Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa
File: T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa (raw, json)
Hash identifier: i3KW8teSoi0sbHI5DCnh1Lo1CTu11nrhhb/yogb0zzM=
Subject key identifier: 4F:AC:00:66:5C:4E:04:77:88:C6:C8:F9:72:74:A8:FD:BE:59:F5:23
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019C7C179811FB15E4F57530ADAD330E1CF4
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa
Signing time: Fri 20 Feb 2026 17:27:26 +0000
ROA not before: Fri 20 Feb 2026 17:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34412
IP address blocks: 31.25.90.0/24 maxlen: 24
31.25.91.0/24 maxlen: 24
62.204.61.0/24 maxlen: 24
77.72.80.0/24 maxlen: 24
91.228.192.0/24 maxlen: 24
91.246.44.0/24 maxlen: 24
146.19.217.0/24 maxlen: 24
185.49.231.0/24 maxlen: 24
185.226.140.0/24 maxlen: 24
185.226.141.0/24 maxlen: 24
185.226.142.0/24 maxlen: 24
185.226.143.0/24 maxlen: 24
193.3.182.0/24 maxlen: 24
2a10:5740::/48 maxlen: 48
2a10:5740:1::/48 maxlen: 48
2a10:5740:2::/48 maxlen: 48
2a10:5740:3::/48 maxlen: 48
2a11:9b40::/48 maxlen: 48
2a11:9b40:1::/48 maxlen: 48
2a11:9b40:2::/48 maxlen: 48
2a11:9b40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:17:98:11:fb:15:e4:f5:75:30:ad:ad:33:0e:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Feb 20 17:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fac00665c4e047788c6c8f97274a8fdbe59f523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:a2:95:68:13:f6:12:9d:8f:0d:be:9d:2e:
7c:85:28:9e:cf:a1:83:cc:7b:60:c0:75:f6:e1:38:
3e:0f:4a:75:91:53:bd:bd:fa:13:6d:09:50:0d:25:
0d:73:f8:ea:27:e1:04:57:f2:cb:76:14:51:c8:aa:
e8:15:82:43:6d:d8:1e:1f:2a:d4:c3:c4:72:5c:b3:
e7:1e:ee:f3:98:70:a7:2e:b8:9a:3d:e2:a2:3f:f6:
37:18:cb:5c:68:ba:cc:7e:15:ed:11:ea:89:c6:38:
af:46:a3:32:fa:e0:f1:a3:f9:d7:73:29:c9:cb:23:
26:21:26:12:45:34:20:b5:cf:d9:e5:76:27:84:d6:
26:f5:be:fc:39:22:f7:c3:b2:42:ee:6b:43:38:5b:
c8:e2:55:09:63:15:49:b1:f5:dc:0e:1b:24:7f:ed:
23:c8:dc:0c:de:ed:eb:c4:dd:60:aa:d0:36:72:a5:
9d:be:5e:5a:07:9d:c9:bc:2c:8b:6e:05:88:0a:90:
5d:19:9e:a1:68:05:52:90:c5:c9:f5:a4:69:31:41:
a9:68:73:53:35:35:6a:5f:6a:60:2e:ed:5e:b3:41:
0b:3d:a2:e8:4c:2e:69:48:f8:34:b5:01:66:95:a8:
9b:02:05:c4:1f:da:1b:cf:1e:fc:46:60:f1:d4:a6:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:00:66:5C:4E:04:77:88:C6:C8:F9:72:74:A8:FD:BE:59:F5:23
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/T6wAZlxOBHeIxsj5cnSo_b5Z9SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.90.0/23
62.204.61.0/24
77.72.80.0/24
91.228.192.0/24
91.246.44.0/24
146.19.217.0/24
185.49.231.0/24
185.226.140.0/22
193.3.182.0/24
IPv6:
2a10:5740::/46
2a11:9b40::/46
Signature Algorithm: sha256WithRSAEncryption
0b:aa:62:23:8b:41:a8:15:92:38:88:cd:7b:98:5c:97:62:d0:
31:e6:e8:25:fe:b5:c5:8c:ad:c8:9b:9e:df:d2:ac:2a:d9:6e:
81:f3:77:29:2f:1a:0c:a9:f6:ca:30:66:bc:03:c9:ed:7a:91:
69:45:b2:a2:3c:8a:df:07:75:41:91:d1:57:b7:39:23:b1:fd:
25:ab:9e:43:25:09:97:a4:c0:dc:35:40:a7:c1:52:19:aa:74:
0f:59:e8:47:88:c7:ec:7a:50:a8:d3:06:98:30:46:46:0c:3a:
8d:57:75:d7:83:75:ed:8e:65:ac:5f:9a:74:73:73:81:54:c0:
2c:c8:6d:e7:99:1b:db:2f:a8:db:a3:fc:eb:ac:a9:f7:f4:e4:
56:85:09:a9:5c:34:3e:b1:2a:9e:09:7d:9b:78:43:21:ba:4d:
26:9f:6e:53:32:48:f3:e5:e5:fc:72:0d:62:0f:00:03:28:37:
e2:e1:6f:29:eb:cf:ea:dc:8c:d6:e0:7a:14:85:b6:36:e3:cb:
64:28:23:33:c5:dc:8e:8e:16:6f:51:92:ff:e7:6e:97:21:89:
d6:76:a7:e9:61:77:0d:e2:af:ee:81:ff:50:08:e1:7c:21:f4:
29:88:6a:9d:fd:45:b2:f6:fe:b0:58:3b:a2:2d:bc:b8:28:cf:
d7:7b:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:56 2026 by rpki-client