Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/djl4yLaR492a1MyY0DtkNwyzb78.roa
File: djl4yLaR492a1MyY0DtkNwyzb78.roa (raw, json)
Hash identifier: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=
Subject key identifier: 76:39:78:C8:B6:91:E3:DD:9A:D4:CC:98:D0:3B:64:37:0C:B3:6F:BF
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 019C94DB9FA31173E357625613B805B76A20
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/djl4yLaR492a1MyY0DtkNwyzb78.roa
Signing time: Wed 25 Feb 2026 12:52:27 +0000
ROA not before: Wed 25 Feb 2026 12:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200859
IP address blocks: 212.114.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:db:9f:a3:11:73:e3:57:62:56:13:b8:05:b7:6a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Feb 25 12:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=763978c8b691e3dd9ad4cc98d03b64370cb36fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:1e:8e:f0:2c:cf:74:9a:16:4c:2f:82:08:
4c:de:90:35:b9:ac:61:a3:e8:be:1d:49:6a:1d:4e:
17:63:c9:51:e2:77:d4:2d:f0:2c:31:a4:8c:2b:a0:
85:e9:c0:eb:c1:68:93:1d:af:3f:b9:2b:2e:47:50:
de:81:1f:b1:e4:dc:c7:d7:81:f5:38:c4:f2:24:e3:
98:e5:1c:4b:6f:d2:95:e9:a6:0c:3e:06:7c:a5:a7:
f6:60:b4:11:a3:2d:6a:b8:32:00:92:bd:ee:d9:70:
df:85:f4:ce:12:69:48:b5:d3:0d:23:92:73:c5:da:
c7:0b:89:38:69:8c:cf:c8:b5:4e:fe:19:f9:d6:21:
9d:e4:a5:fc:1f:e2:73:13:29:dd:c8:9c:89:7b:f4:
e1:5f:14:58:49:07:ce:15:50:10:14:f6:55:a5:66:
0d:f8:60:4f:7c:9e:90:a6:13:79:a6:aa:61:95:4b:
d2:0f:36:b2:6f:ea:a2:45:4a:6e:e2:d4:34:66:fc:
5c:65:cb:93:52:04:25:23:60:7f:6c:0b:de:09:94:
87:d3:58:00:77:2b:5b:f7:b7:33:da:53:fd:b0:f0:
36:20:7f:8c:1f:4f:5c:18:75:69:bd:96:d7:cb:56:
b7:7c:37:31:d7:79:af:42:d1:5d:fb:ba:77:8c:da:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:78:C8:B6:91:E3:DD:9A:D4:CC:98:D0:3B:64:37:0C:B3:6F:BF
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/djl4yLaR492a1MyY0DtkNwyzb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.55.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c4:9d:d7:56:5a:ce:41:83:56:60:5e:2e:48:ec:ec:29:ea:
12:98:78:ff:94:7a:64:df:b7:b7:56:d1:48:c2:40:8c:fc:83:
c3:1e:2b:36:c1:a8:cb:c3:30:e9:d6:d2:18:81:a0:e6:79:07:
80:b2:c9:6b:cf:a9:bd:7c:e1:eb:e0:7c:af:5e:4a:bf:3c:d8:
72:d0:f7:a9:af:e2:fb:e1:41:23:43:85:09:3c:a7:66:90:bd:
cb:20:a9:14:99:f2:ce:51:5b:19:87:7c:90:55:16:42:2f:b4:
ec:71:bb:33:63:75:9a:f7:e4:a7:d1:06:b7:a1:ef:3d:b4:41:
32:9b:59:9a:c2:05:80:b6:de:d7:72:fa:8f:52:d4:f5:d4:f4:
8b:37:a6:98:52:e5:5c:2c:60:44:a2:c6:b8:53:57:c8:40:07:
8b:50:d2:6d:d8:80:01:ae:1c:67:1f:55:92:df:53:04:ae:f9:
6f:51:94:4e:c7:34:b0:12:97:ed:0d:dc:4a:07:b6:fc:c8:53:
5b:f5:ba:7a:b5:27:9c:e2:a0:16:d3:76:2e:15:59:98:b4:86:
18:12:29:4f:df:56:39:25:54:cb:94:f6:2b:3a:5c:be:2b:4f:
46:23:5a:78:38:09:ed:90:67:4b:6e:ae:21:ba:bd:0c:77:fd:
c4:b6:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:00 2026 by rpki-client