Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/kvP2mI40vax4nF6kVjBW7CPEusk.roa
File: kvP2mI40vax4nF6kVjBW7CPEusk.roa (raw, json)
Hash identifier: XQESmT9q2hkU8SLAW++EjKoLyZosWL6LnbGsHkaVg6M=
Subject key identifier: 92:F3:F6:98:8E:34:BD:AC:78:9C:5E:A4:56:30:56:EC:23:C4:BA:C9
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A019DAF93C14DEAE2411C5651929832A03
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/kvP2mI40vax4nF6kVjBW7CPEusk.roa
Signing time: Wed 19 Aug 2026 11:49:35 +0000
ROA not before: Wed 19 Aug 2026 11:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 212.124.68.0/24 maxlen: 24
212.124.69.0/24 maxlen: 24
212.124.70.0/24 maxlen: 24
212.124.71.0/24 maxlen: 24
212.124.72.0/22 maxlen: 24
212.124.77.0/24 maxlen: 24
212.124.78.0/24 maxlen: 24
212.124.79.0/24 maxlen: 24
212.124.80.0/22 maxlen: 24
212.124.86.0/24 maxlen: 24
212.124.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:da:f9:3c:14:de:ae:24:11:c5:65:19:29:83:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Aug 19 11:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92f3f6988e34bdac789c5ea4563056ec23c4bac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:24:03:88:d9:85:32:57:8b:0d:37:c1:44:
7e:45:11:77:90:7e:3f:af:11:34:47:e6:e8:2d:1a:
54:a2:95:49:92:81:fe:a0:14:25:d2:f1:86:68:2a:
45:ca:9d:59:4c:e5:bc:ba:cc:5d:c8:6e:b6:c4:36:
ee:26:b3:a0:91:57:db:51:cc:ef:5c:2b:af:ab:81:
e3:03:d0:58:d9:cc:27:60:cd:22:fa:f2:fb:f2:9a:
f1:39:2a:20:0e:25:4a:62:b7:55:14:b0:76:37:35:
2a:16:e1:60:69:36:89:16:7c:3e:89:2b:51:66:50:
35:3a:c9:60:a6:99:76:0b:65:3a:89:92:20:19:c8:
25:c0:8c:15:14:1c:18:f0:65:47:a2:c3:c0:ae:4a:
34:f9:1d:1e:10:29:d9:78:86:c2:73:0b:f5:a7:67:
20:78:79:1c:9c:33:30:46:dc:36:96:cb:e3:5c:79:
a7:23:26:3c:84:de:91:93:8e:fc:c7:a9:8f:da:f1:
31:d3:16:c4:86:e1:03:d9:87:cf:7c:63:81:e0:b7:
9e:b3:ec:bd:71:b3:b1:36:b1:a6:8e:c0:32:c2:03:
6a:c2:78:b2:2b:54:bc:a9:9a:20:43:da:11:d1:ad:
23:22:55:e8:91:51:a0:8d:fe:9c:8a:0b:26:3d:3d:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:F6:98:8E:34:BD:AC:78:9C:5E:A4:56:30:56:EC:23:C4:BA:C9
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/kvP2mI40vax4nF6kVjBW7CPEusk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0-212.124.75.255
212.124.77.0-212.124.83.255
212.124.86.0/24
212.124.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:da:1a:9b:6f:77:c0:de:63:05:3e:47:c7:39:76:5d:41:61:
96:2e:d6:af:f0:50:16:f2:31:58:48:d7:84:e6:06:1e:6a:df:
f7:ff:24:f1:1f:c4:ad:e5:c5:da:eb:d4:35:10:80:d6:18:7c:
56:e5:96:72:16:fb:11:e2:80:0d:36:05:25:f6:85:45:24:3f:
16:b8:82:c4:d5:fb:b0:a2:c3:bf:26:9e:58:f8:37:a7:86:22:
38:ad:ca:24:9c:b6:c5:54:bd:15:76:d8:ef:fe:0d:ec:51:ae:
17:98:40:56:68:d7:17:c4:ca:be:a4:1b:4c:67:d4:41:52:f1:
0b:d3:c0:8f:2d:e6:8c:bc:65:6f:d5:19:3e:c9:ff:f9:f2:bd:
ff:3a:76:e2:a5:28:c0:77:d8:2f:30:c5:4a:bb:2f:eb:85:ce:
35:db:43:fc:b2:ad:17:65:b1:cd:02:e7:14:fc:11:f6:e4:2f:
31:20:df:ad:8e:27:9c:6a:d4:c0:a8:aa:f2:03:51:6d:55:14:
74:77:29:e0:45:b9:11:e2:90:70:8a:62:50:4d:62:0f:ae:b4:
e1:15:b1:5e:76:7e:7e:9b:c2:b2:26:b6:e4:48:de:fa:82:29:
87:b1:5e:93:e7:71:1e:6d:84:b5:a7:1c:99:27:2c:b3:e8:ee:
77:eb:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:00 2026 by rpki-client