Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa
File: 30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa (raw, json)
Hash identifier: oZbCMBZPUvgToSoCiHyNVoP2atS7g7LnbwIeau6Z9sU=
Subject key identifier: DF:4A:F1:A0:45:69:59:25:E4:79:83:85:B2:BC:EE:5B:8C:2E:18:F4
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 01A09F056A2D1DB128DB36E4AA597CF33AA9
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa
Signing time: Mon 14 Sep 2026 08:25:27 +0000
ROA not before: Mon 14 Sep 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 212.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:05:6a:2d:1d:b1:28:db:36:e4:aa:59:7c:f3:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Sep 14 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df4af1a045695925e4798385b2bcee5b8c2e18f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:b7:92:16:87:ad:0c:e3:23:c5:36:80:47:
d8:9b:9c:93:a2:61:8b:d3:32:03:3b:2a:27:e7:fe:
a4:50:58:f9:4f:28:a8:7f:dc:88:dc:7a:23:32:4f:
4c:17:12:18:94:c9:ad:10:66:54:f4:ab:d8:7e:c6:
1b:5f:f9:9e:f9:aa:0b:e4:5c:86:5a:40:e2:ac:5a:
0a:2c:a3:79:c4:79:4d:a5:e0:43:bf:d6:8e:ef:2f:
0e:dc:95:c7:82:4c:b4:ef:e2:20:ed:c0:b8:66:35:
f7:02:a5:bf:6c:d8:ae:8a:d1:0a:97:30:82:72:42:
e3:ec:5d:4b:1a:da:f8:d7:cf:92:a6:c1:d2:d8:62:
92:ea:25:26:da:a0:fa:98:22:16:de:f4:4f:4d:20:
0d:40:0e:ec:c5:c1:18:e8:31:c6:7c:8c:c1:05:31:
4f:1a:46:7a:53:f6:5e:66:05:5d:ff:45:c1:89:2d:
b7:1c:6a:d2:93:32:01:14:c6:18:5b:43:79:08:da:
d1:b7:b7:9d:69:18:41:38:97:99:4c:b8:f1:d1:66:
f9:64:88:14:55:9b:55:89:cb:b9:44:4b:dc:3a:d5:
f8:3a:ad:38:cf:25:0e:c8:f8:22:37:9b:70:37:27:
1e:55:49:6d:24:4f:5e:a3:e6:e1:95:93:e8:d3:44:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:F1:A0:45:69:59:25:E4:79:83:85:B2:BC:EE:5B:8C:2E:18:F4
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
67:07:60:2a:86:bf:d0:1f:a2:db:47:17:de:2b:76:04:2a:a8:
ba:bc:fb:bd:cf:10:b5:53:f8:6a:3d:f9:98:b7:7d:42:0f:c6:
0c:fd:ed:3c:6c:47:4e:39:c2:b4:cc:92:57:12:6d:f4:3f:f3:
88:87:9d:59:b4:50:0f:13:e0:53:65:4a:75:92:9f:09:9e:50:
e7:e8:06:27:c7:55:c9:11:d1:26:f4:30:d4:0e:31:3e:5d:29:
82:73:8a:0e:30:87:ef:b0:fb:95:d3:8a:66:fa:57:bb:c7:e8:
6b:b5:2b:6f:e3:d9:e7:22:64:57:96:d5:50:db:ce:b2:1e:91:
5b:de:bc:88:15:44:46:6b:ac:6a:f2:c0:9d:34:c6:df:c3:ca:
a1:bf:f4:91:ee:5a:b4:2f:8d:84:80:8a:e1:99:f8:92:95:52:
63:bb:ce:89:e6:0b:40:f1:b4:7a:e7:e8:84:f3:d5:96:4e:08:
a0:47:8b:17:68:38:92:6e:5f:bc:8c:a0:29:5d:ac:36:4b:24:
e0:e7:f0:0b:c1:14:70:3c:4c:18:a5:29:d5:27:d8:88:68:3e:
fe:67:c7:59:76:b8:58:68:dd:4b:6e:2f:71:6e:d5:11:35:a8:
a7:18:af:fc:b3:7e:12:75:60:13:ec:73:5b:7b:25:fe:f3:93:
08:65:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:10 2026 by rpki-client