Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/SnPwDc-0nTqJfXka4bMItiAxnag.roa
File: SnPwDc-0nTqJfXka4bMItiAxnag.roa (raw, json)
Hash identifier: FsxQK4FiALmdR7pjWtArDyIp4Te0b42AEfI8eyP5E4A=
Subject key identifier: 4A:73:F0:0D:CF:B4:9D:3A:89:7D:79:1A:E1:B3:08:B6:20:31:9D:A8
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019FCB6715FE7F4C4B0C8ACA1D4693D0B6CF
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/SnPwDc-0nTqJfXka4bMItiAxnag.roa
Signing time: Tue 04 Aug 2026 06:12:38 +0000
ROA not before: Tue 04 Aug 2026 06:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 212.124.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:67:15:fe:7f:4c:4b:0c:8a:ca:1d:46:93:d0:b6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Aug 4 06:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a73f00dcfb49d3a897d791ae1b308b620319da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:81:de:a0:4d:df:f9:6c:70:29:8f:8f:82:
2d:07:85:f5:af:47:fa:b7:49:fc:b8:8a:44:54:67:
ba:93:8f:1a:e3:bb:86:3b:4d:91:d7:14:ef:56:6c:
01:ef:e7:c0:61:85:0c:6f:e7:96:b1:85:21:e4:10:
b7:70:6e:b4:c0:bf:70:67:f3:5d:97:79:5c:bb:8f:
ed:f7:6d:8f:e3:6b:71:2e:02:41:6b:8a:10:de:37:
c3:0e:da:a1:4e:e0:1b:c1:ca:f3:f0:5d:39:15:98:
95:4a:33:b4:68:69:bf:9d:00:ad:d9:d6:6a:b0:d6:
69:38:3c:20:e8:be:b4:ca:02:7d:4f:b9:f9:2c:27:
1f:a1:0d:11:74:bd:90:b0:45:ee:4e:95:27:50:71:
1e:f7:89:0c:be:de:38:df:ef:fb:4b:61:32:ef:8e:
50:4c:63:0f:7c:5b:51:76:b1:96:16:cd:fe:2d:60:
30:a6:76:a0:dc:81:14:08:41:64:1b:20:3f:15:6a:
88:5d:de:e1:86:03:39:2c:8c:25:30:03:df:45:8d:
c3:59:44:7c:43:46:d3:71:1d:ed:a9:fc:88:88:60:
48:d1:95:b0:69:ba:d4:44:30:80:b0:c2:1e:5d:57:
b6:0d:60:49:fc:82:5e:8c:94:db:32:14:e3:e0:7f:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:F0:0D:CF:B4:9D:3A:89:7D:79:1A:E1:B3:08:B6:20:31:9D:A8
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/SnPwDc-0nTqJfXka4bMItiAxnag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.72.0/22
Signature Algorithm: sha256WithRSAEncryption
52:26:72:7f:1d:90:1d:81:ad:5b:26:c9:f1:bd:bf:24:e4:73:
6d:ee:52:16:2a:54:e3:46:4d:cc:72:43:35:16:79:13:f5:25:
a7:6d:ca:15:98:a5:07:6e:01:5b:12:b4:32:dd:57:e9:fa:9d:
6e:c7:c6:ec:64:83:1e:84:2c:7d:75:d1:4c:29:e5:8c:a8:f4:
e5:fa:fc:ce:2e:ec:24:96:95:4c:3b:e3:9d:5c:6a:dd:e3:0b:
e5:7e:43:fd:cd:ca:29:a2:6b:75:39:92:d7:6d:90:ef:5a:2e:
13:13:3b:f6:b6:74:70:6c:06:0b:9e:01:a2:0d:ed:f6:35:b4:
12:ac:cc:39:e2:77:af:2f:dd:c3:88:bb:1e:97:17:10:71:99:
62:63:71:d8:86:e8:66:90:fc:e2:84:3e:6e:dc:7a:ae:88:d4:
9e:49:83:fb:3d:af:17:d4:4e:f0:2c:d0:ec:aa:6d:2f:ae:ae:
21:be:7d:cf:59:35:c9:a0:ab:bd:98:44:45:0a:70:f6:ae:6e:
91:1f:16:6d:2c:82:99:a7:e4:28:e4:1e:ab:82:be:89:fc:5c:
c3:5c:50:ff:67:b4:88:9d:75:99:c1:f9:3e:91:56:ae:90:5b:
38:95:4c:6e:5e:65:08:d3:65:26:b4:67:c8:52:1c:07:86:73:
b3:ed:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:04 2026 by rpki-client