Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/SsjUG7QZd27xGISddpgqwONLVjM.roa
File: SsjUG7QZd27xGISddpgqwONLVjM.roa (raw, json)
Hash identifier: +phxIAkNOdbjJbeOyKq9YzXuBX0IlnRFfgnlxP/IxXA=
Subject key identifier: 4A:C8:D4:1B:B4:19:77:6E:F1:18:84:9D:76:98:2A:C0:E3:4B:56:33
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FB31B409F914D8BB1F75DBDB599B9BC8B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/SsjUG7QZd27xGISddpgqwONLVjM.roa
Signing time: Thu 30 Jul 2026 12:58:55 +0000
ROA not before: Thu 30 Jul 2026 12:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 212.87.178.0/23 maxlen: 24
212.87.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:1b:40:9f:91:4d:8b:b1:f7:5d:bd:b5:99:b9:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 30 12:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ac8d41bb419776ef118849d76982ac0e34b5633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:78:82:94:6c:db:e0:06:7a:07:c9:8d:1b:
99:3d:bf:6a:44:f2:7a:82:15:57:a9:29:42:f1:69:
ca:13:27:ad:88:c2:86:c8:52:ce:09:41:ae:9e:54:
fe:29:1c:e7:85:97:c1:bc:7e:7a:3c:17:d8:3b:c4:
26:18:63:5f:2f:ca:98:d2:70:b2:b3:c8:9c:d9:5b:
f3:08:4c:09:b5:f8:50:0a:30:c7:59:dc:7d:32:8f:
99:95:be:a6:eb:6b:b3:d7:13:ed:1d:24:53:e8:25:
c9:5b:bb:c7:d3:b0:4d:9a:2c:bf:9e:87:83:77:16:
82:01:92:7e:6a:13:f0:2a:d4:56:34:d9:a1:13:9d:
b6:19:5c:5f:17:06:e3:85:27:c7:ff:55:b4:fd:5d:
fe:78:38:d9:8c:79:23:73:29:71:27:4a:2b:f1:dd:
fb:be:9e:4a:0d:71:c9:10:05:2c:7f:48:5d:81:99:
43:73:07:2a:da:62:a4:fe:f1:50:5a:bc:b1:37:f2:
80:a1:40:fb:97:de:b6:24:f6:1a:50:29:73:e8:66:
e4:0c:01:4d:d3:40:2c:bf:9f:50:2e:c6:cf:a6:dd:
93:f1:19:11:f8:27:cb:81:9c:d5:d3:e2:85:5f:33:
2d:0f:31:7c:95:da:a1:02:5d:43:72:dc:cc:86:c1:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:D4:1B:B4:19:77:6E:F1:18:84:9D:76:98:2A:C0:E3:4B:56:33
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/SsjUG7QZd27xGISddpgqwONLVjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.178.0/23
212.87.182.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:d0:ba:ea:d3:ad:3b:b0:4f:68:15:92:73:e7:b0:30:d8:cb:
62:68:cf:18:c2:7d:59:3f:bc:1e:c3:71:47:1d:db:5b:f8:d6:
1e:4b:cb:51:39:cb:d7:b0:b9:05:96:11:35:18:fb:7a:fc:74:
67:de:05:8b:24:5d:b9:eb:f4:28:db:d0:e5:c8:f5:f1:78:e7:
4f:a4:24:8a:e7:cb:be:06:26:99:89:bc:f6:69:1b:8d:92:22:
ce:04:b2:e6:49:de:6b:d7:dc:98:01:e2:8d:5a:d5:ac:dc:ef:
04:c3:85:e2:a0:79:cc:6e:30:e1:ee:77:b1:0f:0b:87:f0:7b:
41:09:c0:5d:a5:3e:50:b7:b7:d9:f7:49:f7:45:ac:b8:38:b9:
5e:68:81:13:05:7c:5f:c1:f4:69:0c:c1:17:df:39:7c:ef:89:
a3:95:7c:54:b9:24:d7:fc:7e:9c:0a:36:32:8e:34:ad:09:ab:
3c:06:49:11:ee:d1:9e:31:f6:4f:a2:d7:78:81:e9:52:51:e3:
f4:ea:f6:f6:ac:ec:e4:0e:22:9c:10:fe:0d:fa:dc:67:b8:b9:
65:e0:d0:9c:ad:fc:94:35:7c:5f:8a:05:0a:b6:22:ea:42:72:
af:7f:1a:5a:78:67:5c:65:04:24:53:63:9c:13:76:9c:9e:09:
1f:28:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:38 2026 by rpki-client