Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/srboMmwqKHPhkNbkM6WH4OcVY48.roa
File: srboMmwqKHPhkNbkM6WH4OcVY48.roa (raw, json)
Hash identifier: QTHUB96thFjrx3rv4+7lC/X2cBokeJcDuu0PFdqOJcA=
Subject key identifier: B2:B6:E8:32:6C:2A:28:73:E1:90:D6:E4:33:A5:87:E0:E7:15:63:8F
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01A13079ED3553D951CB558CF32E33D99948
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/srboMmwqKHPhkNbkM6WH4OcVY48.roa
Signing time: Mon 12 Oct 2026 14:17:39 +0000
ROA not before: Mon 12 Oct 2026 14:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 212.113.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:79:ed:35:53:d9:51:cb:55:8c:f3:2e:33:d9:99:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Oct 12 14:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2b6e8326c2a2873e190d6e433a587e0e715638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:0a:7e:d7:a6:c5:a3:26:1b:19:90:82:5d:
ae:82:b1:66:02:05:80:a8:70:9f:2b:6b:6b:73:da:
89:d9:6b:6e:29:51:3f:09:31:9a:5a:51:5f:3e:00:
15:93:ba:1b:41:9e:c9:32:59:02:80:ff:e3:34:e2:
2d:28:2c:cf:19:a1:eb:fa:af:5a:26:45:d4:9e:10:
a8:ae:01:f4:b3:2d:5b:3b:d3:8f:5b:8d:b3:a1:cf:
2b:e9:f8:3f:d1:05:84:3c:72:e8:a5:c7:d0:f1:5b:
a0:15:24:30:79:e5:84:5b:c7:38:fb:0e:1d:e2:cf:
70:56:b4:39:56:77:76:90:77:72:31:eb:ba:1c:d9:
b9:b5:58:3f:7a:09:23:61:b4:a5:0a:b7:25:cd:3f:
58:93:36:d1:13:d8:0b:e3:fa:09:bc:fe:f2:62:a7:
3b:91:bc:87:85:55:e8:a4:93:eb:46:a7:a3:f8:2e:
a4:fa:60:85:e9:51:40:17:9a:68:ac:78:db:c5:90:
47:02:6d:02:dc:bd:d5:be:6a:e7:39:ae:21:37:57:
e7:ea:4a:b1:4a:5c:36:1e:63:78:6e:4b:d5:76:4e:
73:7b:1b:3f:0e:01:d1:bf:aa:46:c0:67:25:b0:13:
96:3e:31:96:e7:10:18:05:b7:6c:52:49:8b:6f:a3:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:E8:32:6C:2A:28:73:E1:90:D6:E4:33:A5:87:E0:E7:15:63:8F
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/srboMmwqKHPhkNbkM6WH4OcVY48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a1:e2:e0:00:ff:52:dd:ef:c9:74:dc:fc:a2:ae:df:42:f0:
22:1b:9f:8c:95:b0:9b:c8:0d:78:47:3b:5d:27:f8:a3:8d:8e:
c2:11:31:f1:0c:0a:07:06:81:c9:ed:d3:b2:1d:a2:fa:a0:2d:
4d:1d:77:62:88:b4:e3:75:f4:0c:97:5c:21:3b:a4:46:99:42:
f8:58:c8:ec:75:2e:ba:10:d1:91:05:7b:a8:7b:69:b3:87:a9:
47:29:3d:01:93:81:cb:94:78:d6:5f:c4:b5:20:6b:68:98:14:
e0:06:a8:ff:7c:4a:70:af:20:23:3e:04:0b:c4:23:59:d5:57:
af:56:b8:3e:86:6d:8b:22:24:c1:33:7a:4c:ab:2b:ad:dc:d7:
20:c1:ef:93:f9:a6:78:ee:d9:ab:35:26:48:03:5a:06:0c:bf:
64:aa:bd:aa:b3:73:3e:47:23:e3:63:5e:f1:ab:68:58:65:3f:
b6:38:81:88:37:58:7c:2d:7e:80:80:4e:ef:c1:05:18:4b:63:
44:d7:1e:82:53:23:42:d4:a6:4e:3b:d1:41:92:b3:a4:19:5d:
93:92:7c:4f:1a:cc:3a:0f:ed:76:7f:69:0c:6c:a9:aa:d1:cb:
87:6b:5a:f8:3e:2b:54:af:50:7b:ed:b5:2e:10:00:50:fc:9f:
c0:f6:28:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:34 2026 by rpki-client