Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/nhSqVyjNyvOMRtAwW9liT_id7vM.roa
File: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (raw, json)
Hash identifier: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=
Subject key identifier: 9E:14:AA:57:28:CD:CA:F3:8C:46:D0:30:5B:D9:62:4F:F8:9D:EE:F3
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F236942CBE18BA165985FE242A2D368CC
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/nhSqVyjNyvOMRtAwW9liT_id7vM.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212435
IP address blocks: 212.30.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:42:cb:e1:8b:a1:65:98:5f:e2:42:a2:d3:68:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e14aa5728cdcaf38c46d0305bd9624ff89deef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:97:62:63:73:5f:2e:75:7b:db:a8:61:f3:
d6:d9:0a:cd:74:cf:50:81:f7:b1:5a:c8:c9:a5:18:
11:1c:e1:3e:b1:95:62:fa:bb:75:33:ae:67:3a:b6:
83:2d:0a:50:5d:d2:f8:bb:54:fc:a7:52:65:72:87:
a3:70:b3:24:ff:71:9b:11:98:cd:10:f6:55:00:55:
32:18:f8:89:55:d3:86:d4:99:75:11:9d:68:f0:a1:
40:44:e9:95:8f:a5:b2:b5:e4:a7:e1:b5:0c:1c:8d:
63:fb:17:e1:66:3a:e6:9a:82:2c:79:08:41:4d:b6:
20:ab:c9:d3:eb:42:13:27:8d:57:34:64:75:60:7a:
23:a2:8c:02:26:1f:2a:bb:2c:c2:fb:44:86:68:b5:
b2:f7:ea:d1:7c:ac:7f:e3:b1:29:e8:fe:76:62:c3:
b8:af:56:26:65:8f:5c:b0:7e:a3:f4:98:98:73:41:
86:24:9f:df:9d:06:bc:c1:d0:d4:11:f2:7a:54:6f:
2e:32:02:c9:56:d0:fc:6e:2a:c8:52:b4:07:2c:cc:
a2:a2:f9:66:c3:bb:31:c3:50:24:f8:45:e9:46:b6:
5f:cf:3b:06:13:d3:a9:9c:6c:dd:f6:76:7c:eb:bc:
aa:1c:7b:6a:0e:36:67:e8:28:2c:28:58:08:e0:f5:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:AA:57:28:CD:CA:F3:8C:46:D0:30:5B:D9:62:4F:F8:9D:EE:F3
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/nhSqVyjNyvOMRtAwW9liT_id7vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5d:8d:f9:7b:ce:ad:9d:8f:71:3e:ff:bb:82:84:12:2f:45:
08:02:27:5b:d2:c1:d0:4a:35:81:90:b4:c0:6c:17:48:0b:74:
99:3a:34:e8:94:66:55:bd:7c:10:72:88:49:0c:8c:3d:b3:c1:
e7:95:9a:47:5b:d3:e0:8e:b5:b1:40:6d:6b:d4:ba:c9:72:94:
63:6a:5f:92:4b:91:12:dd:b5:9f:58:69:5a:f8:2f:96:20:ec:
dc:8b:49:9c:15:4d:c8:5f:f1:9e:79:45:6b:9c:c0:40:f8:5a:
88:25:ff:f5:35:d6:bb:94:26:e5:0c:01:22:1c:6d:60:83:8f:
91:cd:48:0d:0c:3f:e7:84:ab:3f:58:3d:b1:8f:a8:20:f1:1e:
5e:b2:4e:ff:7d:e8:ac:c1:fd:ab:9b:10:20:7f:ae:4f:17:61:
8f:06:4d:0a:54:e4:7e:c9:01:1d:c6:8e:be:3f:7b:66:7c:94:
fe:9f:fa:ae:0e:42:57:f8:67:8c:83:39:b6:93:4a:df:57:a8:
c6:d4:67:42:3c:bf:9e:14:42:45:d8:21:88:b7:c6:4f:49:c3:
25:37:ae:d2:f6:4b:c4:e0:ed:85:72:33:2d:4d:6b:5f:db:7d:
59:dd:00:b5:de:2c:50:f5:37:da:9c:84:58:2e:d5:ed:46:14:
09:48:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:50:13 2026 by rpki-client