Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/sLfKVl1lQjJ7u_89zURwHmTq8TY.roa
File: sLfKVl1lQjJ7u_89zURwHmTq8TY.roa (raw, json)
Hash identifier: qcEWl+BofaZ9g5UX8MbafwS79+h+Y6qJogFE2VDDyZs=
Subject key identifier: B0:B7:CA:56:5D:65:42:32:7B:BB:FF:3D:CD:44:70:1E:64:EA:F1:36
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A0E7E8475D774D8B4B4FBFF8787F63D720
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/sLfKVl1lQjJ7u_89zURwHmTq8TY.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 212.124.68.0/24 maxlen: 24
212.124.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:47:5d:77:4d:8b:4b:4f:bf:f8:78:7f:63:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b7ca565d6542327bbbff3dcd44701e64eaf136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:2c:8b:e6:d3:22:48:3b:6a:cd:35:aa:37:
14:8f:70:40:76:9a:65:cc:d8:31:7b:c2:b7:d7:dc:
53:4e:aa:f5:eb:38:9a:21:8a:e9:40:7a:98:dd:7f:
7d:c1:e8:85:32:60:4a:34:ca:73:8e:81:27:f5:81:
96:46:49:36:7e:0f:58:d8:71:99:f8:5b:48:a3:1a:
f3:a9:39:43:92:1c:28:32:06:f5:66:0a:25:1e:19:
69:65:02:16:f9:41:0f:fe:fe:ab:49:9c:f6:62:8c:
0f:21:09:06:87:ce:89:80:7b:cd:4a:7e:cd:97:80:
bb:9b:92:85:ef:ad:93:e4:3c:a6:28:65:cb:8a:4e:
49:89:4b:8b:45:e8:83:e3:1f:2f:73:a2:35:c4:ff:
12:32:0d:52:e4:e9:7d:67:4c:dc:61:fb:6a:6b:31:
11:fb:d1:34:f2:d9:88:96:01:38:da:ef:6c:2a:84:
89:99:eb:92:9a:8e:4a:5f:59:09:3e:45:77:38:5a:
6c:33:0c:8d:32:30:e9:ac:16:33:8f:6a:5f:84:e4:
27:20:f3:67:a7:41:18:6c:07:d4:c6:be:f0:ab:4f:
e5:9e:69:30:e5:c3:60:c7:74:06:9e:88:80:5c:56:
1f:44:e8:cc:90:5c:a6:ca:15:6a:ef:4c:d2:ce:87:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:CA:56:5D:65:42:32:7B:BB:FF:3D:CD:44:70:1E:64:EA:F1:36
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/sLfKVl1lQjJ7u_89zURwHmTq8TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0/24
212.124.72.0/22
Signature Algorithm: sha256WithRSAEncryption
37:05:3f:90:41:6f:f6:30:7d:bf:66:a2:9b:64:b7:0a:ea:3e:
21:92:e2:6c:42:5f:db:49:42:39:85:e1:e9:bb:a1:b8:b5:e4:
d2:af:47:e9:94:b3:16:1e:24:23:15:37:4d:97:f1:a3:01:04:
b5:0a:b1:fa:2b:a8:b7:1c:a3:73:6f:69:bc:72:c6:eb:36:db:
d3:05:d2:b1:2d:7c:a2:b8:eb:9e:dd:f2:f6:62:77:ae:0c:24:
e8:ee:74:98:fa:12:e9:31:8c:92:2c:2b:99:fa:4b:4e:5d:31:
58:65:06:9a:7b:91:a1:1c:aa:07:15:2b:5e:b4:d3:8c:91:46:
03:81:dc:fe:94:4b:ff:c5:f7:bf:e5:cf:8c:f3:af:46:42:f9:
81:dc:fe:3e:c9:a1:81:ce:e5:d9:1e:74:4e:7d:bf:c2:cf:20:
04:ad:fb:39:f7:cf:dc:ca:c9:53:03:55:c7:3d:b6:e6:de:85:
cc:b7:31:d9:64:3c:4b:f5:a1:a3:6d:2a:04:5d:53:ed:4b:45:
99:03:36:fa:b2:7e:48:6f:10:d3:bf:6d:7f:24:23:be:ad:a1:
4f:a3:62:bb:0b:52:a2:a0:ea:13:4a:eb:e2:cf:27:fc:5e:a4:
e8:98:58:32:e2:ff:99:f5:89:6f:b0:d7:11:50:c3:28:56:0b:
71:9d:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:41 2026 by rpki-client