Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/uPOU1KIswQbUBvI-71sNI7bH8ZM.roa
File: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (raw, json)
Hash identifier: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=
Subject key identifier: B8:F3:94:D4:A2:2C:C1:06:D4:06:F2:3E:EF:5B:0D:23:B6:C7:F1:93
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693ED5975174317ED59B620156B9E1
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/uPOU1KIswQbUBvI-71sNI7bH8ZM.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
212.30.34.0/24 maxlen: 24
212.30.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3e:d5:97:51:74:31:7e:d5:9b:62:01:56:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8f394d4a22cc106d406f23eef5b0d23b6c7f193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:d3:96:e5:84:98:5f:6d:e2:2d:24:2c:e3:
17:db:bd:f7:8c:c6:bc:65:73:70:f4:48:42:73:5b:
85:f8:50:1a:e7:f8:c6:a5:c1:8e:ae:36:05:94:60:
b4:ef:1b:34:a4:93:c0:19:73:6d:93:3c:5b:11:60:
a2:93:37:21:e0:82:83:ed:46:72:6e:18:fa:bb:85:
4a:7a:f7:ca:ed:d7:60:23:a4:28:c9:8d:16:5c:34:
f8:c5:de:b2:24:6c:2f:33:d6:83:2c:22:fd:8f:05:
82:26:68:fa:2d:40:20:4a:ac:81:95:95:b9:ed:67:
ff:06:b8:4b:33:7d:fe:03:fa:2f:91:58:0a:01:82:
7b:03:8e:33:1d:69:7c:ea:d0:88:7a:1b:14:c2:fb:
cf:cb:d3:16:c2:9d:65:bf:59:4a:c3:47:3b:84:e9:
1d:0b:02:5f:a6:f4:ce:7c:e6:02:1c:07:d7:3b:f3:
f5:dd:b8:0d:74:f8:e3:dc:2d:03:86:b6:5d:f1:a0:
91:f8:f0:9a:0b:bd:02:ca:65:27:fa:f0:7c:c1:d3:
51:42:0b:7d:f1:36:72:19:4c:f3:3e:1c:52:9a:9b:
e0:eb:1c:a0:e1:d7:87:dc:1c:d7:49:76:e1:8a:35:
76:90:36:55:20:57:5a:a3:9c:2e:b1:51:7b:51:f9:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:94:D4:A2:2C:C1:06:D4:06:F2:3E:EF:5B:0D:23:B6:C7:F1:93
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/uPOU1KIswQbUBvI-71sNI7bH8ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
212.30.34.0/24
212.30.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5f:5e:fb:76:bb:26:fb:1f:09:ff:df:48:ad:4e:68:22:3d:
27:d3:8e:bf:3c:e8:5d:e1:86:ad:28:1a:c8:a5:19:17:cc:2e:
33:c1:80:90:c4:6c:4d:0c:e7:37:39:e0:70:d8:e7:7c:4b:5d:
7c:12:b2:e0:20:4b:1a:9e:ca:5a:2f:6c:31:55:bc:c6:9f:19:
b4:c1:e5:84:c6:78:a2:29:af:55:65:86:66:8f:b3:e3:f0:58:
35:68:5d:a9:ab:ff:0f:22:af:44:39:02:4a:18:35:6d:8c:f8:
9b:10:e4:fe:3c:20:18:69:68:fd:a2:e5:c6:68:d2:61:03:bb:
a1:84:ee:59:7e:e6:9e:3b:d5:e4:d2:9d:ec:ac:7c:f5:76:3b:
8a:a1:74:ab:a1:fa:47:f0:f7:34:5f:e9:12:f1:38:b5:92:9f:
09:45:1d:8b:72:86:cb:e1:96:f2:a1:0c:58:59:b1:bd:95:4c:
4c:e8:ef:d7:d2:13:1b:87:c9:8c:2c:de:73:cd:e2:84:04:ec:
bb:65:16:f8:8f:ab:fd:9a:2b:26:6d:58:8d:c5:1c:0a:06:b0:
ad:d8:61:4a:d5:ae:e6:37:b0:a8:9d:0d:b7:b6:eb:b5:54:82:
19:0d:2e:57:34:a9:79:d4:40:1a:58:ed:93:63:49:47:7e:c1:
af:d0:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:37 2026 by rpki-client