Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/_X0bRHceQUds2sQL_FpiWJxD9QY.roa
File: _X0bRHceQUds2sQL_FpiWJxD9QY.roa (raw, json)
Hash identifier: hKjph8soEua7HoSuBbCiFUhm5tA80/17iJt8Ge1lIDg=
Subject key identifier: FD:7D:1B:44:77:1E:41:47:6C:DA:C4:0B:FC:5A:62:58:9C:43:F5:06
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019F3E2ED3AF0C0B9A31C51AB5D5235406B7
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/_X0bRHceQUds2sQL_FpiWJxD9QY.roa
Signing time: Tue 07 Jul 2026 20:04:43 +0000
ROA not before: Tue 07 Jul 2026 20:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 212.66.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:2e:d3:af:0c:0b:9a:31:c5:1a:b5:d5:23:54:06:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jul 7 20:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd7d1b44771e41476cdac40bfc5a62589c43f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:e0:00:2f:7b:f1:66:37:60:ba:e7:b4:85:
cc:22:aa:32:9a:c6:eb:13:a2:58:77:dc:55:d7:e8:
aa:64:e1:ef:f7:5e:7b:7f:ef:2d:16:d5:d2:26:89:
71:af:2e:ed:4c:38:d2:98:73:8e:af:73:b9:61:32:
76:01:37:26:2b:2d:2f:38:38:b3:ba:61:64:f5:f1:
e2:ea:a8:d7:3d:e8:61:8d:74:df:ad:fa:e8:ea:5a:
1f:ab:32:70:ec:36:54:58:81:72:fc:a9:a5:08:14:
5f:87:2b:c4:16:a0:77:62:08:24:10:3a:fc:e5:87:
25:f9:1a:26:d4:2d:64:18:a8:9c:77:a4:88:af:55:
08:97:da:2f:e0:30:e2:77:8e:4e:0c:d0:36:65:67:
c5:f6:17:65:39:8d:b4:2e:e1:bf:55:eb:e7:d3:84:
11:a5:70:43:bf:c6:22:c8:22:f5:e0:bb:a8:6f:0b:
29:3c:9a:87:ab:19:3f:f6:45:61:32:00:59:6f:41:
a5:b1:af:da:93:de:6c:7b:e4:5d:58:ac:d5:e5:8f:
13:a8:7a:b2:96:8f:a2:5c:0e:75:b0:21:3a:3f:91:
9e:b1:53:96:dd:e1:7f:fd:6f:df:00:5c:31:ba:57:
4e:66:19:c0:98:a6:32:ba:03:8a:a4:38:48:40:d9:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:1B:44:77:1E:41:47:6C:DA:C4:0B:FC:5A:62:58:9C:43:F5:06
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/_X0bRHceQUds2sQL_FpiWJxD9QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.48.0/24
Signature Algorithm: sha256WithRSAEncryption
90:45:de:1e:f3:8e:81:1d:21:72:2e:f8:3f:b2:2b:9c:ea:6b:
f1:45:1d:3f:1e:e2:78:33:83:8e:fa:e5:f0:3d:b6:69:97:51:
13:b8:3f:5f:da:88:8c:a5:f5:f3:e2:89:57:ff:e4:85:c2:43:
d8:54:4d:aa:cf:c9:e8:2e:a4:54:fc:e5:66:ca:84:8f:39:ce:
aa:52:e3:f6:64:84:ef:78:72:16:2d:8b:62:28:b5:4c:95:5d:
74:84:ab:72:17:ed:5e:74:76:5c:c0:89:bc:e3:a1:de:41:c8:
7c:ed:91:82:e9:30:c2:67:5e:c6:c8:71:75:52:1d:c0:13:79:
d5:69:5c:53:5d:d5:7c:a1:64:fb:24:dc:0f:bf:5a:e4:c7:18:
4c:ca:61:39:65:70:99:2a:64:85:12:95:31:e3:5b:d3:b2:63:
92:1c:f5:37:70:df:5b:d0:0b:3a:3a:26:af:02:77:40:57:b3:
e7:5f:81:c3:27:bd:a1:be:12:5e:ee:73:b3:64:c3:08:83:c1:
d1:43:ea:05:98:31:f3:2b:4f:4b:5d:06:92:54:00:8c:de:7b:
f1:37:f3:27:7f:3f:bc:7a:17:0f:c6:7b:81:b0:49:b9:4b:b2:
4d:37:32:b7:7d:37:00:c6:1f:ce:50:96:43:53:cb:b5:6d:17:
d6:d7:bb:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8+LtOvDAuaMcUatdUjVAa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwNzA3MjAwNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDdkMWI0NDc3MWU0MTQ3NmNkYWM0MGJmYzVhNjI1ODljNDNmNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuizgAC978WY3YLrntIXMIqoymsbr
E6JYd9xV1+iqZOHv9157f+8tFtXSJolxry7tTDjSmHOOr3O5YTJ2ATcmKy0vODiz
umFk9fHi6qjXPehhjXTfrfro6lofqzJw7DZUWIFy/KmlCBRfhyvEFqB3YggkEDr8
5Ycl+Rom1C1kGKicd6SIr1UIl9ov4DDid45ODNA2ZWfF9hdlOY20LuG/Vevn04QR
pXBDv8YiyCL14LuobwspPJqHqxk/9kVhMgBZb0Glsa/ak95se+RdWKzV5Y8TqHqy
lo+iXA51sCE6P5GesVOW3eF//W/fAFwxuldOZhnAmKYyugOKpDhIQNmdYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP19G0R3HkFHbNrEC/xaYlicQ/UGMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvX1gwYlJIY2VRVWRzMnNRTF9GcGlXSnhEOVFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EIwMA0G
CSqGSIb3DQEBCwUAA4IBAQCQRd4e846BHSFyLvg/siuc6mvxRR0/HuJ4M4OO+uXw
PbZpl1ETuD9f2oiMpfXz4olX/+SFwkPYVE2qz8noLqRU/OVmyoSPOc6qUuP2ZITv
eHIWLYtiKLVMlV10hKtyF+1edHZcwIm846HeQch87ZGC6TDCZ17GyHF1Uh3AE3nV
aVxTXdV8oWT7JNwPv1rkxxhMymE5ZXCZKmSFEpUx41vTsmOSHPU3cN9b0As6Oiav
AndAV7PnX4HDJ72hvhJe7nOzZMMIg8HRQ+oFmDHzK09LXQaSVACM3nvxN/Mnfz+8
ehcPxnuBsEm5S7JNNzK3fTcAxh/OUJZDU8u1bRfW17us
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:54 2026 by rpki-client