Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/5jZisInp8TXN2yxl-UfU7WarY0M.roa
File: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (raw, json)
Hash identifier: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=
Subject key identifier: E6:36:62:B0:89:E9:F1:35:CD:DB:2C:65:F9:47:D4:ED:66:AB:63:43
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693DBBCA0E7DA5281FAA9533A7B60B
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/5jZisInp8TXN2yxl-UfU7WarY0M.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136744
IP address blocks: 212.30.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3d:bb:ca:0e:7d:a5:28:1f:aa:95:33:a7:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e63662b089e9f135cddb2c65f947d4ed66ab6343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:7a:a3:8f:90:a4:51:31:7a:cc:96:fa:48:
ac:99:58:ac:96:ba:b1:58:8f:32:6e:52:ab:fe:67:
1d:58:24:61:f0:87:10:97:79:b8:8d:4b:c5:fa:89:
c6:b2:ad:ec:26:9b:12:fb:b7:53:22:81:c6:49:19:
a9:2e:d1:be:27:cd:18:4e:13:74:00:fa:3b:18:6e:
fe:6f:e1:00:84:80:f3:81:55:6d:5d:70:b6:29:ea:
e7:64:50:32:f9:ff:bb:b9:0d:8b:83:27:66:73:ec:
e5:ba:7c:42:bf:82:66:1d:dc:fa:25:7d:a6:81:5d:
6b:97:14:94:30:13:14:2b:09:eb:a4:b4:ff:73:ba:
5f:f1:b9:87:a0:e8:3d:3a:73:d6:36:cd:aa:b8:34:
9c:ca:39:0f:6d:2e:e8:e1:92:0f:10:89:ad:8e:bf:
2c:ee:8e:96:85:1d:9f:f4:99:48:8d:74:a5:6b:79:
6e:a4:a2:e8:10:7d:69:0a:a3:24:c5:4c:f6:62:49:
6a:2d:8b:7a:c7:b6:91:d6:7d:79:7b:03:d3:14:df:
6d:ba:c1:60:53:17:aa:56:36:4e:c2:ce:ef:4a:bb:
fd:7e:2b:77:97:03:9f:9b:16:6f:34:15:2d:8d:8e:
35:53:81:c6:fc:27:7c:91:9b:74:fe:ac:61:69:6b:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:62:B0:89:E9:F1:35:CD:DB:2C:65:F9:47:D4:ED:66:AB:63:43
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/5jZisInp8TXN2yxl-UfU7WarY0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.61.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9d:de:54:f6:87:9c:28:d6:61:7b:11:d2:20:7e:98:9a:db:
d0:e6:22:11:8e:91:e7:a7:55:57:69:0b:f1:c8:ac:d1:0a:f1:
94:52:9b:85:e9:56:63:e7:61:b9:f3:27:2a:89:3e:b0:23:d6:
94:d6:f1:a8:2d:03:a4:0a:51:7f:8e:f5:f1:98:0c:a0:6d:ea:
01:b3:64:0d:61:7f:ed:3a:85:51:b3:7d:ac:5e:03:16:6a:59:
f1:ed:42:71:d8:d7:0b:ee:31:95:f8:af:9d:12:87:74:aa:f3:
38:7f:dc:aa:35:a8:63:77:e0:0c:e6:53:c2:bb:22:71:7d:bd:
03:09:a6:f2:a4:c4:28:1a:2b:b6:aa:32:e9:98:02:47:13:ed:
09:99:35:c3:16:00:bc:33:f1:d7:47:1d:5d:40:f7:95:5d:19:
d6:6e:22:ea:0e:f1:68:08:8e:4c:35:33:e0:91:11:4d:b8:89:
4f:a4:52:28:ae:98:31:42:1b:8f:5f:6f:f3:84:72:9f:06:37:
98:0a:b9:aa:d9:f0:2f:11:1b:b4:3c:40:d1:47:7c:c1:cd:25:
5f:24:37:e3:41:03:94:1a:15:38:6f:c0:94:82:53:fb:f9:ef:
3e:1b:87:dd:c1:3b:f5:7b:6e:7f:75:4a:82:32:ad:a8:56:02:
83:6a:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:50:13 2026 by rpki-client