Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0UrIpTgnaPfow2IU3ktjD-H3axc.roa
File: 0UrIpTgnaPfow2IU3ktjD-H3axc.roa (raw, json)
Hash identifier: XqFEbpbubZjXuvRBcExh7uZy8yTLQ8VH4oLW6zfzCuU=
Subject key identifier: D1:4A:C8:A5:38:27:68:F7:E8:C3:62:14:DE:4B:63:0F:E1:F7:6B:17
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C1DD6036A0F0C6D03130AAA67ACC90594
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0UrIpTgnaPfow2IU3ktjD-H3axc.roa
Signing time: Mon 02 Feb 2026 10:11:30 +0000
ROA not before: Mon 02 Feb 2026 10:11:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:d6:03:6a:0f:0c:6d:03:13:0a:aa:67:ac:c9:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 2 10:11:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14ac8a5382768f7e8c36214de4b630fe1f76b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:e4:83:b5:2e:a0:1c:07:d3:91:65:99:9c:
02:c0:ec:21:1b:b7:c3:48:3d:b2:7f:c0:46:ba:7e:
d5:88:23:b1:57:ec:59:f7:59:e0:03:f0:6c:72:82:
2e:13:4f:40:e0:33:4e:db:0d:e9:c3:1d:30:83:a4:
c9:7b:85:74:6c:25:0c:99:53:0f:86:c0:09:4b:ae:
3a:61:60:6f:51:2f:65:12:fa:d7:8e:95:3a:bf:d5:
9d:5a:dc:60:3b:66:a5:40:bd:ce:66:84:13:9a:e1:
96:9c:04:0b:9d:57:b5:f9:34:05:f1:45:43:c4:85:
3c:67:22:50:7d:53:7c:3d:c0:9e:6b:eb:4d:dc:3b:
62:c4:3c:41:d4:88:92:a4:93:11:b8:7c:c6:29:4b:
f4:d8:8e:88:5d:3b:f8:98:eb:dd:fb:5f:a0:c6:79:
2f:39:45:77:17:55:54:0e:0f:a1:8d:1c:90:52:19:
0e:3d:57:09:fc:f9:d9:ea:49:8b:8f:b2:bc:7c:88:
ea:c2:8f:e3:99:cd:25:d6:18:b4:8a:7b:fc:e4:5a:
5d:59:2e:c4:4a:81:eb:2f:01:7d:8f:c5:3e:2f:b0:
a0:94:3e:d0:b2:7e:b4:18:5d:9c:ed:13:26:ac:3a:
50:a9:b8:49:02:a6:16:16:ab:3c:46:bc:7d:af:36:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:C8:A5:38:27:68:F7:E8:C3:62:14:DE:4B:63:0F:E1:F7:6B:17
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/0UrIpTgnaPfow2IU3ktjD-H3axc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c4:58:ed:9a:84:26:24:70:e8:2f:58:fa:b4:1d:c4:3a:b0:
6c:1a:be:19:2b:e8:af:68:a6:a9:3a:3f:6d:f3:89:f8:e3:e1:
ca:eb:0b:34:e3:d3:59:c8:f4:c2:a8:cd:a7:cb:46:c7:32:50:
22:8a:ad:19:b4:72:ef:9b:66:ac:7e:bd:7d:32:8a:5d:5d:4f:
8a:77:13:57:1e:0e:00:47:67:27:0f:c1:3a:7b:71:16:81:62:
82:6c:e0:5c:57:b5:c4:4c:50:cf:89:3a:30:04:4d:37:08:ee:
f8:28:fb:e2:88:74:35:c5:3b:07:49:1c:65:97:67:4e:01:4e:
28:07:d6:2c:cb:12:bd:0d:55:e5:7c:52:93:ce:bf:88:cc:8f:
7e:48:f1:62:5a:94:35:41:bf:59:1e:7f:ab:1d:14:e9:f0:02:
f5:56:e5:34:e9:e0:b8:c6:15:bb:83:ac:59:eb:7b:d1:58:87:
bc:7f:cf:58:50:25:bd:fb:39:1f:75:53:61:bd:36:68:a1:70:
45:96:2a:7e:57:06:4a:c2:bf:3c:3e:fa:e6:d9:98:8d:c0:9f:
d1:a2:96:fb:ba:9a:c5:db:62:b0:83:91:4c:de:39:fa:de:c4:
6f:79:f7:f9:8c:04:de:2c:61:58:e3:eb:c6:6f:f0:9f:60:9b:
6b:5b:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:51 2026 by rpki-client