Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/egYWRu7pYjFhPGLCQzQa4aLHYMw.roa
File: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (raw, json)
Hash identifier: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=
Subject key identifier: 7A:06:16:46:EE:E9:62:31:61:3C:62:C2:43:34:1A:E1:A2:C7:60:CC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019D2FA0C18BE220A1B1A15142644465FA43
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/egYWRu7pYjFhPGLCQzQa4aLHYMw.roa
Signing time: Fri 27 Mar 2026 14:09:17 +0000
ROA not before: Fri 27 Mar 2026 14:09:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:a0:c1:8b:e2:20:a1:b1:a1:51:42:64:44:65:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 27 14:09:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a061646eee96231613c62c243341ae1a2c760cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:bf:ef:df:7f:a0:c7:9d:e0:b8:19:8d:7f:
da:d5:a0:99:58:4e:aa:fc:10:7b:00:25:fe:28:91:
de:c1:89:3e:51:c6:8b:5b:9b:3c:ab:31:aa:35:80:
cf:6e:13:6f:aa:fe:55:2f:59:ec:7f:1a:1c:4e:5c:
2c:10:3e:3e:80:16:14:42:7f:96:0c:78:6c:82:bc:
73:69:8b:c7:a1:55:c9:c5:c3:e8:5f:64:ac:cb:8f:
eb:69:53:c1:cc:7d:b1:ab:90:df:7d:b6:e9:66:9f:
9f:1f:df:a4:73:62:7e:ff:7f:48:b7:39:8e:06:d5:
26:58:f9:64:f5:96:e4:e4:e3:77:89:48:6d:d8:f7:
f7:02:92:32:37:8b:ae:ea:94:88:df:19:ff:ad:97:
ab:19:1b:b2:ff:4f:2f:c1:fc:a6:27:6a:9d:ec:b9:
3c:09:c4:fe:c6:c9:ff:9a:6e:03:a9:4a:90:a4:8c:
b3:76:8f:92:97:93:d4:e2:47:29:3f:df:b2:79:73:
66:df:3e:4d:c9:d1:71:24:c4:cc:0c:12:b5:99:07:
d3:61:c7:36:eb:81:ac:4f:75:b7:6f:36:9b:13:6a:
ba:72:ea:84:d5:b3:a8:63:45:ed:02:2e:0a:67:1a:
a8:de:27:51:fb:4e:58:e6:f2:d0:7b:0b:ea:1f:23:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:16:46:EE:E9:62:31:61:3C:62:C2:43:34:1A:E1:A2:C7:60:CC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/egYWRu7pYjFhPGLCQzQa4aLHYMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:9d:08:d3:68:77:b6:d5:db:88:b2:18:2d:2c:86:d5:23:ff:
b7:12:e2:58:c9:db:6e:4b:0d:7a:61:bf:01:c7:72:c9:8c:6a:
20:c7:ab:b5:af:36:b4:3e:5d:9b:27:b4:06:a6:71:2d:71:c7:
b3:81:28:89:de:c7:b6:49:b6:8b:54:a4:22:2b:f5:c9:62:71:
fb:76:ae:32:7f:32:cb:a9:61:bb:1b:57:2e:63:8f:53:a1:a3:
1d:7a:b3:a2:ba:63:20:38:64:97:07:8d:79:ab:c6:a3:e9:a9:
74:bc:b0:68:69:15:b4:4d:52:c0:42:93:13:41:3a:b3:ad:43:
22:16:88:09:7a:76:5e:21:2c:80:e2:6e:2e:2f:c4:fd:1d:d0:
f5:31:64:b2:42:b6:fe:47:2f:01:2d:08:ab:30:ee:1f:7b:17:
bc:21:73:6c:cd:62:1c:aa:bf:02:7c:0a:fa:8e:72:f1:c3:95:
df:3d:f4:03:c5:19:b1:32:d7:51:e3:bb:ee:3c:05:fb:94:54:
88:c7:82:79:02:1a:55:3b:e5:d9:e1:93:68:d2:0e:7c:b0:a1:
fc:94:33:1b:79:db:be:0b:29:13:1e:d8:99:fd:3d:e9:5a:3b:
e0:f1:0d:ac:9e:30:45:ed:bd:48:b9:fe:ff:86:fb:e6:2c:2e:
36:da:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:22:11 2026 by rpki-client