Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/knufnAOkhguuSqCyELAEY4TVYpQ.roa
File: knufnAOkhguuSqCyELAEY4TVYpQ.roa (raw, json)
Hash identifier: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=
Subject key identifier: 92:7B:9F:9C:03:A4:86:0B:AE:4A:A0:B2:10:B0:04:63:84:D5:62:94
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23694060687E7E640FF3D177CE85E673
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/knufnAOkhguuSqCyELAEY4TVYpQ.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 212.30.35.0/24 maxlen: 24
212.30.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:40:60:68:7e:7e:64:0f:f3:d1:77:ce:85:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=927b9f9c03a4860bae4aa0b210b0046384d56294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:0e:21:57:d9:24:8f:69:5e:2e:fe:b3:04:
c6:58:4a:27:f1:ff:22:a1:81:38:89:09:07:02:3c:
73:90:11:b4:d0:4b:b3:f8:c9:54:3e:5b:8c:fc:8e:
3e:0c:98:7c:7a:ae:b2:a7:67:6f:6a:4a:6e:92:9b:
bb:1d:a4:b1:39:1e:33:0e:3e:30:a0:11:42:12:e4:
3c:50:78:71:8a:1a:51:d2:0f:4d:3a:96:82:6f:0e:
c2:82:ea:d6:e1:1d:0b:d7:e0:4b:29:19:da:11:92:
cb:cc:49:0c:8c:f6:23:9f:f7:a8:0b:9e:ee:38:cb:
f4:f5:cc:9f:27:b3:03:91:f9:5b:eb:0a:5a:c6:4e:
a4:2e:5f:f3:66:7b:85:9c:ab:0d:7f:56:25:97:f7:
75:48:5c:82:7f:59:27:ad:33:8b:e0:7c:e6:99:b6:
27:43:2b:05:24:2d:cb:7e:50:37:ec:d5:0c:9c:db:
c9:2f:8c:24:48:ca:94:b6:f3:3f:47:d2:24:e0:e4:
f8:f8:d3:49:25:e9:5a:44:fa:57:f8:e3:4d:d6:bd:
e7:fb:6e:f7:25:12:fb:fb:9e:f8:75:9a:26:97:40:
09:aa:e2:a5:4e:96:9d:7d:79:71:9c:23:48:cb:77:
5c:5c:13:78:ce:84:c7:7b:3c:ee:a5:3f:0f:f9:1b:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:9F:9C:03:A4:86:0B:AE:4A:A0:B2:10:B0:04:63:84:D5:62:94
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/knufnAOkhguuSqCyELAEY4TVYpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.35.0/24
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:58:34:96:38:01:37:55:3d:f3:79:d8:3f:8d:c9:2e:1a:ab:
30:d5:4a:08:df:31:45:0c:ff:0f:50:89:ce:fa:c6:40:96:b9:
5f:1f:4d:75:83:36:ef:52:ef:1a:87:67:a6:05:29:68:5f:6b:
a2:17:12:2f:91:dd:83:e4:ea:83:83:69:60:aa:26:84:53:28:
4a:e1:47:d4:23:1a:5b:2b:85:52:b7:9a:09:4b:b1:f5:b9:8e:
63:c8:a6:3d:cf:16:cb:48:0a:7c:9e:da:a2:47:91:26:97:95:
a9:1c:e8:73:35:3d:57:27:56:55:96:45:52:0b:95:b7:30:33:
cc:6b:5b:7f:8b:4e:a0:26:f6:d6:e7:a8:5f:bc:74:2d:a3:91:
ee:a2:92:8b:a0:f1:90:49:0b:d2:1b:41:60:2b:56:55:a7:f8:
7d:f1:80:b9:23:b5:f1:e7:82:55:69:14:f9:77:7d:2d:1c:86:
49:52:fb:c2:53:41:dc:9f:96:8f:26:ad:31:a6:cd:fb:10:04:
0a:a6:b5:10:54:07:70:75:5a:bc:47:72:22:51:38:e8:3b:cb:
19:21:3d:8f:e1:0e:c9:04:44:e2:22:2e:ed:47:32:c4:00:a5:
43:52:57:7e:23:b3:9f:33:08:01:6d:06:bd:f5:cb:ae:65:6c:
1f:77:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:51:01 2026 by rpki-client