Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/SPwnkc4KWHYyIdbwYFp8NZlDCiY.roa
File: SPwnkc4KWHYyIdbwYFp8NZlDCiY.roa (raw, json)
Hash identifier: KC/lF7RUbJj45vkXam8H51gZNnQogYtQZS5HMvSRW30=
Subject key identifier: 48:FC:27:91:CE:0A:58:76:32:21:D6:F0:60:5A:7C:35:99:43:0A:26
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01A065F3FB1D27E3541CD76FAE0BA0A5EB4C
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/SPwnkc4KWHYyIdbwYFp8NZlDCiY.roa
Signing time: Thu 03 Sep 2026 06:28:03 +0000
ROA not before: Thu 03 Sep 2026 06:28:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.114.41.0/24 maxlen: 24
212.114.45.0/24 maxlen: 24
212.114.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:f3:fb:1d:27:e3:54:1c:d7:6f:ae:0b:a0:a5:eb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Sep 3 06:28:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48fc2791ce0a58763221d6f0605a7c3599430a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:3b:b7:8b:c1:88:f7:9d:8d:d0:d7:ac:63:
40:2a:fd:bf:f6:6b:0a:eb:97:a2:55:4b:2f:69:55:
91:2f:e4:78:77:c5:57:8a:d4:cb:ff:b2:9a:c9:97:
f3:15:38:34:67:91:b6:6b:3f:bf:93:86:f4:c2:dc:
a5:40:d2:14:f1:61:4a:db:fc:bc:4c:af:dd:72:d9:
9b:ad:a7:8f:7d:50:5b:ae:d8:a4:48:67:79:9b:6c:
60:20:00:21:2d:91:50:6c:81:f5:f4:35:cc:af:ab:
f6:56:c0:69:5d:f5:4c:11:eb:9e:fa:f7:8f:db:fa:
d2:ff:b8:71:08:6b:9a:f2:48:f7:0c:27:84:b3:a6:
67:9d:a9:b4:b7:3b:77:ec:0d:a4:40:a3:c1:18:97:
f8:4e:55:c5:12:af:29:57:43:69:16:da:1c:a5:ad:
d4:3c:19:3f:13:e8:c2:fb:9f:9c:23:5d:4b:46:a2:
5a:cd:19:c2:64:1e:4a:2c:5b:6b:30:35:74:68:2e:
74:99:46:66:eb:56:2e:39:8f:35:e6:de:55:6f:d7:
2f:d0:4e:8d:09:8d:71:44:30:4a:72:b6:46:fb:d0:
b7:09:c8:3b:c6:1d:a0:a8:39:0b:74:ef:15:3e:09:
8e:d8:a3:33:50:c8:ca:d1:2e:b8:08:f5:9d:b4:b1:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:27:91:CE:0A:58:76:32:21:D6:F0:60:5A:7C:35:99:43:0A:26
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/SPwnkc4KWHYyIdbwYFp8NZlDCiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.41.0/24
212.114.45.0-212.114.46.255
Signature Algorithm: sha256WithRSAEncryption
ae:e4:67:2a:f1:aa:f3:7d:59:58:58:dd:37:49:a7:b1:36:1d:
33:17:55:96:73:98:ff:e4:33:84:cf:3e:de:82:fd:1b:9f:b8:
e0:fe:3f:65:05:f7:9b:e0:38:b1:29:c8:4a:aa:72:3c:51:cd:
58:c5:49:84:ce:b4:0b:4f:86:b9:d1:78:7a:15:98:4a:5c:aa:
b3:60:67:4c:33:94:b2:67:93:5b:e4:e5:15:fd:10:52:6a:2b:
09:5f:84:10:7e:07:54:d6:c7:b9:27:65:d8:07:dc:db:f3:85:
06:b4:5c:66:99:f1:86:93:28:5f:4b:a0:f8:6f:3b:95:5f:cd:
21:28:2b:66:a0:03:54:e7:46:5e:3e:11:73:be:8c:99:12:b2:
0d:cb:ec:ab:ed:4a:7f:0d:e7:32:3d:dc:2b:d1:59:81:e3:c1:
5f:e6:fc:ae:2e:b7:60:b6:4e:02:3b:91:be:6d:62:be:3c:22:
6e:33:53:5c:07:b3:0c:89:1c:9d:33:f0:23:df:21:e8:11:77:
9d:0d:3f:d4:c4:1d:8e:3f:f6:9e:8b:b8:6e:7a:26:34:03:ab:
d8:72:d6:37:ad:60:0f:c0:be:ec:ff:3f:7d:5f:cb:a5:3b:06:
66:ad:3e:c1:51:37:18:7f:30:58:02:76:0a:a5:41:4a:a7:de:
4d:ed:2e:0b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaBl8/sdJ+NUHNdvrgugpetMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm
MjgyN2MwHhcNMjYwOTAzMDYyODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGZjMjc5MWNlMGE1ODc2MzIyMWQ2ZjA2MDVhN2MzNTk5NDMwYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvg7t4vBiPedjdDXrGNAKv2/9msK
65eiVUsvaVWRL+R4d8VXitTL/7KayZfzFTg0Z5G2az+/k4b0wtylQNIU8WFK2/y8
TK/dctmbraePfVBbrtikSGd5m2xgIAAhLZFQbIH19DXMr6v2VsBpXfVMEeue+veP
2/rS/7hxCGua8kj3DCeEs6Znnam0tzt37A2kQKPBGJf4TlXFEq8pV0NpFtocpa3U
PBk/E+jC+5+cI11LRqJazRnCZB5KLFtrMDV0aC50mUZm61YuOY815t5Vb9cv0E6N
CY1xRDBKcrZG+9C3Ccg7xh2gqDkLdO8VPgmO2KMzUMjK0S64CPWdtLHyRwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEj8J5HOClh2MiHW8GBafDWZQwomMB8GA1UdIwQY
MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt
YmFiNDhkYWI0Y2Q2LzEvU1B3bmtjNEtXSFl5SWRid1lGcDhOWmxEQ2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2
LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1HIpMAwD
BADUci0DBADUci4wDQYJKoZIhvcNAQELBQADggEBAK7kZyrxqvN9WVhY3TdJp7E2
HTMXVZZzmP/kM4TPPt6C/RufuOD+P2UF95vgOLEpyEqqcjxRzVjFSYTOtAtPhrnR
eHoVmEpcqrNgZ0wzlLJnk1vk5RX9EFJqKwlfhBB+B1TWx7knZdgH3NvzhQa0XGaZ
8YaTKF9LoPhvO5VfzSEoK2agA1TnRl4+EXO+jJkSsg3L7KvtSn8N5zI93CvRWYHj
wV/m/K4ut2C2TgI7kb5tYr48Im4zU1wHswyJHJ0z8CPfIegRd50NP9TEHY4/9p6L
uG56JjQDq9hy1jetYA/Avuz/P31fy6U7BmatPsFRNxh/MFgCdgqlQUqn3k3tLgs=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:17 2026 by rpki-client