Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/F4SS2nAtZGfBCcizniZNF8kbqKM.roa
File: F4SS2nAtZGfBCcizniZNF8kbqKM.roa (raw, json)
Hash identifier: HKR9CN00lz/+opq5i3oKemga0jRQrkicKz4E2CgkRB4=
Subject key identifier: 17:84:92:DA:70:2D:64:67:C1:09:C8:B3:9E:26:4D:17:C9:1B:A8:A3
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A04775A108530F4BE3D4170D365E1F33A7
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/F4SS2nAtZGfBCcizniZNF8kbqKM.roa
Signing time: Fri 28 Aug 2026 08:21:26 +0000
ROA not before: Fri 28 Aug 2026 08:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 212.124.94.0/23 maxlen: 24
212.124.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:75:a1:08:53:0f:4b:e3:d4:17:0d:36:5e:1f:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Aug 28 08:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178492da702d6467c109c8b39e264d17c91ba8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:73:4d:dd:71:d3:4b:37:c4:1b:2a:66:28:
88:6f:97:7e:ad:d0:96:a2:c0:5b:db:ce:93:62:d4:
c6:0f:b8:2c:07:d4:12:f5:d8:55:b7:ad:31:5c:81:
94:ac:db:c1:17:88:51:ac:62:cb:2b:9d:ff:06:00:
af:50:7b:73:dd:2b:8a:3e:8e:e1:ef:b3:39:f5:c1:
f9:c9:ef:0b:0d:cb:00:f7:53:72:45:ba:42:5f:c0:
9d:7d:83:06:4b:ad:4e:0d:4b:5b:6f:ab:4f:b2:d9:
59:f3:a2:dc:ea:ff:c1:eb:dd:51:0d:3a:b9:0f:37:
2a:17:b1:9e:c4:00:5e:11:db:67:09:b8:22:cc:1e:
15:90:d3:58:d5:75:12:60:ce:e7:0d:ca:c8:41:ae:
0d:39:50:94:00:be:72:57:a2:c3:8b:a6:c0:82:1e:
78:bd:a3:5f:4e:05:1d:b1:69:5b:4d:58:5f:ee:13:
78:a3:c5:b5:a8:83:5d:89:20:c8:c5:d7:32:61:7a:
37:a5:70:c6:ca:ec:cf:f0:e9:07:5c:50:f5:e7:74:
30:78:c9:7d:9b:92:17:de:c5:67:25:42:8f:6e:41:
a5:3f:90:eb:ae:ca:f5:52:a5:03:5d:5d:d2:f5:a5:
48:87:83:b0:9b:2c:47:c7:d8:a8:93:25:78:f2:6e:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:92:DA:70:2D:64:67:C1:09:C8:B3:9E:26:4D:17:C9:1B:A8:A3
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/F4SS2nAtZGfBCcizniZNF8kbqKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.94.0/23
Signature Algorithm: sha256WithRSAEncryption
98:1f:db:38:2f:4d:17:29:27:e7:8b:0f:fc:56:33:c8:f7:01:
32:4c:6b:b4:3e:2f:fd:84:5f:d0:b9:54:7d:2e:34:4a:9a:9a:
85:52:12:f2:84:22:bd:dc:e7:f0:7c:dd:1d:81:1d:8a:36:a9:
fc:46:16:96:b6:5e:8c:e6:b1:61:f4:42:66:8d:b4:d6:92:1b:
c3:cc:f0:cd:82:1e:be:57:3d:cc:1b:cb:b0:b1:ba:bb:31:8f:
9b:f4:1a:6d:7f:4a:ca:21:3c:14:a2:5e:79:e4:10:5a:e4:6c:
c0:95:08:85:d8:f1:0a:53:98:31:83:2e:79:4a:a8:a0:37:b9:
ba:f7:a8:75:15:31:6a:51:f5:9e:04:7e:1e:7b:b8:f8:42:1f:
d8:f6:ca:14:a9:99:1c:15:fc:3c:fd:1d:0e:b0:81:6e:88:e7:
f1:c6:c2:cd:48:58:25:be:98:6f:f3:83:83:9e:d3:49:24:b6:
e7:68:3a:a2:82:5e:44:42:fa:db:d5:21:2d:2d:34:f5:5d:e5:
10:10:c5:1d:97:8d:5b:a4:5a:24:0c:a9:14:99:52:6b:b3:4e:
a2:a0:b3:b3:e7:d9:e8:f9:9a:3d:82:05:cc:b7:c9:8a:da:dc:
5c:1b:4c:25:bd:95:e5:05:c8:d5:ac:2a:25:59:c5:db:65:68:
81:a3:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:12 2026 by rpki-client