Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/20G7CIBgAT0-d2pBdBrKdpWjBtA.roa
File: 20G7CIBgAT0-d2pBdBrKdpWjBtA.roa (raw, json)
Hash identifier: ipRp1NZiOon3XX8CoXm2sz5/zNKtEsJGsuNA6TcxmZI=
Subject key identifier: DB:41:BB:08:80:60:01:3D:3E:77:6A:41:74:1A:CA:76:95:A3:06:D0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FC3F710ADFB2A35F2284F902E08627803
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/20G7CIBgAT0-d2pBdBrKdpWjBtA.roa
Signing time: Sun 02 Aug 2026 19:32:56 +0000
ROA not before: Sun 02 Aug 2026 19:32:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400899
IP address blocks: 212.189.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:f7:10:ad:fb:2a:35:f2:28:4f:90:2e:08:62:78:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 2 19:32:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db41bb088060013d3e776a41741aca7695a306d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:e8:03:04:d5:01:7e:95:41:1a:47:0b:01:
99:5a:8c:b7:8b:c9:09:c9:c7:ff:fc:1c:29:94:ff:
84:74:23:f3:93:81:67:59:06:74:d5:42:82:57:c3:
50:57:42:a1:69:96:48:55:a6:dd:b8:04:36:7c:91:
d9:bd:87:30:11:28:69:f2:38:b2:9a:a8:00:78:64:
2d:6b:67:3e:6e:45:a2:8e:66:36:44:b7:e0:ce:05:
a2:2e:ba:7a:93:1a:2e:51:d3:75:95:0a:d9:af:84:
9b:27:06:98:c4:ba:c4:ed:f5:15:6e:04:18:5a:44:
10:ce:6f:3c:ba:8f:5a:34:a5:a0:9c:20:88:93:39:
27:c2:9e:f6:49:58:8b:2f:cd:44:38:ee:a5:d1:ae:
a4:3a:cc:cd:dc:e7:fc:3b:c1:c0:ad:30:65:fc:53:
49:31:ba:62:4f:d3:33:8f:e4:0d:56:67:9c:b4:67:
6e:be:f7:95:26:f5:ec:28:eb:7d:d4:76:61:cd:24:
e5:03:29:ef:ca:8b:44:84:56:1d:31:6a:9c:35:12:
70:6c:17:97:be:2d:41:bf:7e:03:45:21:d4:34:8b:
93:58:38:58:c7:bd:1e:e1:c6:04:5f:2e:11:e9:9c:
c9:d6:68:a7:4e:0f:82:8d:41:f4:bb:27:11:3b:77:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:41:BB:08:80:60:01:3D:3E:77:6A:41:74:1A:CA:76:95:A3:06:D0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/20G7CIBgAT0-d2pBdBrKdpWjBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.8.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f6:19:ad:dd:64:90:2e:3a:d5:90:9a:e0:b4:09:f7:99:6e:
63:e0:3a:3e:0f:18:2e:ac:0b:20:16:4f:d0:d7:53:f8:13:6a:
8f:b9:37:74:de:7e:55:41:a5:b5:7f:8e:63:2d:f7:cf:bd:01:
d2:bf:a7:74:ba:97:c8:62:a7:92:31:00:eb:72:23:97:cc:65:
72:13:10:1a:71:2f:a3:ff:a8:fc:89:e2:58:3c:03:cf:9b:97:
91:1d:7d:e9:a3:84:aa:d8:57:d1:94:4e:5c:59:13:65:1a:cd:
d3:f3:c6:4b:07:96:34:49:e1:70:07:f2:e5:10:8d:68:8a:91:
ad:de:f0:72:12:bc:54:71:bf:3f:b7:c3:54:d3:d9:54:d6:36:
7e:32:46:56:6a:64:9a:4f:4c:54:a9:e7:ce:fe:de:03:84:d1:
25:9f:46:c9:4f:4f:d0:a9:20:1b:90:d4:2f:48:f0:91:55:ee:
c2:5f:87:c3:e2:46:ab:c6:7f:73:fd:0f:1f:18:49:bd:fd:66:
4a:c9:55:7e:b4:7e:7d:87:15:2a:dd:35:9e:c3:c6:f7:4c:7f:
2a:db:3d:44:7b:4d:eb:9d:e2:4a:f1:6b:b8:a6:bd:e0:bd:11:
c1:8b:10:b2:ee:13:07:5c:58:9d:11:85:0a:bc:03:f1:42:08:
4a:a7:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:08:57 2026 by rpki-client