Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9DpA3Zhij4iEPYu7haA1YIOqXMo.roa
File: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (raw, json)
Hash identifier: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=
Subject key identifier: F4:3A:40:DD:98:62:8F:88:84:3D:8B:BB:85:A0:35:60:83:AA:5C:CA
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019FEBC38CF0511EE30EFDAFA4ECCEFF5B58
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9DpA3Zhij4iEPYu7haA1YIOqXMo.roa
Signing time: Mon 10 Aug 2026 13:01:29 +0000
ROA not before: Mon 10 Aug 2026 13:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219019
IP address blocks: 212.80.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:c3:8c:f0:51:1e:e3:0e:fd:af:a4:ec:ce:ff:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Aug 10 13:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f43a40dd98628f88843d8bbb85a0356083aa5cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:ec:b1:7d:75:5d:86:02:0d:52:a0:f7:ec:
77:19:c5:a4:8f:c1:96:44:cf:82:74:04:a7:0d:ae:
37:f8:9c:e1:b1:39:be:e5:1a:42:ef:da:22:15:84:
83:9e:45:25:bf:9a:da:a3:65:ea:2a:fd:3c:35:89:
59:f0:2d:ee:f6:05:38:e1:7f:d7:40:18:24:4d:69:
27:55:b5:ac:15:6c:45:60:82:39:8b:f5:4f:5f:55:
b7:64:2e:6c:a9:5b:cb:92:90:0d:ae:22:01:4f:fd:
fd:74:ca:5e:bf:68:e3:4e:63:4b:1a:19:ce:c9:0c:
d3:8f:c3:f4:36:73:68:dc:2f:68:78:b9:ed:29:db:
d6:2d:be:2a:32:4b:2a:bd:67:3b:42:2d:af:64:d0:
9f:32:d6:0f:de:a7:de:04:c0:a3:a6:38:a0:fd:3c:
95:72:1b:8a:74:50:3c:1f:02:eb:2d:c5:28:c7:0b:
0f:57:f0:fb:fd:f2:e9:17:0a:f4:d1:52:90:db:30:
3a:4c:52:bc:40:44:e5:6a:e3:60:d5:41:93:0d:54:
29:a4:92:68:4d:94:08:9a:ac:f1:6f:8a:7d:f1:da:
18:73:b5:29:2e:69:fe:dc:83:9d:f4:47:df:91:ac:
13:c7:04:85:46:52:f5:13:c8:d9:11:a5:1d:37:b2:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:40:DD:98:62:8F:88:84:3D:8B:BB:85:A0:35:60:83:AA:5C:CA
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9DpA3Zhij4iEPYu7haA1YIOqXMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a9:38:3b:af:a0:fa:e1:0f:29:da:f6:a2:84:7d:6a:94:69:
1a:1a:65:22:c8:3f:ac:09:5e:0f:63:f7:95:ab:b8:47:40:c7:
1c:91:21:c6:46:0f:41:8c:3b:7e:d2:18:ad:1c:44:0f:4a:7c:
41:ef:f5:03:3f:ba:9b:a2:5c:66:d2:6b:47:a2:59:27:29:da:
22:c1:a5:b8:c9:8e:71:8d:3f:a2:50:0a:22:20:a2:25:5b:99:
c0:49:72:d4:0f:f8:47:62:e4:af:48:b8:72:13:c5:30:8e:2d:
37:fb:2b:f8:16:8f:22:fa:72:b8:25:50:f5:c6:ce:7c:dd:f9:
3e:af:0e:df:0c:ff:1a:d5:ad:38:ae:59:1d:c5:9b:33:c2:24:
db:f4:dc:2b:7a:22:02:8f:ac:b0:e3:c8:af:b9:95:f8:24:8c:
c3:d9:43:6a:0a:77:16:6f:d2:6f:1c:d1:0b:f7:0d:27:70:ca:
84:87:a0:87:f9:34:2b:77:01:e8:41:20:6a:2e:12:3b:a1:8f:
78:a8:f8:c9:1a:fc:8b:56:2e:40:a2:e2:a1:35:30:8d:c7:e9:
19:c9:00:e8:46:62:67:89:58:63:e7:22:f9:18:99:f3:bb:ee:
1b:76:da:49:ed:b4:4e:1f:98:56:f6:43:80:85:af:89:d7:03:
c5:f6:68:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/rw4zwUR7jDv2vpOzO/1tYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwODEwMTMwMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDNhNDBkZDk4NjI4Zjg4ODQzZDhiYmI4NWEwMzU2MDgzYWE1Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aHssX11XYYCDVKg9+x3GcWkj8GW
RM+CdASnDa43+JzhsTm+5RpC79oiFYSDnkUlv5rao2XqKv08NYlZ8C3u9gU44X/X
QBgkTWknVbWsFWxFYII5i/VPX1W3ZC5sqVvLkpANriIBT/39dMpev2jjTmNLGhnO
yQzTj8P0NnNo3C9oeLntKdvWLb4qMksqvWc7Qi2vZNCfMtYP3qfeBMCjpjig/TyV
chuKdFA8HwLrLcUoxwsPV/D7/fLpFwr00VKQ2zA6TFK8QETlauNg1UGTDVQppJJo
TZQImqzxb4p98doYc7UpLmn+3IOd9EffkawTxwSFRlL1E8jZEaUdN7Kq9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQ6QN2YYo+IhD2Lu4WgNWCDqlzKMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvOURwQTNaaGlqNGlFUFl1N2hhQTFZSU9xWE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FAdMA0G
CSqGSIb3DQEBCwUAA4IBAQCXqTg7r6D64Q8p2vaihH1qlGkaGmUiyD+sCV4PY/eV
q7hHQMcckSHGRg9BjDt+0hitHEQPSnxB7/UDP7qbolxm0mtHolknKdoiwaW4yY5x
jT+iUAoiIKIlW5nASXLUD/hHYuSvSLhyE8Uwji03+yv4Fo8i+nK4JVD1xs583fk+
rw7fDP8a1a04rlkdxZszwiTb9NwreiICj6yw48ivuZX4JIzD2UNqCncWb9JvHNEL
9w0ncMqEh6CH+TQrdwHoQSBqLhI7oY94qPjJGvyLVi5AouKhNTCNx+kZyQDoRmJn
iVhj5yL5GJnzu+4bdtpJ7bROH5hW9kOAha+J1wPF9mgK
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:01 2026 by rpki-client