
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa
File: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (raw, json)
Hash identifier: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=
Subject key identifier: A4:27:3F:71:25:94:4C:6A:81:3D:0B:F8:73:0E:A8:01:6A:C9:DC:3C
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01987DCF39084E56CC2F39437D9963580650
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa
Signing time: Wed 06 Aug 2025 05:16:29 +0000
ROA not before: Wed 06 Aug 2025 05:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212460
IP address blocks: 212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:cf:39:08:4e:56:cc:2f:39:43:7d:99:63:58:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Aug 6 05:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4273f7125944c6a813d0bf8730ea8016ac9dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:7f:01:b4:5c:06:06:b6:ac:b2:01:38:eb:
44:99:90:94:be:52:2d:09:f3:b4:1b:8e:61:f6:24:
3d:56:1e:73:41:30:bd:f6:30:8d:da:c0:af:38:72:
2f:c3:11:0c:43:86:b5:65:6d:4e:94:e3:67:54:3c:
82:c0:2d:fc:ec:4b:df:38:6a:e5:53:e6:c2:33:69:
67:04:89:73:a9:61:19:b7:fd:1f:70:09:65:52:a4:
af:0f:22:a5:7b:09:af:cc:44:42:30:fd:4a:be:03:
c8:16:a0:3c:82:09:6c:ab:46:16:91:92:dd:eb:71:
16:ef:bb:93:45:d9:c7:84:60:50:fa:2c:83:c9:46:
be:44:1c:1a:60:3a:ee:71:77:65:4a:35:b3:7b:43:
a4:3a:40:6b:86:2e:fa:66:6b:84:b9:56:56:dd:cf:
ea:a8:00:2b:fe:74:26:0a:c4:34:9e:ec:ae:97:af:
a9:7e:ea:b0:30:7b:b6:ee:07:77:6e:02:8f:b6:49:
e5:29:0b:e1:a0:98:98:c0:50:a3:2f:6e:04:91:10:
ed:4f:13:f9:97:df:76:b1:0f:85:5e:ea:b5:e5:37:
a6:5d:50:06:0c:a1:03:15:6c:05:36:ef:c2:e6:8d:
01:8f:df:67:85:17:55:59:9a:6c:be:d2:31:a8:06:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:3F:71:25:94:4C:6A:81:3D:0B:F8:73:0E:A8:01:6A:C9:DC:3C
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.114.255
Signature Algorithm: sha256WithRSAEncryption
4d:e6:09:50:b7:69:fe:e2:38:1b:43:85:1c:d2:2a:7b:3e:b8:
c8:2d:8e:d1:aa:4b:c1:7b:86:4c:a2:21:36:f2:8d:82:54:f1:
a8:bb:dc:1f:a8:70:fb:77:c8:a9:00:fc:cc:46:19:59:46:73:
a6:4f:d6:d1:a7:d1:23:88:66:4b:2c:4a:2f:68:25:8c:51:ae:
6c:3d:13:94:65:1b:bd:81:b9:0b:85:49:59:d5:19:59:bd:13:
dd:a3:e2:fd:21:fc:cc:d8:54:1d:6f:c8:d1:89:51:52:47:8d:
ac:5d:de:33:0d:e7:fd:c8:db:de:e0:46:97:4e:25:95:d9:9d:
83:f0:ca:34:5d:2f:7a:bf:be:60:37:0f:9e:ca:7b:74:61:84:
d4:76:4a:8f:08:a5:87:96:4e:0b:3e:51:9b:80:f9:68:27:42:
ea:a3:b4:2a:0e:42:ae:23:b6:de:0a:21:5e:03:a7:07:e3:81:
3e:83:36:95:72:6f:72:c6:9c:8e:4b:93:ef:7f:4e:3a:36:3c:
90:c9:fa:45:4b:3f:0f:30:49:9a:9a:dd:44:f2:96:19:01:af:
4b:e2:46:0d:1b:90:ec:8f:6a:4c:e6:7e:3c:a2:2e:18:a6:28:
03:93:b5:da:1e:d6:94:ed:a7:81:17:fe:63:fa:18:d3:c1:c5:
d9:c1:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:16:27 2025 by rpki-client