Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/doMjCvh-T_oVkJKD3Y7qOZoudQA.roa
File: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (raw, json)
Hash identifier: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=
Subject key identifier: 76:83:23:0A:F8:7E:4F:FA:15:90:92:83:DD:8E:EA:39:9A:2E:75:00
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019CB31CFCA64278220D9080F8E431427258
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/doMjCvh-T_oVkJKD3Y7qOZoudQA.roa
Signing time: Tue 03 Mar 2026 09:52:27 +0000
ROA not before: Tue 03 Mar 2026 09:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199152
IP address blocks: 212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:1c:fc:a6:42:78:22:0d:90:80:f8:e4:31:42:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 3 09:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7683230af87e4ffa15909283dd8eea399a2e7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:69:ad:91:49:a4:b5:b2:6b:13:e7:89:08:
4d:98:6b:70:92:e8:56:67:3d:24:59:54:ec:ec:97:
e4:75:88:91:af:b6:c5:03:42:df:a3:58:81:b0:3e:
94:67:72:60:10:bf:3c:3f:fb:25:e2:fe:85:6a:cf:
d0:41:58:81:41:f2:52:a5:b4:a3:50:1a:5d:4e:26:
73:47:a4:4c:38:6b:2a:04:5b:5f:37:1b:f4:49:cb:
fb:87:9f:84:01:7c:7b:5b:90:ab:d1:f6:ed:ca:64:
42:f8:56:07:7c:74:6f:f6:26:b1:5c:61:ed:23:3d:
ed:2b:65:b1:fc:b7:a6:bf:07:07:7c:8a:b1:36:10:
15:43:e2:60:fe:88:59:3b:3d:c2:f7:07:24:cc:64:
62:0a:62:c2:47:54:22:81:5f:ed:74:4c:90:d3:83:
4f:5a:e2:60:6f:4d:ff:dc:c6:d9:48:30:18:64:4b:
fa:a4:eb:2b:e3:30:89:df:bb:4e:e3:89:83:d9:4b:
91:6f:a9:ce:43:f4:ed:63:cf:57:84:42:5e:e1:28:
66:45:a6:bb:60:09:86:cc:14:bf:d8:0e:74:57:59:
fd:8c:50:13:1f:6e:71:36:69:8e:00:d3:0c:37:9d:
38:f6:cd:47:89:3d:ac:e9:29:51:0c:62:3d:49:d4:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:23:0A:F8:7E:4F:FA:15:90:92:83:DD:8E:EA:39:9A:2E:75:00
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/doMjCvh-T_oVkJKD3Y7qOZoudQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
c4:4f:90:b1:44:13:ad:8c:9e:9e:4a:4d:da:ac:5b:c0:d1:06:
71:31:e9:93:de:01:f0:88:d2:f0:08:1a:08:90:91:70:cb:1f:
06:a2:87:19:23:e0:85:0d:f5:09:7a:ae:43:18:c9:d0:09:54:
2d:00:d1:9c:cd:7e:6c:7c:cd:ce:1d:cb:17:dd:35:57:a3:53:
61:3f:45:e1:cc:55:fe:23:74:a1:ae:d1:71:24:e9:78:29:b0:
e6:4a:0b:89:3c:7b:4a:2a:23:22:e9:dd:ca:fd:59:80:f4:7c:
56:fd:48:b2:5a:8d:41:c0:31:39:90:aa:f2:56:f5:04:aa:8f:
75:24:b8:08:34:1f:ae:77:63:b6:37:85:da:39:81:1a:26:23:
0a:90:43:bb:e9:d7:03:bd:0c:7c:68:41:8d:b4:38:89:ec:10:
ea:44:6a:30:db:cb:7c:c4:7c:4e:16:01:3e:4e:d4:8b:17:39:
76:f6:3b:3d:37:e9:6b:c3:fc:a2:bc:25:48:ff:de:eb:47:de:
b6:fc:e0:b5:d6:3d:ec:24:c1:85:22:10:25:d0:15:c0:f4:21:
bc:ea:2f:30:cb:b8:48:68:f0:7a:d4:45:5f:a4:77:4b:ea:4a:
4f:cd:8e:cd:27:c5:5e:20:c1:61:ce:c0:51:3e:2c:f5:3c:8a:
de:ed:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:09:45 2026 by rpki-client