Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DgFm4HmChjoVVXbZG_s_bmWikhA.roa
File: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (raw, json)
Hash identifier: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=
Subject key identifier: 0E:01:66:E0:79:82:86:3A:15:55:76:D9:1B:FB:3F:6E:65:A2:92:10
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F236940F3D38366648AA758F97E16059E
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DgFm4HmChjoVVXbZG_s_bmWikhA.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207456
IP address blocks: 212.30.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:40:f3:d3:83:66:64:8a:a7:58:f9:7e:16:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e0166e07982863a155576d91bfb3f6e65a29210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:d9:70:60:89:93:73:02:1f:e2:20:bd:df:
ae:9b:f9:30:7b:70:d9:35:5c:41:a5:42:5d:50:c1:
b3:01:e9:65:ac:c2:bd:78:5e:60:80:81:1f:fe:19:
cf:f7:9a:b1:43:45:11:6e:8a:42:26:2b:99:9f:19:
11:79:12:e0:2f:83:de:ee:45:57:18:3d:62:a1:e7:
d0:6b:11:8a:34:b2:76:81:68:1b:4e:05:cd:ba:f4:
b5:42:ec:b0:ff:76:75:15:0e:de:25:bb:33:4e:19:
cf:ac:c5:dd:e2:bb:1e:84:9b:88:ba:b5:44:12:f8:
69:fc:be:17:f4:d3:a5:db:ff:03:8f:05:66:6c:90:
14:9d:bb:ad:25:58:74:dc:8e:5c:ba:c7:02:7b:ef:
3b:7c:8b:1a:7c:67:82:b3:61:b2:9a:bc:50:6b:82:
cf:2c:43:89:06:39:b4:ec:f4:e8:04:03:6a:66:72:
4a:38:d0:fd:f3:3a:51:d6:9d:90:30:2a:18:e5:39:
ea:65:be:88:46:ae:f9:46:bd:33:78:16:b2:a1:a4:
19:8d:66:68:23:5a:48:89:4d:45:c2:47:cd:37:bf:
51:1e:7a:6f:f8:6a:bd:ec:d7:49:2b:d5:2a:05:23:
fc:8a:0f:61:3a:d1:5d:37:69:15:bf:e9:82:03:05:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:66:E0:79:82:86:3A:15:55:76:D9:1B:FB:3F:6E:65:A2:92:10
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DgFm4HmChjoVVXbZG_s_bmWikhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.48.0/22
Signature Algorithm: sha256WithRSAEncryption
40:b3:2e:43:ce:85:0d:d7:08:81:65:d1:21:79:69:bd:9e:0f:
31:96:dc:f8:aa:5d:e3:dd:30:fe:01:24:51:10:b2:b9:fb:fb:
e8:c5:53:e1:b0:ea:2b:82:a9:fc:60:00:99:ff:df:32:97:86:
1d:0e:5a:26:a0:ec:3b:16:19:32:ff:f7:46:98:53:85:e3:25:
b7:6d:61:d0:8e:c0:39:49:67:b6:42:4e:56:e8:b2:59:2d:b2:
14:77:e5:e7:ea:31:28:c6:76:96:b4:5e:3f:a0:47:f5:d7:ac:
85:ad:ae:ec:a8:91:1b:9d:d1:82:e3:be:70:19:dd:b2:05:32:
f0:fe:a4:17:05:b1:b2:52:98:0d:b0:2a:5b:a3:44:ac:34:63:
b4:48:d4:37:c5:e2:30:e2:3a:98:23:c1:21:37:23:54:78:f6:
56:67:12:26:dd:e1:f4:78:bc:3d:ab:6f:a1:d3:c6:e7:ea:97:
2d:ff:2b:28:0e:63:b5:11:44:64:57:28:e0:7c:35:a9:a6:7a:
6c:92:19:f0:c7:9b:5a:a5:f4:67:60:92:09:79:38:9c:a5:02:
96:a5:66:2f:57:53:f5:4b:d7:47:a6:f9:77:13:dd:80:84:e1:
97:6e:b0:49:28:be:79:f9:79:97:2a:5a:46:34:56:ee:95:f2:
ba:b6:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:16 2026 by rpki-client