Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/PHs7RDAQ5f6C6QJjg65O_DBc_-c.roa
File: PHs7RDAQ5f6C6QJjg65O_DBc_-c.roa (raw, json)
Hash identifier: WmEGFP+4Cn7fKps+gmzyeIEs2IvR+78FrG47pR4B3X0=
Subject key identifier: 3C:7B:3B:44:30:10:E5:FE:82:E9:02:63:83:AE:4E:FC:30:5C:FF:E7
Certificate issuer: /CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Certificate serial: 019F339B9B009B019433D3DCEB984ED7BB44
Authority key identifier: D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/PHs7RDAQ5f6C6QJjg65O_DBc_-c.roa
Signing time: Sun 05 Jul 2026 18:47:43 +0000
ROA not before: Sun 05 Jul 2026 18:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6936
IP address blocks: 2a12:72c0::/29 maxlen: 32
2a12:7440::/29 maxlen: 32
2a12:74c0::/29 maxlen: 32
2a12:7540::/29 maxlen: 32
2a12:9ec0::/29 maxlen: 32
2a12:9f40::/29 maxlen: 32
2a12:9fc0::/29 maxlen: 32
2a12:a140::/29 maxlen: 32
2a12:a1c0::/29 maxlen: 32
2a12:a240::/29 maxlen: 32
2a12:a2c0::/29 maxlen: 32
2a12:a540::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:9b:9b:00:9b:01:94:33:d3:dc:eb:98:4e:d7:bb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Validity
Not Before: Jul 5 18:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c7b3b443010e5fe82e9026383ae4efc305cffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:bd:f2:69:a9:fc:9d:cc:e8:2a:ec:da:a2:
70:44:34:4c:90:f3:58:34:96:b3:50:c8:0b:98:44:
a5:6d:38:67:b7:06:68:3e:98:47:6b:a3:61:eb:59:
1e:9b:49:8b:07:1f:e4:8f:a0:1e:5b:0e:bc:98:e8:
e4:28:a1:7f:5b:3c:c7:22:11:24:85:4a:e8:d4:bb:
7e:11:57:70:73:76:53:61:9d:41:a0:96:c9:75:c6:
3b:55:a3:78:bc:d4:e7:d6:7e:48:43:ba:b4:66:b7:
3d:44:2c:fa:12:b0:8d:58:18:a3:4b:17:7c:1b:11:
23:a3:cd:57:7e:e3:66:53:7e:49:10:d7:e0:bb:ea:
f9:4a:54:d5:89:21:a6:02:5d:54:64:b1:ee:7b:75:
4b:14:04:0e:fb:92:55:b2:4d:4b:73:08:8b:2f:8c:
3c:e1:d4:db:2e:a9:6d:0c:f1:7e:fd:41:20:0d:52:
39:6a:15:5d:04:23:58:ba:74:3b:2f:70:90:1d:ea:
93:9e:f0:0b:50:6e:29:f3:50:0d:7c:17:c4:9c:20:
76:d2:f4:67:ee:cb:6d:fb:bd:ac:07:f5:50:9d:25:
42:3e:09:6d:18:62:52:2c:94:19:37:49:5e:46:dc:
dc:49:7c:5c:e4:89:d5:c3:f3:a2:e9:63:54:c9:aa:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:3B:44:30:10:E5:FE:82:E9:02:63:83:AE:4E:FC:30:5C:FF:E7
X509v3 Authority Key Identifier:
keyid:D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/PHs7RDAQ5f6C6QJjg65O_DBc_-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:72c0::/29
2a12:7440::/29
2a12:74c0::/29
2a12:7540::/29
2a12:9ec0::/29
2a12:9f40::/29
2a12:9fc0::/29
2a12:a140::/29
2a12:a1c0::/29
2a12:a240::/29
2a12:a2c0::/29
2a12:a540::/29
Signature Algorithm: sha256WithRSAEncryption
