7:1f:8c:ba:c0:e4:f9:55:8e:44:ed:ed:93:78:64:42:17:13:
32:3f:80:d4:cc:e4:29:80:af:f7:88:04:0e:e4:9a:ae:3c:d3:
5f:c9:e8:3d:dc:41:12:9e:3e:ca:53:c2:11:8f:f5:4c:01:76:
f3:1b:f0:50:92:da:cb:4a:6b:ce:9d:05:ae:c1:b1:d5:68:f8:
43:3a:d7:c4:1e:3e:93:43:c7:ff:38:97:de:f0:ac:54:37:67:
5a:7a:04:13:ee:37:2a:6b:06:0c:1e:dc:ec:d0:ac:1f:bd:18:
df:6b:23:ee:f8:fb:c8:e4:fa:a5:1d:ae:bb:85:c4:de:5f:a1:
3a:78:a4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:54 2026 by rpki-client