Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Eqmef-fTn9NYQY7xZznBlyZF1n4.roa
File: Eqmef-fTn9NYQY7xZznBlyZF1n4.roa (raw, json)
Hash identifier: CIQuiGAfVrQ7ckL7hoIedbZW1Y/7JzYFdGkSQM+CDZk=
Subject key identifier: 12:A9:9E:7F:E7:D3:9F:D3:58:41:8E:F1:67:39:C1:97:26:45:D6:7E
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 019F2361DC0E6EA4D2823A7270DCA530A5FF
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Eqmef-fTn9NYQY7xZznBlyZF1n4.roa
Signing time: Thu 02 Jul 2026 15:10:43 +0000
ROA not before: Thu 02 Jul 2026 15:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 212.80.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:61:dc:0e:6e:a4:d2:82:3a:72:70:dc:a5:30:a5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jul 2 15:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12a99e7fe7d39fd358418ef16739c1972645d67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:a6:aa:2c:e3:7f:d4:37:35:16:9b:97:81:
91:40:2c:bd:6b:ce:32:8a:c1:90:fb:b9:b2:f3:32:
5b:0b:0b:20:16:4e:a7:b2:d7:49:41:21:d3:f6:57:
aa:a8:f4:40:39:57:b5:1e:87:15:ed:9e:a9:42:d7:
1f:4c:66:05:07:ab:3a:76:06:15:4c:bf:33:6e:91:
eb:ac:bb:b1:6a:0c:9e:a7:69:75:6e:9e:61:2e:32:
c2:3a:f0:4a:26:68:d8:d3:e9:2d:0b:3f:99:2c:85:
a5:2b:ec:94:0e:4c:61:65:b4:d9:66:87:09:c6:6d:
e3:e2:6e:7e:a5:95:03:61:ec:b3:f3:70:8e:e5:e8:
12:d1:c4:9b:42:5b:5b:8d:6d:89:ec:07:f0:9f:29:
2d:df:3a:bd:6d:02:60:e6:97:62:42:53:5c:9c:eb:
f9:65:04:72:b0:da:ed:3e:3e:79:c8:8e:41:b9:7f:
1c:46:53:ae:c7:2e:df:44:cc:76:f7:5a:1c:88:f2:
1c:a4:53:68:b8:69:fe:81:df:da:12:90:14:7e:36:
86:b3:41:80:a8:e1:94:b3:db:76:a8:1b:4b:0d:54:
26:96:85:17:52:a0:7a:8e:b7:38:f4:1d:9a:23:4c:
24:ab:df:07:d9:09:06:bb:51:96:c1:f9:cd:07:e9:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:9E:7F:E7:D3:9F:D3:58:41:8E:F1:67:39:C1:97:26:45:D6:7E
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Eqmef-fTn9NYQY7xZznBlyZF1n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:dc:c9:93:9d:4a:e2:da:10:02:49:2f:0d:c6:74:e7:74:eb:
8e:11:bd:fc:47:d3:99:bf:c8:f5:10:9f:cf:ed:03:1d:e4:9c:
e2:31:70:88:cf:2a:08:c3:fa:02:56:fd:1e:83:55:6e:7c:0f:
b2:61:18:2a:0a:d3:58:e8:b9:65:13:54:0e:64:31:81:43:e3:
f0:94:27:81:d4:56:a2:1a:b1:dc:4a:74:f4:d8:49:a4:b9:d7:
5a:bb:90:f9:2c:ea:46:6e:d2:b8:45:7c:cc:c3:fd:a9:db:28:
b6:da:72:0b:07:b5:ed:37:d6:0a:6b:e4:03:f1:af:25:1c:fc:
09:11:62:7b:c7:1b:ed:3c:20:f8:88:3b:f3:c7:be:4a:f0:e3:
19:40:21:c2:a7:5c:59:99:21:0d:ec:2b:a2:8c:f4:fa:da:46:
a1:9b:f9:79:44:30:83:40:2d:46:ef:33:c1:06:2b:f6:5b:69:
d2:79:19:70:65:22:9d:fd:3b:cb:4b:6f:01:48:4a:e2:ca:f4:
1f:bb:44:6b:47:45:ec:ae:eb:19:ef:e9:d4:dd:99:16:aa:03:
53:9f:88:52:d8:e1:8a:66:a4:9d:e9:20:8b:73:5a:d4:b1:bf:
f3:a1:76:c0:c1:4a:93:dd:83:51:ca:73:16:c4:58:d6:96:b3:
50:7a:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:32 2026 by rpki-client