28:72:5a:fa:0c:0c:b2:ff:48:c6:f2:1a:8e:16:2a:5a:89:db:
b2:5b:4e:1e:51:78:56:e6:ea:b0:8d:e9:5a:04:86:98:df:70:
e9:64:13:92:d9:ad:c4:f5:0f:28:54:73:c9:d9:18:41:5d:6b:
06:2d:f6:6d:8e:4f:00:52:65:95:82:ef:98:b2:00:15:3b:da:
07:88:ec:02:b1:a0:65:48:2c:a7:82:c6:c2:96:9e:28:10:d3:
ee:1e:c0:51:8a:52:73:ab:14:41:c2:6f:a2:89:e7:ae:3e:59:
76:4d:26:14:17:a2:3d:4f:f1:63:92:a3:4a:b0:c7:3d:e8:1f:
ae:d7:74:1a:ae:fc:45:fb:7e:1e:f5:7a:2d:fe:48:b6:a4:2f:
a7:14:c8:a2:cc:36:59:57:5e:11:e8:f8:99:03:ac:74:40:36:
40:6d:94:62:e0:ae:d3:9b:99:bc:31:2f:c9:be:b4:05:6f:21:
c4:6b:1c:17:06:b3:7e:9d:0c:86:3c:e4:c8:81:aa:83:f9:b6:
a0:95:4b:8e:2b:94:ac:14:f4:e4:91:4a:dc:17:48:0b:bd:dd:
c3:8a:d6:79:59:90:d9:14:18:29:95:23:c9:15:6f:a1:66:8f:
a3:bd:a5:24:26:51:b0:97:7a:9e:da:99:16:e5:ea:65:d9:c3:
72:9f:80:56
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZ8zm5sAmwGUM9Pc65hO17tEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjNmODY4NmI2MTdjNWY5MWM5YmRjMTk3M2JhMjlhMWU0
YTA5MDYwHhcNMjYwNzA1MTg0NzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzdiM2I0NDMwMTBlNWZlODJlOTAyNjM4M2FlNGVmYzMwNWNmZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ji98mmp/J3M6Crs2qJwRDRMkPNY
NJazUMgLmESlbThntwZoPphHa6Nh61kem0mLBx/kj6AeWw68mOjkKKF/WzzHIhEk
hUro1Lt+EVdwc3ZTYZ1BoJbJdcY7VaN4vNTn1n5IQ7q0Zrc9RCz6ErCNWBijSxd8
GxEjo81XfuNmU35JENfgu+r5SlTViSGmAl1UZLHue3VLFAQO+5JVsk1LcwiLL4w8
4dTbLqltDPF+/UEgDVI5ahVdBCNYunQ7L3CQHeqTnvALUG4p81ANfBfEnCB20vRn
7stt+72sB/VQnSVCPgltGGJSLJQZN0leRtzcSXxc5InVw/Oi6WNUyaqItQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFDx7O0QwEOX+gukCY4OuTvwwXP/nMB8GA1UdIwQY
MBaAFNLz+GhrYXxfkcm9wZc7opoeSgkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZQNGFHdGhmRi1SeWIzQmx6dWltaDVLQ1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hYjQ5ZjItMzAxZC00YTM2LTg2YTMt
M2Y4Njk1ZDdlNGRmLzEvUEhzN1JEQVE1ZjZDNlFKamc2NU9fREJjXy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hYjQ5ZjItMzAxZC00YTM2LTg2YTMtM2Y4Njk1ZDdlNGRm
LzEvMHZQNGFHdGhmRi1SeWIzQmx6dWltaDVLQ1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAAjBUAwUDKhJywAMF
AyoSdEADBQMqEnTAAwUDKhJ1QAMFAyoSnsADBQMqEp9AAwUDKhKfwAMFAyoSoUAD
BQMqEqHAAwUDKhKiQAMFAyoSosADBQMqEqVAMA0GCSqGSIb3DQEBCwUAA4IBAQAo
clr6DAyy/0jG8hqOFipaiduyW04eUXhW5uqwjelaBIaY33DpZBOS2a3E9Q8oVHPJ
2RhBXWsGLfZtjk8AUmWVgu+YsgAVO9oHiOwCsaBlSCyngsbClp4oENPuHsBRilJz
qxRBwm+iieeuPll2TSYUF6I9T/FjkqNKsMc96B+u13QarvxF+34e9Xot/ki2pC+n
FMiizDZZV14R6PiZA6x0QDZAbZRi4K7Tm5m8MS/JvrQFbyHEaxwXBrN+nQyGPOTI
gaqD+baglUuOK5SsFPTkkUrcF0gLvd3DitZ5WZDZFBgplSPJFW+hZo+jvaUkJlGw
l3qe2pkW5epl2cNyn4BW
-----END CERTIFICATE-----
Generated at Thu Jul 9 23:26:35 2026 by rpki-client