Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/7OXas1BE939lVr3MLLkFfgwwLME.roa
File: 7OXas1BE939lVr3MLLkFfgwwLME.roa (raw, json)
Hash identifier: FALGOD2pTrLC0LwxjWMNOoQIcuSrSVg8619SA2u9eio=
Subject key identifier: EC:E5:DA:B3:50:44:F7:7F:65:56:BD:CC:2C:B9:05:7E:0C:30:2C:C1
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019F6A492679B3EE39E1D33FF415FB0450F0
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/7OXas1BE939lVr3MLLkFfgwwLME.roa
Signing time: Thu 16 Jul 2026 09:36:46 +0000
ROA not before: Thu 16 Jul 2026 09:36:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61049
IP address blocks: 212.124.212.0/24 maxlen: 24
2a00:19e9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:49:26:79:b3:ee:39:e1:d3:3f:f4:15:fb:04:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jul 16 09:36:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ece5dab35044f77f6556bdcc2cb9057e0c302cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:b4:e6:e8:55:5f:b5:c2:52:4d:99:2f:5a:
1a:01:da:a9:12:b3:4d:50:10:a5:6c:4c:45:8c:05:
cc:e8:8a:0f:98:4a:86:f8:15:3d:0f:a8:17:f3:6d:
a1:bf:b2:01:17:79:75:6a:20:51:e6:ad:ce:4b:e2:
f1:c9:e9:1a:b7:00:a0:a3:e6:1a:1f:da:d6:2d:db:
a2:c3:01:d7:8b:ad:c5:14:fc:91:35:19:1f:39:03:
51:8b:a0:24:2b:98:14:fb:eb:ff:a7:15:5b:f1:76:
90:72:60:a1:39:64:3a:e2:e9:08:4b:40:b5:2d:dd:
70:cc:13:ce:d9:ae:5e:13:b5:ff:a3:5e:50:a3:58:
1a:ac:e5:fd:73:24:ec:3b:b7:b8:e5:b8:c9:7c:fe:
a2:2a:f9:7d:d2:36:b7:33:5a:02:5c:7c:7a:e6:48:
c9:e5:61:6f:7c:02:26:5d:90:60:f5:95:1b:dc:89:
99:2b:79:3b:0d:75:cf:3c:20:25:2f:49:9d:6e:7c:
11:f8:a2:10:77:8f:c0:96:79:46:96:58:8d:00:ac:
ab:95:c6:23:0c:01:7d:3e:94:76:ed:48:71:10:ef:
2e:b0:fa:78:2e:43:28:c6:13:5c:d3:8c:da:8c:42:
7e:4c:d7:dd:12:e0:50:f7:01:da:a2:1c:c4:37:0d:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:DA:B3:50:44:F7:7F:65:56:BD:CC:2C:B9:05:7E:0C:30:2C:C1
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/7OXas1BE939lVr3MLLkFfgwwLME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.212.0/24
IPv6:
2a00:19e9::/32
Signature Algorithm: sha256WithRSAEncryption
33:d7:c2:ac:60:b1:d6:89:87:6d:60:d9:b1:54:7f:db:8d:b5:
e3:90:12:5b:af:d3:43:3b:e4:39:8d:1b:50:19:df:6e:cf:93:
9d:7e:e4:73:1c:6b:05:18:1d:79:36:0c:f6:06:92:6f:1f:36:
b1:09:0f:ee:cf:d8:fc:86:6c:cd:97:93:97:ee:59:45:ec:46:
ca:3a:3e:bb:75:89:c2:76:38:94:45:94:a6:6b:a6:cc:3d:bf:
7b:29:42:10:da:c1:f9:eb:81:2e:24:84:d6:2b:9f:a3:e5:33:
67:af:2e:2e:63:81:83:39:5b:83:69:a6:0e:64:cf:de:30:d5:
32:be:cb:d8:31:c0:84:67:23:1c:17:78:53:e4:39:09:c1:d7:
f4:9b:04:b4:03:8b:8f:26:c8:3a:d4:01:76:f7:b8:4e:a4:1c:
ce:c2:19:1e:12:86:b9:ea:71:41:ef:48:d5:f9:fc:ec:e1:60:
0d:8f:75:37:80:5f:05:07:9b:70:01:52:37:33:b5:2f:9a:4e:
2c:a5:33:9e:9b:3b:e9:1e:54:31:a9:bc:9e:4b:cb:e7:c8:9b:
15:bc:55:09:c4:30:51:68:11:14:b4:cd:a1:55:f0:b6:d4:6f:
1f:17:f7:76:3d:8d:7e:5a:91:b7:bf:46:56:2c:e2:d4:65:1b:
b9:4b:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client