Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/CBBkKrCM4butKlVI-TgiHj5vk8E.roa
File: CBBkKrCM4butKlVI-TgiHj5vk8E.roa (raw, json)
Hash identifier: cDORwelpwOEhZ+BpgLvqfOTY9HRVdT1MuxXVpxSB1Go=
Subject key identifier: 08:10:64:2A:B0:8C:E1:BB:AD:2A:55:48:F9:38:22:1E:3E:6F:93:C1
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019F7506E6B887F0BC7902D8D74682067528
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/CBBkKrCM4butKlVI-TgiHj5vk8E.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 212.124.76.0/24 maxlen: 24
212.124.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e6:b8:87:f0:bc:79:02:d8:d7:46:82:06:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0810642ab08ce1bbad2a5548f938221e3e6f93c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:6c:e5:70:a8:54:16:1e:da:e8:40:11:06:
ab:8d:90:fc:ea:35:36:64:4c:71:f7:82:de:ad:01:
88:16:f7:8c:e7:18:96:8b:b0:e4:c3:ec:a8:53:87:
9b:f9:17:70:4d:ef:88:25:70:25:23:8d:1b:7f:4b:
de:9a:28:52:34:a1:e1:23:81:17:fd:9b:32:5a:92:
fb:0c:da:ae:1e:f2:7e:e8:c8:2c:8b:a3:58:11:c2:
69:d3:f2:9f:92:9e:b4:fb:f8:c2:39:25:a7:f1:42:
3c:57:7b:ef:fa:04:07:1c:ca:6f:95:70:ed:f7:55:
ba:55:1b:68:3a:72:32:56:5e:fe:a1:63:d7:e3:54:
f0:d7:86:6e:9c:10:29:40:fa:6b:18:f1:21:4c:ac:
d8:22:68:9e:f8:c2:20:a5:47:e8:47:fc:b2:84:90:
a1:d6:a0:67:28:89:0b:bb:0d:71:5a:32:22:c2:2e:
44:c3:e6:0a:54:0c:92:df:88:b9:ef:74:a8:e0:8a:
84:e2:0a:04:18:d3:e3:c6:6a:61:d6:70:a3:d9:e2:
a9:f0:fe:8f:fd:27:60:91:e7:64:9d:83:d0:83:81:
76:88:46:cb:3c:ff:97:84:f5:0d:53:1e:94:df:d8:
a1:c5:9f:6b:b4:81:d0:80:83:bd:dc:e0:f5:bd:9e:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:64:2A:B0:8C:E1:BB:AD:2A:55:48:F9:38:22:1E:3E:6F:93:C1
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/CBBkKrCM4butKlVI-TgiHj5vk8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.76.0/24
212.124.88.0/22
Signature Algorithm: sha256WithRSAEncryption
04:cf:f8:fa:bd:30:20:c5:38:56:74:6d:de:88:e6:8f:d5:c0:
70:0e:27:16:e8:86:61:ff:09:f0:80:74:ac:35:45:2c:3c:af:
4b:24:ca:46:43:fd:94:8d:ea:f8:8c:a5:ce:47:18:0c:e4:db:
2f:40:03:cb:df:fa:34:ef:fe:d6:b1:69:d3:d1:52:1f:05:62:
a4:ca:a5:3c:f8:fc:6f:a0:c9:04:21:fb:34:2a:8c:f6:99:be:
cc:cf:4f:dc:09:e1:41:bf:76:68:1c:cb:33:ae:ba:84:7f:f4:
30:18:8b:96:0d:3b:56:da:cb:48:ad:0d:54:b2:3f:c7:e6:f8:
85:ea:cc:c6:a8:79:3b:ce:74:a7:7d:e6:db:af:cd:c4:ef:ad:
59:34:40:30:99:96:87:bd:de:72:45:3e:72:7e:fa:3a:a2:16:
ea:93:d2:14:95:bd:09:8a:2a:ab:4e:b4:a8:6e:05:aa:e4:1f:
d2:9f:d8:76:d1:8c:6e:df:48:a5:be:05:7e:cb:42:8f:de:90:
a3:2e:52:4c:34:46:85:0d:79:2b:29:94:43:5c:16:ac:0a:a4:
b1:73:ec:3d:af:ea:04:24:55:49:20:c5:7d:a1:cf:95:80:9d:
09:fc:60:64:f3:93:bd:be:77:f8:bc:4b:bb:3f:de:71:fa:83:
cf:5e:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:04 2026 by rpki-client