Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/mRc91Aky3UbvamSLkFdXObfQfbE.roa
File: mRc91Aky3UbvamSLkFdXObfQfbE.roa (raw, json)
Hash identifier: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=
Subject key identifier: 99:17:3D:D4:09:32:DD:46:EF:6A:64:8B:90:57:57:39:B7:D0:7D:B1
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F2369438F58587EE4430305B57B342243
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/mRc91Aky3UbvamSLkFdXObfQfbE.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215650
IP address blocks: 212.30.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:8f:58:58:7e:e4:43:03:05:b5:7b:34:22:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99173dd40932dd46ef6a648b90575739b7d07db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:68:7d:0e:27:f0:72:bd:c1:7a:1e:cd:6f:
7b:a2:51:65:0c:43:49:f4:f4:db:17:a1:e6:e9:4c:
ab:46:d4:ff:39:7c:51:d9:f2:b4:8e:9b:a6:ce:92:
5f:8d:ca:07:a2:98:52:c9:aa:ad:4c:f7:67:12:bd:
ae:96:5a:ba:54:a7:15:d1:d8:d6:f8:c7:69:6e:12:
6d:1a:2e:3c:40:f3:0e:9f:a0:35:08:2a:7d:84:96:
16:72:02:b1:a4:d6:be:2a:03:46:d1:85:53:f9:66:
26:5e:11:42:50:50:5e:8d:05:61:96:54:9b:e0:fa:
3b:8f:06:98:53:a7:94:d7:37:c8:a8:d0:49:d2:ce:
65:9b:38:2c:99:db:cf:ab:ad:6f:65:72:d7:fd:33:
58:e1:a5:fd:63:64:d3:73:0d:1b:f9:a4:60:ee:d8:
68:ae:43:34:da:73:ea:09:29:49:3d:b3:a7:69:f0:
98:6c:7e:fa:61:e7:84:6e:2b:b4:8c:dd:56:ea:b2:
9f:5a:ba:18:dd:9c:10:c1:6d:a7:74:e6:e4:84:5f:
65:67:c5:37:8e:54:54:8c:80:64:95:26:f3:57:e6:
c8:2e:6b:4d:23:65:1d:b3:ad:d8:5d:d7:d1:f2:db:
f7:22:5b:68:89:ae:18:a2:8c:18:1d:b6:2a:47:0b:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:3D:D4:09:32:DD:46:EF:6A:64:8B:90:57:57:39:B7:D0:7D:B1
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/mRc91Aky3UbvamSLkFdXObfQfbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.38.0/24
Signature Algorithm: sha256WithRSAEncryption
76:68:f1:3e:d9:88:c2:ab:8a:75:db:65:1b:f1:72:a7:d0:4c:
c9:13:f0:9a:7e:e2:dd:a4:37:ea:04:97:98:1d:ba:40:f0:08:
34:54:33:e3:3d:14:07:e9:09:3d:20:81:97:ef:21:53:ad:7f:
78:34:ed:a6:fd:3b:89:90:97:3c:99:f9:57:f5:58:8d:70:d1:
50:3f:2f:3d:51:8f:d0:36:9f:f6:3a:d8:c9:07:dc:2e:5f:1c:
24:bc:93:ba:2a:ed:be:2c:60:8d:76:b8:28:d1:4c:8d:a7:90:
c7:36:6c:ba:05:49:f3:9c:29:af:7d:f8:7a:cd:a0:fa:35:5a:
f0:89:5f:d0:d2:fa:0f:8d:64:78:09:c8:00:8d:ca:da:66:3f:
ab:9d:4e:65:f9:7b:e9:92:f3:9a:ab:4f:94:83:5c:d1:e9:8d:
b2:68:45:04:80:b6:d4:d4:97:1c:e3:15:80:b6:b1:82:7d:15:
87:d4:eb:0d:22:03:8d:4b:b7:20:eb:c7:ed:48:78:9c:73:f3:
94:3b:17:2f:9b:6b:34:48:b8:98:bb:b0:68:5d:13:cb:86:8d:
b3:19:79:de:91:65:46:f3:a6:c3:bc:3d:01:1d:80:4c:61:a0:
cf:64:21:32:54:87:7d:c6:4e:0d:0d:a1:58:35:61:23:4f:99:
3a:b6:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:16 2026 by rpki-client