Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q2hFRFyc-9r3ck1S3Ry3I8MVgfk.roa
File: q2hFRFyc-9r3ck1S3Ry3I8MVgfk.roa (raw, json)
Hash identifier: ksHdzDZ5BPMg25wY6erk/Rg6E7/gGAvdheedE38ZJzw=
Subject key identifier: AB:68:45:44:5C:9C:FB:DA:F7:72:4D:52:DD:1C:B7:23:C3:15:81:F9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EDB770603C12FF59EA00A42CFA77056B4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q2hFRFyc-9r3ck1S3Ry3I8MVgfk.roa
Signing time: Thu 18 Jun 2026 16:01:11 +0000
ROA not before: Thu 18 Jun 2026 16:01:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43851
IP address blocks: 212.212.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:77:06:03:c1:2f:f5:9e:a0:0a:42:cf:a7:70:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 18 16:01:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab6845445c9cfbdaf7724d52dd1cb723c31581f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:d6:ce:94:e5:bc:4b:db:81:c2:2b:ee:dd:
2a:79:f9:fa:b8:96:f0:1c:25:99:b0:df:08:4d:34:
c2:2a:64:58:95:15:ca:44:e3:f2:f3:5d:9f:9f:52:
9a:ae:10:d3:66:62:c6:02:f9:a4:94:f9:51:6b:46:
13:2b:12:f5:09:25:43:e0:70:4c:1f:ef:75:2d:b2:
9c:c2:54:c0:6a:47:eb:54:36:cd:fd:8b:9a:9d:d8:
6f:94:70:47:40:ad:84:dd:8d:3f:b0:2b:ae:0a:de:
05:4c:db:9d:22:e3:f5:46:91:ac:9c:5d:52:84:a4:
4f:69:54:a4:bc:f4:1a:e1:2f:c7:93:e4:ea:c2:3b:
fd:5e:08:16:1e:47:5d:34:03:9a:13:c0:cc:18:ef:
9e:39:17:0d:5b:0c:07:67:de:25:75:16:8c:a1:ab:
48:3b:f2:fc:38:24:9f:15:f7:87:a1:8a:4a:a6:e6:
a3:dd:62:4e:08:67:f0:35:30:c2:17:f7:b0:1f:f3:
89:99:19:dc:dd:b2:cb:5c:bc:49:2f:fc:6c:6e:6b:
94:b1:8f:d3:2e:65:9c:06:6d:f1:3d:e9:28:97:28:
71:63:38:42:84:50:52:a7:e6:44:73:19:b2:25:08:
ce:16:79:ec:54:24:29:f7:f0:42:cb:8b:d8:36:43:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:45:44:5C:9C:FB:DA:F7:72:4D:52:DD:1C:B7:23:C3:15:81:F9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q2hFRFyc-9r3ck1S3Ry3I8MVgfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:97:d8:79:cf:b0:db:14:f1:60:ab:b6:fa:13:6a:84:b1:5c:
43:cf:36:dc:74:89:35:84:da:28:f4:8b:4c:22:05:b8:3b:76:
51:f2:cc:d2:e6:f0:a0:44:36:b9:6c:6e:7a:b7:1e:36:da:20:
ac:6f:6e:d6:d0:0b:7f:21:9a:de:83:5d:b6:2e:f2:2e:17:35:
1a:0d:d8:ca:3d:47:6b:ad:41:34:8d:bf:83:93:08:75:78:a5:
79:96:43:26:f4:11:21:d6:4d:85:96:0d:32:7b:39:0a:eb:4b:
b1:f6:23:5c:e1:84:47:42:b7:98:a6:37:6b:5f:55:53:ea:2e:
b3:ea:be:60:87:01:c8:d4:13:4f:eb:59:6b:a4:42:21:48:12:
8b:55:69:95:69:49:97:48:f2:1d:b5:65:fb:32:74:05:4a:cd:
ab:cb:86:c7:2a:38:68:40:4d:0f:0c:21:b6:9e:67:16:94:7c:
22:c4:f1:22:88:96:1b:5e:83:7f:0f:a3:cf:9b:53:b7:a8:31:
72:50:4b:37:f1:1e:06:dd:ac:c9:35:1d:f4:11:c4:ec:93:3e:
4a:97:f9:ce:5d:9b:4e:9a:07:cc:f3:77:7f:9d:8a:34:b1:2e:
81:7b:26:7f:d8:df:36:3b:ad:94:dc:94:93:bb:84:ec:f1:34:
ba:ea:f4:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7bdwYDwS/1nqAKQs+ncFa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjE4MTYwMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjY4NDU0NDVjOWNmYmRhZjc3MjRkNTJkZDFjYjcyM2MzMTU4MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NLWzpTlvEvbgcIr7t0qefn6uJbw
HCWZsN8ITTTCKmRYlRXKROPy812fn1KarhDTZmLGAvmklPlRa0YTKxL1CSVD4HBM
H+91LbKcwlTAakfrVDbN/YuandhvlHBHQK2E3Y0/sCuuCt4FTNudIuP1RpGsnF1S
hKRPaVSkvPQa4S/Hk+Tqwjv9XggWHkddNAOaE8DMGO+eORcNWwwHZ94ldRaMoatI
O/L8OCSfFfeHoYpKpuaj3WJOCGfwNTDCF/ewH/OJmRnc3bLLXLxJL/xsbmuUsY/T
LmWcBm3xPekolyhxYzhChFBSp+ZEcxmyJQjOFnnsVCQp9/BCy4vYNkMahwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKtoRURcnPva93JNUt0ctyPDFYH5MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcTJoRlJGeWMtOXIzY2sxUzNSeTNJOE1WZ2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1NQYMA0G
CSqGSIb3DQEBCwUAA4IBAQCyl9h5z7DbFPFgq7b6E2qEsVxDzzbcdIk1hNoo9ItM
IgW4O3ZR8szS5vCgRDa5bG56tx422iCsb27W0At/IZreg122LvIuFzUaDdjKPUdr
rUE0jb+Dkwh1eKV5lkMm9BEh1k2Flg0yezkK60ux9iNc4YRHQreYpjdrX1VT6i6z
6r5ghwHI1BNP61lrpEIhSBKLVWmVaUmXSPIdtWX7MnQFSs2ry4bHKjhoQE0PDCG2
nmcWlHwixPEiiJYbXoN/D6PPm1O3qDFyUEs38R4G3azJNR30EcTskz5Kl/nOXZtO
mgfM83d/nYo0sS6BeyZ/2N82O62U3JSTu4Ts8TS66vSp
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:21 2026 by rpki-client