Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/r6JXotIvt8BRtWBlfGRQvAlgC_8.roa
File: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (raw, json)
Hash identifier: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=
Subject key identifier: AF:A2:57:A2:D2:2F:B7:C0:51:B5:60:65:7C:64:50:BC:09:60:0B:FF
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693C8EEAE8093F5FECBAB7AF3ECB7E
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/r6JXotIvt8BRtWBlfGRQvAlgC_8.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43019
IP address blocks: 212.30.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3c:8e:ea:e8:09:3f:5f:ec:ba:b7:af:3e:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afa257a2d22fb7c051b560657c6450bc09600bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:01:c8:af:5c:5e:66:58:d2:9b:3a:a1:98:
54:d7:67:ae:8d:a2:9c:3c:73:67:59:01:42:4a:48:
c0:c3:83:30:11:ea:c2:db:d0:94:27:cf:e0:81:21:
36:86:5b:e9:c5:c5:76:68:75:d6:cc:7b:32:2b:aa:
c2:da:c8:a0:24:42:46:aa:43:8b:27:9d:95:01:8c:
db:b6:72:fd:d8:fa:11:3a:8b:64:5e:14:e2:0f:55:
d7:4b:46:3a:94:8e:df:fe:50:0f:d0:bb:9a:b0:88:
f6:f4:21:c0:64:20:8c:f7:a9:02:6d:1f:fc:ae:ca:
da:7f:c3:7c:15:cf:82:17:c1:f6:bc:10:3f:7f:2d:
f3:ce:61:37:33:79:ab:0e:33:10:7a:7b:4f:53:05:
c9:49:bf:66:70:45:6b:07:a4:f3:ac:96:7b:63:51:
59:bc:be:be:bc:18:4a:0d:3b:6b:3e:ea:0f:2a:b4:
3d:68:61:9d:fa:07:00:4f:25:d8:0c:90:1a:76:9f:
7b:ea:3f:81:a3:72:a0:67:14:07:74:35:bd:06:2d:
2d:8d:4a:0e:ed:67:76:aa:f3:3b:3a:6a:9d:46:c8:
47:97:07:bd:a3:ed:1d:73:4a:b3:dc:39:95:06:a5:
3d:2d:26:24:45:37:6f:4a:23:81:50:4a:55:ee:2c:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:57:A2:D2:2F:B7:C0:51:B5:60:65:7C:64:50:BC:09:60:0B:FF
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/r6JXotIvt8BRtWBlfGRQvAlgC_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:81:d3:f8:2f:f8:0a:30:b5:0f:57:1b:67:01:5f:38:fb:43:
ad:9f:a9:86:f1:63:68:8d:9c:37:07:57:41:52:b0:f0:dd:9e:
ab:46:7d:f9:00:a1:82:e3:4a:5e:17:76:7e:cc:d8:b2:f6:c7:
8d:b1:35:ec:b0:6f:f9:69:68:d1:bd:16:e4:64:8f:26:d5:51:
a8:62:8a:89:e9:c6:e3:0f:20:a9:d3:1c:ad:e7:e3:46:c1:aa:
c2:cd:37:5c:3e:bb:ac:3c:98:aa:ca:16:0e:3a:c6:fd:3c:05:
19:af:b5:53:62:d1:1f:5c:09:de:8c:2e:2b:86:9e:23:ab:3e:
f6:de:aa:11:87:ff:b1:8e:66:26:9e:dd:eb:af:a1:69:23:2e:
51:27:a8:81:c8:0a:9f:9b:43:95:2a:14:65:b8:c2:92:eb:66:
da:48:b6:76:5a:38:5a:bd:b7:f4:83:41:6a:df:a8:59:ad:14:
d6:03:64:0d:7d:86:e4:69:2e:17:a9:52:42:3c:85:bc:b7:19:
2b:59:64:3e:14:72:d4:68:77:83:aa:74:b7:6a:fa:b0:77:ad:
66:c3:41:80:4e:47:e1:ae:34:a1:f6:97:23:0d:0c:c4:23:43:
07:e2:90:96:1f:fe:2a:1c:21:0d:25:ef:c8:0f:d1:86:d2:cf:
f0:2a:fd:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTyO6ugJP1/surevPst+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2
MmE3ZmEwHhcNMjYwNzAyMTUxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmEyNTdhMmQyMmZiN2MwNTFiNTYwNjU3YzY0NTBiYzA5NjAwYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfIByK9cXmZY0ps6oZhU12eujaKc
PHNnWQFCSkjAw4MwEerC29CUJ8/ggSE2hlvpxcV2aHXWzHsyK6rC2sigJEJGqkOL
J52VAYzbtnL92PoROotkXhTiD1XXS0Y6lI7f/lAP0LuasIj29CHAZCCM96kCbR/8
rsraf8N8Fc+CF8H2vBA/fy3zzmE3M3mrDjMQentPUwXJSb9mcEVrB6TzrJZ7Y1FZ
vL6+vBhKDTtrPuoPKrQ9aGGd+gcATyXYDJAadp976j+Bo3KgZxQHdDW9Bi0tjUoO
7Wd2qvM7OmqdRshHlwe9o+0dc0qz3DmVBqU9LSYkRTdvSiOBUEpV7iyeiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+iV6LSL7fAUbVgZXxkULwJYAv/MB8GA1UdIwQY
MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvcjZKWG90SXZ0OEJSdFdCbGZHUlF2QWxnQ184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B4pMA0G
CSqGSIb3DQEBCwUAA4IBAQCKgdP4L/gKMLUPVxtnAV84+0Otn6mG8WNojZw3B1dB
UrDw3Z6rRn35AKGC40peF3Z+zNiy9seNsTXssG/5aWjRvRbkZI8m1VGoYoqJ6cbj
DyCp0xyt5+NGwarCzTdcPrusPJiqyhYOOsb9PAUZr7VTYtEfXAnejC4rhp4jqz72
3qoRh/+xjmYmnt3rr6FpIy5RJ6iByAqfm0OVKhRluMKS62baSLZ2Wjhavbf0g0Fq
36hZrRTWA2QNfYbkaS4XqVJCPIW8txkrWWQ+FHLUaHeDqnS3avqwd61mw0GATkfh
rjSh9pcjDQzEI0MH4pCWH/4qHCENJe/ID9GG0s/wKv2G
-----END CERTIFICATE-----
Generated at Fri Jul 17 10:50:58 2026 by rpki-client