Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/t1xYaJRtfUgULrJoptcVd6gvgwY.roa
File: t1xYaJRtfUgULrJoptcVd6gvgwY.roa (raw, json)
Hash identifier: F1TqQ2BADGP1scC8Z1a5EC0HiMkRify0XGZa9awNQiU=
Subject key identifier: B7:5C:58:68:94:6D:7D:48:14:2E:B2:68:A6:D7:15:77:A8:2F:83:06
Certificate issuer: /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial: 019C770D683E9F1886172353C40A7B109161
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/t1xYaJRtfUgULrJoptcVd6gvgwY.roa
Signing time: Thu 19 Feb 2026 17:58:13 +0000
ROA not before: Thu 19 Feb 2026 17:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 195.146.163.0/24 maxlen: 24
195.146.164.0/24 maxlen: 24
195.146.165.0/24 maxlen: 24
195.146.166.0/24 maxlen: 24
195.146.167.0/24 maxlen: 24
195.146.168.0/24 maxlen: 24
195.146.169.0/24 maxlen: 24
195.146.170.0/24 maxlen: 24
195.146.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:0d:68:3e:9f:18:86:17:23:53:c4:0a:7b:10:91:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Validity
Not Before: Feb 19 17:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b75c5868946d7d48142eb268a6d71577a82f8306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:bd:eb:57:19:f0:5c:21:5f:b9:56:a3:59:
3c:47:03:88:b8:e3:24:f4:4d:e4:53:5e:c9:e3:f5:
f8:20:e3:2e:1e:a0:66:78:17:8d:5f:a5:6d:ff:aa:
0c:31:66:52:28:17:46:cd:d7:45:a1:49:61:ba:9b:
5c:3a:7d:8c:f2:1d:f5:0f:0d:27:fb:9c:2d:0e:da:
bb:46:32:8c:f3:9d:80:b5:ae:eb:e4:7a:7f:09:b5:
ea:29:a6:3c:7a:7a:0e:f9:dd:2c:62:87:f3:52:32:
0f:0d:9e:43:e2:12:9c:31:82:04:a2:f3:56:10:2e:
f2:ac:5e:e4:9e:a0:58:1a:60:46:6f:26:3a:dd:5f:
7f:f5:0a:65:3e:f0:11:06:5a:1a:25:12:61:bf:ed:
2e:86:6f:e2:fa:e5:27:b2:15:7f:6c:ae:a1:43:37:
04:72:a8:6f:14:0a:10:19:2a:8c:97:8b:71:40:16:
b0:e2:48:31:7d:fe:f0:3c:f2:6a:15:e1:4c:f7:4f:
29:f9:64:86:93:86:7f:9a:d6:3b:91:96:a2:4d:30:
db:c0:a1:04:a4:4d:04:c6:4f:6e:5c:c8:f2:be:07:
ec:57:7a:d4:bd:dd:81:d3:8a:48:05:0f:b8:79:a2:
b1:c7:ca:85:ac:39:bb:6d:ee:9f:bf:e9:4f:7a:ec:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:58:68:94:6D:7D:48:14:2E:B2:68:A6:D7:15:77:A8:2F:83:06
X509v3 Authority Key Identifier:
keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/t1xYaJRtfUgULrJoptcVd6gvgwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.163.0-195.146.171.255
Signature Algorithm: sha256WithRSAEncryption
57:3e:9d:45:cf:36:b5:dc:60:70:e8:6c:7b:53:87:30:46:ee:
7c:2d:0a:b7:fc:51:67:d3:76:fc:c8:e0:ac:17:85:8b:3d:72:
6e:41:45:fc:c6:88:e1:1e:9c:0f:7c:d8:53:eb:4b:81:9f:47:
a9:45:78:fa:20:17:48:35:12:83:4c:98:03:45:ed:13:56:73:
6b:e0:88:78:e5:62:79:c8:c4:e4:bc:94:c6:99:fd:08:cd:e9:
3e:07:e3:57:2a:3d:e4:10:c9:20:3d:ec:e0:1e:b8:65:52:2e:
ec:48:e3:b4:f4:9a:84:b4:ee:57:ec:bc:91:af:c9:1c:17:50:
39:af:ad:32:eb:56:aa:7c:8e:18:2a:f9:ad:90:80:67:48:e4:
3f:0a:2a:27:ce:ba:8c:6a:97:8a:42:65:e4:8a:bd:42:3d:39:
23:7c:ea:2f:59:f8:53:96:7e:c3:ff:fe:40:68:b0:d2:1d:ba:
23:42:85:d1:77:0a:f3:96:a8:be:04:66:82:ec:e6:37:0e:67:
d1:73:3b:6b:c6:4e:1a:bb:5a:32:0a:1a:e2:d9:45:ce:87:be:
d9:e0:bf:27:da:1c:3e:7b:8e:94:10:8b:f5:73:60:f2:db:1f:
c6:55:bc:be:bd:f3:2b:11:65:67:c4:c0:83:f7:62:7d:d5:53:
ce:f9:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:26 2026 by rpki-client