Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/p9NJ7GqekjcDTPnamXWgQzYg85Y.roa
File: p9NJ7GqekjcDTPnamXWgQzYg85Y.roa (raw, json)
Hash identifier: 20tPFohEGSZL/sC6LTxbot1gnSOjQBRIP72gV3wZFi4=
Subject key identifier: A7:D3:49:EC:6A:9E:92:37:03:4C:F9:DA:99:75:A0:43:36:20:F3:96
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A0E7E846E8BE89246D2D25FEC76CBA6DFF
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/p9NJ7GqekjcDTPnamXWgQzYg85Y.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11194
IP address blocks: 212.124.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:46:e8:be:89:24:6d:2d:25:fe:c7:6c:ba:6d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7d349ec6a9e9237034cf9da9975a0433620f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:16:44:08:9a:c0:cb:e7:38:69:61:d8:78:
bf:cf:f3:74:90:d5:12:16:a0:96:9c:3a:71:18:28:
49:c2:95:8f:20:14:60:76:59:a8:9d:12:cc:49:ae:
00:17:49:4c:f1:30:d9:08:60:ee:8e:c1:3a:82:5a:
fb:c6:20:a0:52:39:8d:da:43:a2:cb:73:57:2f:b6:
83:ee:56:1f:3a:eb:0a:37:7c:40:63:93:08:57:74:
c9:8a:2f:59:95:68:84:f1:88:eb:90:79:bf:33:c6:
32:38:84:16:7b:b3:ab:df:24:19:e4:97:7e:21:f5:
ff:eb:e5:c2:be:22:0f:23:b1:2b:5c:01:08:dd:6f:
a3:d2:87:92:45:55:27:e4:e5:a9:cc:5a:f0:61:3e:
f5:32:0d:ad:fa:5d:ae:2d:5d:e5:fa:06:18:bf:67:
23:78:5b:32:c6:25:17:ef:37:f2:01:11:2f:87:d7:
92:6d:b5:15:3d:56:f8:b1:70:38:b9:53:a8:c0:83:
1e:d4:1d:1c:80:87:1f:c9:65:42:af:b6:7c:ff:b2:
59:48:0f:7f:47:e2:3f:0b:64:c8:6e:82:1f:f7:66:
44:41:88:30:32:5c:31:99:3b:c2:91:39:73:41:d7:
f7:b3:1e:e4:7a:2c:65:d8:5f:0e:24:aa:d1:5f:23:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:49:EC:6A:9E:92:37:03:4C:F9:DA:99:75:A0:43:36:20:F3:96
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/p9NJ7GqekjcDTPnamXWgQzYg85Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bb:e2:50:fe:c1:dd:68:01:76:99:3b:eb:48:f2:0c:a6:0c:
44:65:aa:4a:44:2e:c8:fe:a7:f4:e0:9e:d8:76:88:4e:31:4b:
e5:1d:05:ca:2b:db:5a:cb:6e:a6:9d:cc:aa:84:db:44:8b:1f:
7c:90:7f:89:82:5a:6d:c5:47:d1:66:6c:20:1d:fb:2a:78:4e:
73:f2:aa:86:38:b9:64:a9:5e:5c:61:f0:be:d7:73:59:37:92:
10:a0:5f:85:66:fc:27:32:f3:49:65:aa:fa:cb:51:a6:6b:18:
db:c4:67:98:a3:a9:7d:e6:63:8c:49:9e:40:c8:e6:ba:48:90:
62:be:29:6b:03:32:d3:37:c3:c8:1d:8e:00:58:c9:06:ba:98:
3f:82:10:cb:6e:21:c9:4d:76:12:c9:b8:c8:46:d4:f5:83:b8:
df:b1:ed:a3:f3:7c:61:b7:df:34:fb:37:1a:96:83:fe:e6:58:
93:7d:4f:95:d8:ee:ab:2b:c5:88:8c:7a:10:c8:ab:5d:da:95:
58:29:81:d9:8b:dc:11:a3:23:2c:f1:62:fe:67:c9:f8:f5:ae:
e9:d6:4b:b4:f1:8c:3b:90:df:b6:03:9e:e2:76:b4:e3:c5:94:
bd:85:2c:b2:5e:94:cb:0f:dc:0b:7f:96:88:b0:00:a8:87:f3:
34:c9:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:11:50 2026 by rpki-client