Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/f12g_h0Zc6wi228-tY_8mtO099E.roa
File: f12g_h0Zc6wi228-tY_8mtO099E.roa (raw, json)
Hash identifier: 0uIvMjvuIqFE0XcPt6VJPILOZq779t3+AkrF2JY8ERE=
Subject key identifier: 7F:5D:A0:FE:1D:19:73:AC:22:DB:6F:3E:B5:8F:FC:9A:D3:B4:F7:D1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F6EC0A62628690BABBA7A288272816999
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/f12g_h0Zc6wi228-tY_8mtO099E.roa
Signing time: Fri 17 Jul 2026 06:25:46 +0000
ROA not before: Fri 17 Jul 2026 06:25:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 188.255.193.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:c0:a6:26:28:69:0b:ab:ba:7a:28:82:72:81:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 17 06:25:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f5da0fe1d1973ac22db6f3eb58ffc9ad3b4f7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:31:a6:05:96:ca:10:92:42:9f:17:01:da:
a8:4b:0b:d4:78:49:82:9c:ee:ff:0f:34:ab:b1:ff:
e5:d8:92:60:aa:b9:a1:03:9b:7a:96:81:0b:5f:5e:
09:89:67:49:51:ac:46:04:a3:ed:8d:d1:70:77:0d:
ab:ae:70:6d:98:2e:0c:0d:7a:7b:31:61:9a:6d:38:
dd:50:c1:05:74:18:af:06:42:19:95:50:53:65:4c:
ac:28:b2:5c:ac:47:38:3e:91:72:f0:c2:14:66:ed:
7e:da:ea:0b:37:e3:50:e1:44:11:99:32:3c:da:31:
ae:f8:c1:85:fb:35:94:4a:12:7e:c9:c3:83:0c:68:
37:39:b3:10:c7:2a:38:c0:31:9f:2c:f5:f0:6f:63:
d2:32:2c:be:0c:55:82:0c:f1:a3:b0:a5:b5:6c:6f:
96:cb:7a:7b:a7:f6:90:e7:c3:e3:ba:a9:7d:1a:b7:
b5:fa:a2:b9:50:48:c4:88:c5:4d:65:e0:93:78:6f:
ba:72:cc:33:44:77:ce:6b:03:69:cb:e6:bc:bb:c4:
14:2f:be:5a:47:65:35:a1:8d:6a:6c:f2:82:7f:d5:
1a:d3:90:f1:c3:ad:23:15:7b:0c:7b:5b:73:01:24:
33:4b:9f:e5:fb:a0:78:87:8d:25:f7:4d:4d:14:48:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:A0:FE:1D:19:73:AC:22:DB:6F:3E:B5:8F:FC:9A:D3:B4:F7:D1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/f12g_h0Zc6wi228-tY_8mtO099E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.193.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
99:74:43:e8:61:be:be:be:8e:d5:1b:ae:a2:2a:50:5d:c5:48:
61:8f:4f:38:61:cf:e0:16:5f:cb:53:82:f6:a3:8f:a7:8f:61:
cd:be:db:28:a1:db:c0:ef:c2:a3:bf:d0:17:39:82:4f:3e:e3:
33:87:39:07:88:6a:1e:c8:c9:f2:9c:76:e5:67:26:30:ae:59:
df:6f:23:4b:d8:80:68:0d:d9:38:57:d5:22:54:dd:6f:a9:56:
c7:9e:f7:ce:45:5b:ed:98:dc:9c:48:ce:61:50:7f:b0:73:12:
17:61:77:c3:19:d3:4a:03:23:82:3c:67:63:37:d6:a9:59:cb:
a9:eb:9b:c7:54:69:5c:de:b6:fa:ee:fa:24:7e:4e:d5:94:01:
83:a8:e1:db:19:e4:c2:bb:90:bd:97:1c:9b:d2:2e:88:02:6c:
11:a6:77:c7:53:34:f7:8a:76:d4:1a:12:f7:40:3d:bc:0c:d6:
24:b3:b8:c4:db:22:84:c0:8e:3f:67:69:71:41:06:a6:a9:f0:
e9:c7:08:8f:7b:88:e3:43:b6:ab:58:b1:b7:b1:18:26:f3:9c:
0b:17:52:e6:07:b6:9a:ba:bd:11:f1:53:c0:16:27:62:bc:2b:
0c:22:9b:4e:c6:05:38:bd:2d:8f:e3:0d:14:39:48:25:9f:00:
82:ef:fa:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9uwKYmKGkLq7p6KIJygWmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNzE3MDYyNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjVkYTBmZTFkMTk3M2FjMjJkYjZmM2ViNThmZmM5YWQzYjRmN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74xpgWWyhCSQp8XAdqoSwvUeEmC
nO7/DzSrsf/l2JJgqrmhA5t6loELX14JiWdJUaxGBKPtjdFwdw2rrnBtmC4MDXp7
MWGabTjdUMEFdBivBkIZlVBTZUysKLJcrEc4PpFy8MIUZu1+2uoLN+NQ4UQRmTI8
2jGu+MGF+zWUShJ+ycODDGg3ObMQxyo4wDGfLPXwb2PSMiy+DFWCDPGjsKW1bG+W
y3p7p/aQ58Pjuql9Gre1+qK5UEjEiMVNZeCTeG+6cswzRHfOawNpy+a8u8QUL75a
R2U1oY1qbPKCf9Ua05Dxw60jFXsMe1tzASQzS5/l+6B4h40l901NFEj2DwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH9doP4dGXOsIttvPrWP/JrTtPfRMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvZjEyZ19oMFpjNndpMjI4LXRZXzhtdE8wOTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvP/BAwQA
1EUIMA0GCSqGSIb3DQEBCwUAA4IBAQCZdEPoYb6+vo7VG66iKlBdxUhhj084Yc/g
Fl/LU4L2o4+nj2HNvtsoodvA78Kjv9AXOYJPPuMzhzkHiGoeyMnynHblZyYwrlnf
byNL2IBoDdk4V9UiVN1vqVbHnvfORVvtmNycSM5hUH+wcxIXYXfDGdNKAyOCPGdj
N9apWcup65vHVGlc3rb67vokfk7VlAGDqOHbGeTCu5C9lxyb0i6IAmwRpnfHUzT3
inbUGhL3QD28DNYks7jE2yKEwI4/Z2lxQQamqfDpxwiPe4jjQ7arWLG3sRgm85wL
F1LmB7aaur0R8VPAFidivCsMIptOxgU4vS2P4w0UOUglnwCC7/q+
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:18 2026 by rpki-client