Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa
File: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (raw, json)
Hash identifier: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=
Subject key identifier: 72:BD:32:41:46:11:67:95:D9:4C:89:FB:2E:65:3A:9B:0D:F2:30:5A
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693DE9F9A658F45409957D1F647F88
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 212.30.36.0/24 maxlen: 24
212.30.37.0/24 maxlen: 24
212.30.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3d:e9:f9:a6:58:f4:54:09:95:7d:1f:64:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72bd324146116795d94c89fb2e653a9b0df2305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:a5:a8:19:c4:24:60:fd:bb:33:a1:e4:b1:
c3:e6:04:c9:4d:28:06:67:e7:4a:56:d8:91:e0:cd:
4b:ab:30:7a:89:af:6d:ff:04:32:b0:fa:e9:34:2e:
0b:cf:8c:7f:bc:fb:f4:01:3c:f5:3a:13:31:85:5f:
0e:19:6d:c5:e6:99:e3:d7:e2:17:d9:99:b3:52:bb:
62:0b:48:c9:10:9e:06:06:91:61:87:9f:14:89:4f:
0c:66:93:a3:45:26:ec:67:65:1d:0e:a2:ce:4e:4a:
8b:bd:50:28:a2:d9:4e:7b:fc:0e:6f:cb:40:27:3e:
77:9c:06:1e:0f:64:20:5f:0b:78:74:92:1c:ed:06:
8e:90:2f:1f:65:11:bd:f6:a7:de:be:30:ac:1b:dc:
b8:dc:80:96:13:4f:13:d1:fa:69:cc:ec:7c:c1:b8:
bf:00:7f:a6:ff:70:25:57:2e:0f:c3:e0:5d:ac:c8:
f4:49:1b:06:5f:a7:c2:48:03:f2:69:c1:dc:06:5f:
5d:66:58:f0:c4:80:0e:be:51:ed:23:47:6c:fb:71:
72:67:49:6d:9d:e4:4f:8c:6d:96:66:85:9b:fb:3e:
c4:c8:e2:e5:e5:3f:d5:3a:4e:76:0d:37:99:8b:30:
df:f8:d2:1a:96:4b:70:6e:3e:0a:8d:51:71:de:54:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:32:41:46:11:67:95:D9:4C:89:FB:2E:65:3A:9B:0D:F2:30:5A
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.36.0/23
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a9:5e:37:2c:07:78:dd:20:4d:cb:a7:38:99:65:ae:08:fc:
1a:94:39:ed:1b:06:d6:b8:1d:00:d6:b2:a0:7f:97:5f:5d:fa:
ba:0c:aa:04:d8:e8:50:c8:dc:a5:56:ad:19:93:3a:32:14:11:
a1:3f:d3:18:ea:23:ee:a0:f4:b1:80:a0:15:70:a6:e0:71:5e:
41:43:6d:3d:4e:ff:e9:c0:02:bc:93:29:66:72:51:e3:73:ac:
3d:05:53:d5:2b:66:aa:9f:80:a9:25:07:d3:65:d8:d6:96:96:
1f:63:11:20:ff:09:1c:11:1e:71:96:f8:c4:98:79:cd:10:f0:
01:a7:f8:e0:4d:3d:05:53:29:ed:bc:8e:be:09:ce:0a:b1:61:
2f:2a:71:ba:3d:b8:04:da:16:71:dd:39:76:25:cb:a6:47:a3:
03:3f:c9:ad:aa:d8:d1:3b:ff:9b:bd:a1:6d:66:c7:11:f2:96:
9c:fc:02:1c:60:3f:f9:66:4e:a8:8f:7e:2f:4f:86:65:9a:03:
a7:53:f5:c9:87:4d:d5:7a:af:3a:a3:fe:cb:ac:e4:6a:71:75:
24:94:93:4b:ab:5f:26:a1:4c:6c:53:22:02:b7:85:43:a9:3d:
4b:a1:5e:c9:28:71:1f:87:86:1b:7d:54:86:10:a5:a3:58:56:
7a:45:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:42 2026 by rpki-client