Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/_NcN0_srf3O704WXy9JSPPzoAPI.roa
File: _NcN0_srf3O704WXy9JSPPzoAPI.roa (raw, json)
Hash identifier: de1At12GY0xzd9iJZD6XKMewvGBkIyLz1ARkXv3a1oE=
Subject key identifier: FC:D7:0D:D3:FB:2B:7F:73:BB:D3:85:97:CB:D2:52:3C:FC:E8:00:F2
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01A05124A9D469E065A6DDCE4A6CB8CAF846
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/_NcN0_srf3O704WXy9JSPPzoAPI.roa
Signing time: Sun 30 Aug 2026 05:29:12 +0000
ROA not before: Sun 30 Aug 2026 05:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 212.114.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:24:a9:d4:69:e0:65:a6:dd:ce:4a:6c:b8:ca:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Aug 30 05:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcd70dd3fb2b7f73bbd38597cbd2523cfce800f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:12:8b:e9:76:72:37:a5:94:06:77:ba:61:
93:34:75:df:ab:25:20:c9:56:bd:7a:b1:5c:1e:59:
98:29:f3:93:e1:c3:98:b8:0d:8d:61:3f:b5:a2:5e:
15:6d:d6:81:38:e7:07:2b:fd:00:15:7b:3e:ed:ea:
31:35:16:1e:3e:4d:6c:66:f0:28:99:fa:f4:74:bc:
bb:f9:1c:87:65:fe:96:4c:18:70:6d:9d:f0:56:ef:
6a:d4:05:2f:0a:0c:63:2a:a9:6f:bf:53:12:a9:b8:
0e:9e:78:d9:cc:41:2e:8a:8f:e8:7c:e8:5d:90:82:
13:f8:16:da:c1:23:5f:f7:c3:06:1b:bd:8e:36:4e:
89:5f:30:8b:2c:3f:fb:12:05:9a:3a:76:ca:ba:73:
af:1c:6f:74:cf:c7:b4:d1:57:16:ec:6f:fe:94:9c:
d7:f8:aa:a4:0a:7d:a1:e6:fd:20:49:4f:6b:f6:f5:
95:11:af:6b:80:7f:3c:4e:f4:55:98:ca:32:ab:c4:
5b:54:69:7e:59:58:66:4e:e3:33:1f:53:24:1a:e6:
99:9b:17:63:4a:56:c7:03:b1:46:e0:8f:9c:78:2b:
f2:18:29:a4:13:2b:f2:19:74:36:31:61:6a:05:9c:
63:f1:00:98:d3:9a:dc:6e:77:4c:35:b8:c9:ad:b8:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:0D:D3:FB:2B:7F:73:BB:D3:85:97:CB:D2:52:3C:FC:E8:00:F2
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/_NcN0_srf3O704WXy9JSPPzoAPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.54.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a6:9d:a5:2b:1f:69:80:39:e8:6f:2b:51:1a:f8:a8:9d:a8:
65:6d:4f:77:2a:58:97:2c:53:f4:a7:4f:19:74:71:fb:df:f7:
da:56:a9:3b:b6:d5:23:aa:dd:d0:9a:57:19:06:01:21:97:56:
6a:ee:62:4d:1e:8d:28:36:62:bb:bd:ed:82:12:e4:ed:a6:0d:
c8:df:28:3b:1e:45:f0:5d:7d:26:96:b0:39:d8:3c:43:0e:35:
f9:56:c3:11:ec:43:ce:ec:4d:52:fd:da:5e:46:a3:ef:e5:32:
fb:19:87:50:33:89:c4:ed:fa:3e:1a:93:fa:a7:7d:c9:b9:b1:
c6:99:f8:5f:7d:f0:76:5c:dc:b6:39:3f:00:76:b9:e3:5e:a6:
2d:aa:42:ed:22:70:ef:48:da:52:05:f5:86:1d:7a:a2:86:d2:
21:61:c3:72:42:e9:53:5d:ec:8f:83:a0:7e:38:2e:7a:e0:53:
2e:71:1a:af:66:9d:e4:53:f5:2c:12:a5:d5:21:35:11:16:9a:
3c:4f:34:d2:36:38:c0:61:b1:f3:58:d2:9c:bb:ff:3a:0a:20:
66:b9:05:20:b6:b8:02:77:5d:a5:39:4d:b3:3a:bb:53:fe:c7:
8a:e9:a3:99:6b:03:bd:0c:3f:a6:28:58:b3:5a:ef:a5:bb:39:
5e:73:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:31 2026 by rpki-client