Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa
File: 1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa (raw, json)
Hash identifier: J6AC5UbCT/JPLrTSWfSumCMQQX3px8kLFv3gDTLnI80=
Subject key identifier: FB:79:EC:AE:1E:0B:A3:C3:11:60:9A:E9:0D:ED:8A:BF:C8:08:D9:B9
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019C47E5426AA30071AA765010CFF59D512B
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa
Signing time: Tue 10 Feb 2026 14:12:12 +0000
ROA not before: Tue 10 Feb 2026 14:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206621
IP address blocks: 212.87.170.0/23 maxlen: 23
212.87.170.0/24 maxlen: 24
212.87.172.0/23 maxlen: 23
212.87.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:e5:42:6a:a3:00:71:aa:76:50:10:cf:f5:9d:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 10 14:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb79ecae1e0ba3c311609ae90ded8abfc808d9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:f4:92:d6:bc:bf:ff:7c:c9:2b:74:08:56:
74:fa:9c:63:00:19:53:44:12:9f:01:c3:65:81:b7:
ea:44:99:a2:98:13:06:ec:e6:6e:7a:ba:74:2a:66:
a7:95:b4:ab:56:71:70:be:e4:09:f5:f2:ef:6b:c4:
b2:05:ad:69:1e:86:12:fe:c9:e6:04:cb:64:07:ec:
27:2b:8a:1b:31:d3:49:71:3e:b4:fe:4d:c9:81:85:
a0:b0:67:72:bc:17:3a:cd:51:ab:3a:d6:10:2b:d3:
2b:c8:49:3b:95:67:1c:1b:25:d4:9a:f4:3c:c3:5b:
5e:f5:c6:b9:50:32:4f:23:ce:20:1a:90:ef:c4:d6:
2d:c6:0c:4d:08:22:2e:45:39:a8:88:6b:82:07:1c:
13:1e:5f:1a:3b:e8:b4:99:0e:c4:ad:8a:5b:ba:fd:
58:0c:1e:f3:ac:88:41:2a:39:9e:0c:88:a1:fd:7a:
b9:5d:49:a0:16:a1:eb:1a:75:f3:2d:82:37:5a:81:
6a:14:94:fb:ac:ab:ec:f0:f0:25:51:83:49:6c:2d:
39:2f:a3:81:02:d8:10:6d:9f:bc:76:3b:2a:0e:3a:
b4:df:05:5e:65:da:0e:a3:4c:09:ac:76:19:65:0d:
29:39:56:fb:d2:87:e2:52:1c:75:eb:cd:5d:b7:2a:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:EC:AE:1E:0B:A3:C3:11:60:9A:E9:0D:ED:8A:BF:C8:08:D9:B9
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.170.0-212.87.173.255
212.87.180.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:53:6c:4a:80:ab:a4:86:2a:57:11:cb:79:fb:88:11:e7:af:
57:3c:14:24:40:2e:ca:c4:e4:95:bd:f3:27:6c:c4:8b:35:c1:
4e:b6:d2:a8:1d:f8:f5:80:12:98:0e:22:20:a3:15:20:69:fc:
b1:08:d1:b8:bd:e7:7c:16:6b:d7:3d:a3:43:71:f0:06:ee:be:
a8:9f:69:98:cb:e6:3f:77:4a:e7:05:74:de:74:cd:b1:c5:83:
50:f7:af:4a:2b:d3:21:5d:23:a9:ed:5c:c1:58:cb:0a:20:a3:
03:fc:a4:10:80:d8:f4:13:d3:27:f8:d1:bc:d2:71:32:b8:b3:
c6:d0:94:3f:5d:e3:9c:17:f1:06:a4:1e:fa:b0:7d:44:b8:f5:
0c:34:ba:bf:a8:07:9e:ec:36:1f:35:4f:17:b0:b3:dd:88:42:
a5:1d:4f:a3:43:08:fa:c9:83:78:73:05:80:2d:fd:c9:7f:3b:
0b:f6:89:7f:2b:3c:96:9c:fb:73:db:01:b1:08:a7:a7:f3:39:
86:4e:6f:c0:1d:11:d0:2e:59:f5:f0:7b:63:ed:6c:5f:51:4b:
15:07:c6:26:d0:9c:17:13:a1:d3:73:db:fe:51:85:7a:64:83:
92:b7:ed:45:92:38:a2:7a:73:9b:c5:8e:ba:7b:a2:74:9b:c2:
d1:d3:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:42 2026 by rpki-client