Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/zA41u2erksWhBqKX6KsbknSSez4.roa
File: zA41u2erksWhBqKX6KsbknSSez4.roa (raw, json)
Hash identifier: m3DnakLNQD8K43UDf7rvaefbF5cKi0QK/Kk2u36B7M4=
Subject key identifier: CC:0E:35:BB:67:AB:92:C5:A1:06:A2:97:E8:AB:1B:92:74:92:7B:3E
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0251CED1BD888EFC1E7F4BDC37EC1C11C
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/zA41u2erksWhBqKX6KsbknSSez4.roa
Signing time: Fri 21 Aug 2026 16:17:27 +0000
ROA not before: Fri 21 Aug 2026 16:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 212.87.188.0/24 maxlen: 24
212.87.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:1c:ed:1b:d8:88:ef:c1:e7:f4:bd:c3:7e:c1:c1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 21 16:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc0e35bb67ab92c5a106a297e8ab1b9274927b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:d1:e3:c6:90:55:0a:9e:61:45:a5:2e:38:
49:62:ce:1f:bf:7f:24:b2:0f:66:d1:cc:ff:2a:76:
3d:34:5f:ee:57:68:b2:9a:72:e4:f0:12:cc:ef:93:
2e:b0:45:3b:30:93:e1:f2:ed:74:6c:33:df:2a:6b:
cf:22:50:16:57:b7:21:27:2d:59:5f:24:30:07:1e:
d7:26:8b:c5:1a:96:6d:84:e9:00:6b:ee:f1:01:bb:
aa:cd:64:86:23:4f:41:8b:3b:80:ea:98:08:66:ff:
d4:a5:04:58:ae:7d:7a:96:08:fd:7e:4b:46:d6:7c:
7d:d1:2e:6c:cb:98:83:b4:f0:7a:ab:7b:a0:0b:3d:
28:88:49:95:96:da:88:a5:82:76:bc:e6:ae:f7:c7:
d1:1f:2d:f0:6e:e7:56:53:22:43:bd:c9:f5:da:ce:
6f:d4:28:78:f7:81:7b:cf:60:8d:6b:db:65:ab:1e:
6a:c1:ee:b0:02:87:b0:dc:ae:89:56:aa:ac:e5:f2:
eb:b7:93:5a:c8:e7:db:68:dd:89:d9:c0:29:e3:65:
86:2b:0e:25:62:ed:da:52:ad:4c:53:6c:06:e0:97:
4f:cb:f6:25:91:8b:fc:a9:47:8f:8a:3b:82:63:f4:
34:a9:2d:0f:e2:e1:12:c5:8d:97:df:67:9c:d9:2d:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:35:BB:67:AB:92:C5:A1:06:A2:97:E8:AB:1B:92:74:92:7B:3E
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/zA41u2erksWhBqKX6KsbknSSez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:eb:2e:ec:5d:f8:20:20:df:54:8d:31:dc:4a:07:28:5d:80:
42:5b:41:41:9b:c6:76:54:02:8c:6a:e2:53:df:b5:1f:e1:a2:
0e:d6:51:18:24:0e:fd:4f:b1:1e:3a:dd:6f:7f:8f:21:91:99:
73:64:66:d8:6f:a7:d8:3c:24:57:ee:d3:0a:b6:4d:34:eb:01:
0f:fd:b5:9f:6e:66:f7:b2:be:fa:53:85:a9:9e:76:84:a7:59:
92:6b:06:c7:06:4c:17:06:95:9c:5e:7b:16:89:5e:8e:79:d9:
a2:08:ac:a1:d4:f7:7d:00:13:f4:46:85:9f:d7:44:ac:d8:37:
cc:92:03:4b:1e:11:65:ad:55:18:d6:cf:1a:cc:0a:54:6c:6b:
83:34:e3:62:cc:6b:13:94:86:fe:4e:0b:4e:f3:49:7a:e7:ec:
82:58:f8:82:d1:dd:78:41:5b:ef:a0:7a:2d:61:00:ce:ad:4e:
be:94:6c:01:e8:fa:05:31:a6:92:5f:b6:8f:69:01:bc:8e:e8:
98:4e:8d:63:66:2b:2b:30:ff:37:8a:ae:bd:8d:05:a8:75:20:
7e:96:2c:1c:8e:80:11:79:38:ab:7c:fc:73:51:f6:52:5c:a3:
5e:7e:7c:ed:c2:3b:c2:dd:9b:f1:bf:ec:ef:3d:52:aa:ca:0d:
f8:76:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:35 2026 by rpki-client