Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/vZOfCIg9L8SEJQT_PB29EUcqp1o.roa
File: vZOfCIg9L8SEJQT_PB29EUcqp1o.roa (raw, json)
Hash identifier: D6jkKtX92Ek141r9wDvoefr0ADP2trBgJ4ZfnvX2MDA=
Subject key identifier: BD:93:9F:08:88:3D:2F:C4:84:25:04:FF:3C:1D:BD:11:47:2A:A7:5A
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019FDD1690E4EADE951930D7B5169A6A9693
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/vZOfCIg9L8SEJQT_PB29EUcqp1o.roa
Signing time: Fri 07 Aug 2026 16:37:51 +0000
ROA not before: Fri 07 Aug 2026 16:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 212.102.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:16:90:e4:ea:de:95:19:30:d7:b5:16:9a:6a:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Aug 7 16:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd939f08883d2fc4842504ff3c1dbd11472aa75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:ba:aa:37:e9:fc:d8:5d:4a:b2:69:03:a2:
28:ea:04:a5:69:a2:27:b8:c2:77:ab:19:f3:42:ee:
ab:5e:a3:a9:b0:23:b5:b6:87:d2:5e:3d:c5:04:17:
10:fb:4e:6a:16:53:8a:19:20:6e:53:2a:57:e1:e8:
eb:f9:8c:0b:4a:e1:d0:47:25:6c:93:ba:03:37:e5:
be:bd:32:c7:bb:68:a8:8d:36:88:69:60:4c:12:94:
cc:a1:46:78:ac:3b:56:2b:b3:16:69:15:4b:50:d8:
46:28:df:a1:4e:91:09:93:ee:eb:09:d4:87:f7:e7:
e0:aa:c4:ec:2c:ee:68:74:91:07:15:08:12:26:ac:
7f:f8:40:8e:7b:3e:db:15:5f:dd:84:ff:f1:15:a2:
45:89:f7:43:3d:4e:c1:0e:b7:18:7b:6b:09:98:7a:
c6:bf:94:1c:cb:6d:04:23:c5:a7:79:01:53:17:a8:
65:b9:d2:7a:fa:95:bb:dd:42:c0:f7:d5:bd:4f:ac:
40:31:15:d5:c5:33:58:5c:6c:f3:5d:4c:62:dc:1a:
e1:6e:fc:d4:7e:32:b7:01:5e:08:f6:58:1b:d6:0f:
6f:6e:2b:5f:6d:b8:8c:1d:db:9b:90:d8:60:7e:d3:
9f:b0:21:b4:1f:06:c7:2a:4d:8b:83:d0:84:d8:ea:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:9F:08:88:3D:2F:C4:84:25:04:FF:3C:1D:BD:11:47:2A:A7:5A
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/vZOfCIg9L8SEJQT_PB29EUcqp1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.227.0/24
Signature Algorithm: sha256WithRSAEncryption
38:49:1a:46:ee:9b:3e:96:58:90:43:10:96:d8:36:ab:3c:07:
40:66:32:54:f2:af:be:b1:49:23:a1:59:cf:49:62:ff:d8:3a:
fd:00:c8:b7:9f:02:f9:18:da:19:ec:6c:50:8f:68:0a:b3:c7:
c0:8c:d2:01:e0:e1:52:39:8c:b2:37:12:c0:24:7a:08:20:26:
de:1e:79:42:76:df:8c:f0:23:02:ef:b4:b7:e6:a3:d8:16:e5:
6c:1b:9e:40:b5:89:be:fd:0a:92:32:f0:f0:28:8e:5e:ce:45:
53:bb:aa:53:24:b3:60:85:a8:dd:f9:ba:d4:30:19:b9:c9:e8:
f5:44:b6:08:ef:ae:ce:29:86:c5:c1:7a:2c:7c:5b:34:28:a4:
44:d9:9d:5d:69:de:69:7b:81:58:02:55:cf:5d:99:c8:33:14:
2e:64:11:ea:e0:36:85:de:37:f8:f1:f1:0e:7f:22:f7:dd:80:
80:1f:a3:97:7b:65:23:cf:64:aa:09:ed:0d:77:49:09:65:17:
69:dc:52:fa:2e:2f:6c:1c:28:14:6e:d0:fe:dd:91:02:d6:cf:
65:99:2b:29:a3:71:f7:10:c1:db:77:a6:90:85:27:88:a3:84:
39:8e:12:5a:5f:ae:0f:af:8a:6a:1b:f1:46:be:65:aa:62:8a:
31:e8:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:13:18 2026 by rpki-client