Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/RSVz78TcKbJ_MD2cXbiNpiqEht8.roa
File: RSVz78TcKbJ_MD2cXbiNpiqEht8.roa (raw, json)
Hash identifier: Kfj8dlgOkrkqzxLNOoYn0mrD7CiBslCwzAqLBRZZ8qg=
Subject key identifier: 45:25:73:EF:C4:DC:29:B2:7F:30:3D:9C:5D:B8:8D:A6:2A:84:86:DF
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 019DB4212E084D7DE1DA820822D40F4C8F48
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/RSVz78TcKbJ_MD2cXbiNpiqEht8.roa
Signing time: Wed 22 Apr 2026 07:39:26 +0000
ROA not before: Wed 22 Apr 2026 07:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200178
IP address blocks: 212.126.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:21:2e:08:4d:7d:e1:da:82:08:22:d4:0f:4c:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Apr 22 07:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=452573efc4dc29b27f303d9c5db88da62a8486df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:77:39:11:8e:94:30:dc:87:2e:16:6c:2e:
8e:b3:12:4c:5b:a8:ae:50:1b:fc:71:41:f7:f4:27:
25:90:fc:c1:86:ab:9f:2b:b7:68:0a:5a:45:f6:95:
44:1f:21:c3:ae:93:9e:a8:cc:04:d5:09:e6:45:f9:
f6:e1:fd:b3:12:37:0a:a1:ae:89:a8:50:5c:bf:0d:
a6:2e:d4:af:7d:12:24:3c:31:bb:b6:d1:79:7c:0a:
24:3c:f2:5b:d8:24:93:57:f0:15:42:9c:c4:86:f6:
6b:8c:81:48:1a:55:2d:ec:5e:35:0b:6e:6e:a0:e0:
2f:60:1c:1a:b4:5b:c5:53:cf:11:34:46:35:fe:47:
46:e5:58:2c:9b:71:34:dd:af:6f:40:cd:b7:f7:07:
e3:24:e4:d1:12:d4:75:d6:4f:75:30:69:a3:57:af:
7b:7d:ce:8e:78:3a:b8:ac:3f:5e:ae:0d:c6:81:3e:
84:00:ce:0c:44:8d:89:65:2b:a5:99:eb:de:44:d0:
1e:3c:e5:be:43:fe:44:ee:03:89:5b:c6:55:33:bc:
0b:0e:20:41:70:8d:4b:df:d3:f8:ef:c1:14:dd:5e:
ee:22:32:0a:68:19:55:11:6f:e7:21:4c:d2:9e:e5:
ea:14:f1:22:d3:23:0d:aa:f8:ed:2d:d3:da:d7:1b:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:73:EF:C4:DC:29:B2:7F:30:3D:9C:5D:B8:8D:A6:2A:84:86:DF
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/RSVz78TcKbJ_MD2cXbiNpiqEht8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5b:f0:45:a3:4e:e5:4f:22:bf:1e:da:a3:d7:0c:03:cf:6d:
06:9d:dd:73:53:14:c8:28:f6:16:cd:94:13:fe:d0:9f:08:4a:
d9:53:ab:fd:f9:96:41:92:67:c8:2f:c2:60:88:b9:d3:c9:0a:
52:e6:c0:18:e9:d7:7f:f4:50:ca:e3:b9:6a:ca:25:c4:57:78:
d0:bc:2b:1a:c2:f9:19:8e:a4:3d:7e:3d:7e:2a:76:ea:23:8d:
36:ff:a6:c3:4b:87:63:8b:b0:0b:84:c0:90:c9:d0:89:eb:ce:
ca:c7:06:26:24:83:ad:54:9a:f9:f1:25:2b:cb:6c:bc:fe:fd:
94:cc:6e:e3:6d:0f:64:8b:1c:ff:ac:fb:45:08:ff:cc:6f:78:
80:8b:ce:a7:37:aa:0d:5e:ce:8f:b0:7e:93:84:bb:15:10:0e:
24:ae:97:fe:e1:3a:d6:70:35:0a:f9:05:6d:a3:08:ef:69:79:
80:a4:c6:a2:d2:47:39:2b:30:f7:90:b4:5e:25:32:c8:d6:f4:
01:e7:33:09:33:52:ae:b3:b4:06:ef:b0:82:35:6f:64:61:05:
42:74:58:c7:27:7f:7a:7e:f3:92:17:bc:bb:97:88:24:1a:af:
c7:05:eb:61:55:75:86:fd:ab:a9:ae:0e:d2:9f:e6:39:1f:5f:
df:a8:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 02:50:41 2026 by rpki-client