Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/i447kXV0W4Fpt-iPvHlJibEh4qE.roa
File: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (raw, json)
Hash identifier: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=
Subject key identifier: 8B:8E:3B:91:75:74:5B:81:69:B7:E8:8F:BC:79:49:89:B1:21:E2:A1
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019D0AF175C1F604634FD7F38E4183AE62E8
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/i447kXV0W4Fpt-iPvHlJibEh4qE.roa
Signing time: Fri 20 Mar 2026 11:11:29 +0000
ROA not before: Fri 20 Mar 2026 11:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12732
IP address blocks: 212.21.66.0/24 maxlen: 24
212.21.71.0/24 maxlen: 24
212.21.92.0/22 maxlen: 24
212.42.230.0/24 maxlen: 24
212.42.236.0/23 maxlen: 24
212.42.242.0/23 maxlen: 24
2001:bf0::/29 maxlen: 32
2001:bf0::/32 maxlen: 32
2001:bf0:40::/48 maxlen: 48
2001:bf0:69::/48 maxlen: 48
2001:bf1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:f1:75:c1:f6:04:63:4f:d7:f3:8e:41:83:ae:62:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Mar 20 11:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b8e3b9175745b8169b7e88fbc794989b121e2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:6e:df:5a:7c:1e:8d:ee:29:2e:12:5b:1b:
b2:c7:34:70:70:9d:f6:fa:06:7f:42:eb:5a:a9:4f:
a9:96:d4:77:50:c8:b2:71:d2:17:c6:98:1e:f7:57:
f1:28:c2:e2:06:12:99:02:05:a7:28:7d:99:70:04:
fb:9c:6c:d7:86:61:c2:7a:dc:55:b8:3a:a5:b6:50:
bf:59:58:88:f5:27:8f:48:e4:6f:35:41:12:41:54:
ef:2d:94:b7:1b:ce:9b:c9:a4:1e:7e:eb:c4:03:03:
4e:ec:2f:8a:7e:19:7f:8c:c1:13:1f:b1:7c:97:28:
2d:f1:fe:45:d6:8d:d9:4f:eb:62:3d:b9:80:d8:8f:
0c:6d:67:1b:3e:49:1c:1b:16:dc:5b:7d:03:9e:c5:
de:2e:ae:5f:46:55:c9:a6:b4:4a:14:e1:78:94:4e:
d2:c1:aa:9e:55:7b:a6:1f:3d:59:60:d5:d5:3a:75:
91:f4:3e:5b:88:8b:d0:56:fe:74:c0:f6:ff:91:65:
65:5e:15:b5:c0:35:53:77:66:50:75:36:6e:4e:a7:
1d:04:da:f8:4a:94:9c:5b:77:01:17:c6:de:e6:f3:
c2:b7:ab:8b:e0:4e:56:bc:14:90:d3:36:43:67:68:
9c:27:7a:e4:70:18:61:5a:04:a6:d6:5d:86:e3:0e:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:3B:91:75:74:5B:81:69:B7:E8:8F:BC:79:49:89:B1:21:E2:A1
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/i447kXV0W4Fpt-iPvHlJibEh4qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.66.0/24
212.21.71.0/24
212.21.92.0/22
212.42.230.0/24
212.42.236.0/23
212.42.242.0/23
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:fb:ad:81:63:23:3c:3c:80:54:ca:ee:10:c7:0f:8a:5c:d7:
b1:3d:31:da:ad:74:0c:de:ac:b9:ef:13:8b:41:5d:73:44:e9:
a4:85:7c:70:41:d5:93:67:ac:0a:53:fd:03:b7:70:12:ef:31:
33:9d:33:92:2e:3c:aa:22:0d:56:32:4e:9e:ec:ae:53:ee:23:
04:b0:7c:04:d5:c3:7e:35:2f:b0:19:50:1e:a5:21:69:db:7b:
fb:21:25:ff:7f:32:f8:f5:f9:98:80:f3:d0:e7:47:e2:bc:b2:
2c:c6:2c:14:f1:eb:bf:94:33:83:89:e8:03:96:e4:1b:2b:8e:
af:a2:9e:a5:d8:3c:79:de:0d:6b:b4:39:ed:c1:4e:34:d1:71:
b1:4f:12:48:0b:6c:37:1e:c7:16:1b:5c:69:2c:56:fe:0c:0d:
0c:be:7f:46:5f:e2:7e:48:ce:e5:b8:89:0e:47:c1:28:4a:62:
3b:a3:07:fb:61:9a:45:d7:a4:06:3e:32:e1:33:6c:31:a0:27:
69:0c:20:8b:e1:c5:2a:e8:c0:a7:56:44:53:dc:f5:7c:59:ef:
f4:1f:cc:c5:00:4e:f0:cc:74:97:49:cb:70:6a:e9:8a:7a:a6:
70:4f:94:64:db:85:be:c2:3b:7c:57:0e:aa:fe:f3:bf:92:a5:
fe:e3:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:04:04 2026 by rpki-client