Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ts1pF9IuOtsG6MORS9TxN4ZUynY.roa
File: ts1pF9IuOtsG6MORS9TxN4ZUynY.roa (raw, json)
Hash identifier: qnP47gtGKaM8m6t6aMvd42h7A8nkD9mykwqjLsAUTYo=
Subject key identifier: B6:CD:69:17:D2:2E:3A:DB:06:E8:C3:91:4B:D4:F1:37:86:54:CA:76
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A04775A04F68342B1245E965CBA0A6E9C6
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ts1pF9IuOtsG6MORS9TxN4ZUynY.roa
Signing time: Fri 28 Aug 2026 08:21:26 +0000
ROA not before: Fri 28 Aug 2026 08:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 212.124.76.0/24 maxlen: 24
212.124.88.0/22 maxlen: 24
212.124.88.0/24 maxlen: 24
212.124.89.0/24 maxlen: 24
212.124.90.0/24 maxlen: 24
212.124.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:75:a0:4f:68:34:2b:12:45:e9:65:cb:a0:a6:e9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Aug 28 08:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6cd6917d22e3adb06e8c3914bd4f1378654ca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:85:5e:a2:5f:c6:86:3e:2d:e5:74:b7:87:
ba:3f:09:3b:77:1e:1d:09:bd:19:84:63:73:51:82:
2c:65:72:db:ac:fe:15:1d:08:29:97:cd:21:db:cf:
d2:72:6b:c1:f3:7d:c6:86:04:27:5e:4d:92:a8:38:
9b:58:a9:56:f6:48:1f:6a:52:bd:a4:65:5e:22:63:
5b:cf:dd:94:9d:20:e5:5f:cf:52:b8:32:33:aa:ac:
98:9d:8f:6c:d9:dc:e0:d3:fb:74:39:6b:ad:08:d4:
43:a0:87:25:c1:66:45:b3:50:a6:5b:08:c1:25:6b:
ad:dd:24:88:20:c7:41:5b:60:4d:0d:a1:ff:27:09:
c3:28:1a:6d:d9:a5:c5:1a:9c:a0:49:76:c7:2c:3b:
0b:95:24:fd:62:75:40:77:34:25:8f:89:9e:20:90:
0f:5d:17:5b:9e:d4:23:e6:9f:9d:08:1b:93:f7:59:
34:a7:c1:0b:8d:25:99:47:7b:8d:6b:ef:2b:1c:ce:
e9:e6:ca:95:1a:14:27:ea:ab:c7:f5:0a:03:c1:38:
a7:42:43:15:34:38:36:a8:e6:eb:d2:49:07:73:ef:
07:17:cb:6a:17:7a:96:28:3f:76:2f:a0:5f:93:7e:
88:c1:b9:1a:2c:ad:64:9c:0e:8f:a8:a9:d3:cf:9d:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:69:17:D2:2E:3A:DB:06:E8:C3:91:4B:D4:F1:37:86:54:CA:76
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ts1pF9IuOtsG6MORS9TxN4ZUynY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.76.0/24
212.124.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:a0:3d:b5:44:53:b1:c2:8a:35:df:32:f7:e6:6a:83:23:ab:
a2:1b:b0:7d:1b:ca:c4:ca:c6:fb:0a:57:20:e3:5e:cd:8a:bc:
a2:ea:d1:c6:df:54:ad:6f:85:c2:8f:62:38:be:47:4d:96:f8:
91:6b:ea:8a:8c:46:20:2c:4a:8f:0b:55:1a:25:57:df:2c:3b:
79:b1:9b:e8:1e:11:80:f1:ba:60:62:f3:00:05:4c:6a:d6:3b:
4d:65:2d:28:4b:25:87:b7:01:85:a2:d8:ca:b7:48:8f:5c:76:
82:cf:8e:3f:74:b2:7b:33:5b:0e:b7:ea:3e:3e:de:6f:22:97:
7d:3f:d6:37:1f:65:09:4f:76:2e:ec:ab:5f:55:e8:0f:97:32:
2b:7d:bd:2a:79:f1:25:08:ec:d8:57:9b:31:41:2f:4d:ba:9f:
b2:e1:c0:e8:40:46:1b:06:5f:30:93:0c:2c:ed:ef:8b:01:f2:
97:73:9d:4e:25:a4:15:19:05:09:75:44:76:34:5f:ef:ff:07:
06:0d:28:32:39:3e:c7:9c:e0:7c:df:20:33:be:1b:58:f9:79:
f5:e8:6a:e4:3c:0c:04:2e:a9:d5:ed:33:83:98:fd:ca:1f:e1:
cf:cc:d5:bd:2e:87:4c:a4:f3:bc:e1:b7:14:39:cd:cc:98:af:
da:c3:c8:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBHdaBPaDQrEkXpZcugpunGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm
MGEyMTcwHhcNMjYwODI4MDgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmNkNjkxN2QyMmUzYWRiMDZlOGMzOTE0YmQ0ZjEzNzg2NTRjYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloKFXqJfxoY+LeV0t4e6Pwk7dx4d
Cb0ZhGNzUYIsZXLbrP4VHQgpl80h28/ScmvB833GhgQnXk2SqDibWKlW9kgfalK9
pGVeImNbz92UnSDlX89SuDIzqqyYnY9s2dzg0/t0OWutCNRDoIclwWZFs1CmWwjB
JWut3SSIIMdBW2BNDaH/JwnDKBpt2aXFGpygSXbHLDsLlST9YnVAdzQlj4meIJAP
XRdbntQj5p+dCBuT91k0p8ELjSWZR3uNa+8rHM7p5sqVGhQn6qvH9QoDwTinQkMV
NDg2qObr0kkHc+8HF8tqF3qWKD92L6Bfk36IwbkaLK1knA6PqKnTz50+nwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLbNaRfSLjrbBujDkUvU8TeGVMp2MB8GA1UdIwQY
MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt
MjhkNzhlYjlmMmRjLzEvdHMxcEY5SXVPdHNHNk1PUlM5VHhONFpVeW5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj
LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1HxMAwQC
1HxYMA0GCSqGSIb3DQEBCwUAA4IBAQBtoD21RFOxwoo13zL35mqDI6uiG7B9G8rE
ysb7Clcg417Niryi6tHG31Stb4XCj2I4vkdNlviRa+qKjEYgLEqPC1UaJVffLDt5
sZvoHhGA8bpgYvMABUxq1jtNZS0oSyWHtwGFotjKt0iPXHaCz44/dLJ7M1sOt+o+
Pt5vIpd9P9Y3H2UJT3Yu7KtfVegPlzIrfb0qefElCOzYV5sxQS9Nup+y4cDoQEYb
Bl8wkwws7e+LAfKXc51OJaQVGQUJdUR2NF/v/wcGDSgyOT7HnOB83yAzvhtY+Xn1
6GrkPAwELqnV7TODmP3KH+HPzNW9LodMpPO84bcUOc3MmK/aw8hz
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:12 2026 by rpki-client