Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CmNRkE8cjhgIni53A9tw4YebvmM.roa
File: CmNRkE8cjhgIni53A9tw4YebvmM.roa (raw, json)
Hash identifier: tJmlU+9qg1X6Go3LVo1GQj+5jI7I1e1mBgfXWxCtARA=
Subject key identifier: 0A:63:51:90:4F:1C:8E:18:08:9E:2E:77:03:DB:70:E1:87:9B:BE:63
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A17899C4AE91E44FFFD119C93003A177ED
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CmNRkE8cjhgIni53A9tw4YebvmM.roa
Signing time: Mon 26 Oct 2026 14:25:05 +0000
ROA not before: Mon 26 Oct 2026 14:25:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199074
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:99:c4:ae:91:e4:4f:ff:d1:19:c9:30:03:a1:77:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:25:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a6351904f1c8e18089e2e7703db70e1879bbe63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:b3:3f:cf:18:6a:ee:b8:d2:eb:2c:54:25:
48:e4:18:ac:d5:e2:2a:43:45:51:97:98:c1:80:d2:
be:ca:95:57:1d:88:d3:dd:cd:6a:3c:de:55:bf:13:
af:18:3e:61:ae:0f:09:e0:ec:12:f0:80:b0:9c:19:
1a:0e:d0:6b:35:10:7a:57:fd:f0:ce:97:7c:6a:a7:
ad:33:69:b3:73:76:21:a0:d5:60:fb:06:bb:dd:1e:
bb:e2:89:f5:fd:db:b8:73:10:52:ef:3b:fe:dd:43:
93:b0:98:a9:8c:8c:4e:9a:18:e9:87:29:33:e4:0d:
c5:d5:d7:68:f7:c0:dc:b3:ba:38:bb:01:95:fc:c2:
b5:d2:80:a4:ba:0b:78:77:c5:a2:ed:e1:d5:e6:47:
33:3d:20:22:c7:bc:14:ee:5c:5d:f9:88:95:e7:d1:
4d:7d:26:b7:68:cb:22:6b:c3:25:e9:c3:d9:8f:77:
4e:c5:b4:15:e7:1f:d1:bd:b4:5f:d3:f5:4b:52:b9:
0b:08:6d:f0:c7:be:8b:c9:99:87:c9:f5:48:f8:31:
43:43:8b:7e:97:6a:2e:ef:a1:e2:db:d2:e6:d2:9a:
6b:b6:e7:0a:78:17:99:d2:67:ba:bd:dc:c7:64:91:
50:2f:36:51:18:97:93:54:89:2a:1a:ec:0d:32:6a:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:51:90:4F:1C:8E:18:08:9E:2E:77:03:DB:70:E1:87:9B:BE:63
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CmNRkE8cjhgIni53A9tw4YebvmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0e:23:0e:ea:42:cf:00:79:0a:68:af:59:38:00:2b:df:08:
2a:a4:a5:f5:9e:f0:9c:e7:7e:ef:8e:fa:9a:13:af:7d:b5:cd:
d6:9b:a9:6f:ba:5e:e8:42:a7:12:87:91:97:0d:bf:7c:8c:95:
94:9f:56:c9:eb:64:cc:57:7e:58:46:6c:73:8c:bb:a0:65:c5:
81:fc:61:04:3d:b9:8c:fd:99:fc:30:51:77:78:ca:5b:81:6a:
f4:e4:72:8b:1b:f3:59:95:cc:ad:b2:f6:d3:f6:15:8b:3c:df:
88:63:b3:dd:38:4b:46:2f:de:73:45:fb:67:8c:9f:7a:bb:3d:
61:46:0a:fa:1b:cf:a3:36:70:92:23:36:37:f5:1a:14:06:e2:
37:a7:2c:ec:c0:34:e0:27:2d:aa:b9:ea:a7:14:e4:9d:d1:9a:
b7:0a:5b:13:3f:97:e8:25:76:dd:3e:6d:a0:16:ea:f2:72:71:
10:90:76:4d:16:92:ab:36:3e:15:3c:b7:e7:ab:e2:7f:c3:71:
2a:65:2d:81:a5:2c:67:c9:00:b3:6f:0b:dd:66:2c:b8:42:40:
36:92:f4:6b:96:8b:b5:8b:69:9c:59:79:27:6a:dc:9e:ee:ff:
04:8f:02:73:ac:f2:d9:fb:71:63:c5:32:ed:9b:21:04:5b:60:
5f:fe:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:46 2026 by rpki-client