Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/sPu6UuV9sIkNh8mAyyBEmkndsqA.roa
File: sPu6UuV9sIkNh8mAyyBEmkndsqA.roa (raw, json)
Hash identifier: cOMqAUnPj+Gqp/SNDKwLxgy1B8JM0eRkQHcYuaZmWsM=
Subject key identifier: B0:FB:BA:52:E5:7D:B0:89:0D:87:C9:80:CB:20:44:9A:49:DD:B2:A0
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 019EF439974FC457F0C520A08D8E62F9ECFE
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/sPu6UuV9sIkNh8mAyyBEmkndsqA.roa
Signing time: Tue 23 Jun 2026 11:24:35 +0000
ROA not before: Tue 23 Jun 2026 11:24:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199242
IP address blocks: 212.30.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:39:97:4f:c4:57:f0:c5:20:a0:8d:8e:62:f9:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jun 23 11:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0fbba52e57db0890d87c980cb20449a49ddb2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:06:f0:f3:e0:e6:43:1d:1e:d4:dc:29:6d:
5a:97:ad:d1:a0:5a:ba:e4:22:27:95:22:7d:70:ad:
5f:e5:42:4f:91:09:a8:4a:44:84:f1:d5:aa:3e:44:
60:3a:21:ff:0e:0c:01:dd:9e:3e:3a:3e:e7:4c:78:
71:c6:6a:85:d1:2b:b6:aa:94:f7:f8:28:a7:e5:ae:
27:9f:98:74:17:79:97:17:22:28:2f:25:8e:4d:48:
5f:da:4e:52:4f:92:08:c7:8c:91:6b:5d:54:11:f2:
5d:5a:1f:ec:67:96:46:f1:26:f6:ce:28:7b:5c:63:
8f:19:24:38:3c:fd:44:1f:40:63:29:90:eb:2b:a5:
08:75:ff:57:40:63:57:54:27:56:0c:cc:04:a8:26:
44:07:37:e4:2d:66:a7:95:ff:41:71:79:df:87:b9:
ac:99:e7:97:81:92:6b:87:35:21:98:42:c5:74:23:
fe:93:91:b6:82:ac:34:81:fe:28:47:64:68:88:f3:
13:2e:73:4e:38:da:e6:d8:ee:99:89:5d:bd:6c:23:
c4:4e:ac:9c:97:4a:0f:2f:86:78:7c:32:f2:3f:fa:
36:70:6d:2c:a4:b3:71:33:6e:83:75:9b:28:07:c6:
4b:ef:12:7f:6e:a7:ad:06:4a:36:7b:bc:42:d1:7d:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:BA:52:E5:7D:B0:89:0D:87:C9:80:CB:20:44:9A:49:DD:B2:A0
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/sPu6UuV9sIkNh8mAyyBEmkndsqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:f1:2d:7c:7c:ad:94:c5:70:1c:81:c5:b7:e6:8b:d0:c5:04:
01:b8:3b:50:4f:7f:4d:af:d8:8e:c9:5b:d3:e8:36:8b:81:a1:
83:3a:28:cd:e4:c6:aa:99:fb:62:d8:ae:71:0f:4b:20:e0:5d:
dc:27:ee:19:ed:57:3a:9b:75:9f:2d:16:4a:94:ee:92:66:fa:
d8:bf:be:6a:32:8a:9a:10:99:ad:74:b3:34:c8:bc:b5:5e:9c:
e1:dd:e2:30:8b:7a:63:98:a4:35:ed:02:4f:d9:24:7c:e5:7b:
ab:e4:bf:2e:c0:ea:c7:63:da:db:64:b2:ab:76:c6:0c:ee:4c:
4e:3a:b6:eb:93:70:47:b6:af:36:4c:b5:ba:12:b9:7d:61:53:
bd:17:ec:bf:cd:5e:dd:31:ef:b8:48:43:fd:72:96:fa:b3:f7:
81:22:3c:d3:e8:1e:e2:db:73:72:77:07:c1:04:9b:9c:37:6f:
a5:9d:ef:ff:05:78:8b:26:5c:39:4d:98:53:fb:27:ac:d5:cf:
dc:0d:a3:e5:e8:d5:a2:68:19:ba:5f:86:bb:8a:4c:1a:94:ac:
e5:40:35:97:4f:94:b4:0d:89:04:5a:c8:02:ce:74:34:6f:bf:
f3:94:71:8f:65:26:df:75:39:5e:7b:c7:7a:30:3b:3d:3c:80:
ab:6b:a3:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ70OZdPxFfwxSCgjY5i+ez+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjYwNjIzMTEyNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGZiYmE1MmU1N2RiMDg5MGQ4N2M5ODBjYjIwNDQ5YTQ5ZGRiMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65cG8PPg5kMdHtTcKW1al63RoFq6
5CInlSJ9cK1f5UJPkQmoSkSE8dWqPkRgOiH/DgwB3Z4+Oj7nTHhxxmqF0Su2qpT3
+Cin5a4nn5h0F3mXFyIoLyWOTUhf2k5ST5IIx4yRa11UEfJdWh/sZ5ZG8Sb2zih7
XGOPGSQ4PP1EH0BjKZDrK6UIdf9XQGNXVCdWDMwEqCZEBzfkLWanlf9BcXnfh7ms
meeXgZJrhzUhmELFdCP+k5G2gqw0gf4oR2RoiPMTLnNOONrm2O6ZiV29bCPETqyc
l0oPL4Z4fDLyP/o2cG0spLNxM26DdZsoB8ZL7xJ/bqetBko2e7xC0X22XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD7ulLlfbCJDYfJgMsgRJpJ3bKgMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvc1B1NlV1VjlzSWtOaDhtQXl5QkVta25kc3FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1B4sMA0G
CSqGSIb3DQEBCwUAA4IBAQA88S18fK2UxXAcgcW35ovQxQQBuDtQT39Nr9iOyVvT
6DaLgaGDOijN5Maqmfti2K5xD0sg4F3cJ+4Z7Vc6m3WfLRZKlO6SZvrYv75qMoqa
EJmtdLM0yLy1Xpzh3eIwi3pjmKQ17QJP2SR85Xur5L8uwOrHY9rbZLKrdsYM7kxO
Orbrk3BHtq82TLW6Erl9YVO9F+y/zV7dMe+4SEP9cpb6s/eBIjzT6B7i23NydwfB
BJucN2+lne//BXiLJlw5TZhT+yes1c/cDaPl6NWiaBm6X4a7ikwalKzlQDWXT5S0
DYkEWsgCznQ0b7/zlHGPZSbfdTlee8d6MDs9PICra6OI
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:34:01 2026 by rpki-client