Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa
File: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (raw, json)
Hash identifier: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=
Subject key identifier: 3F:41:09:87:4E:9D:05:7D:99:FE:E2:8C:33:3C:D5:6F:7F:C9:A5:02
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019D3EDFA65356F9F13728AAD0A280D8B2D3
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa
Signing time: Mon 30 Mar 2026 13:12:17 +0000
ROA not before: Mon 30 Mar 2026 13:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209655
IP address blocks: 212.22.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:df:a6:53:56:f9:f1:37:28:aa:d0:a2:80:d8:b2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 30 13:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f4109874e9d057d99fee28c333cd56f7fc9a502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:57:0e:fe:d7:b7:6c:2e:1e:c1:21:b1:59:52:
db:e5:9f:5e:41:e3:16:1d:3e:db:83:b9:16:85:3f:
11:73:f2:7d:6d:b0:14:1e:87:11:39:2c:a3:63:8f:
dc:bf:fa:dd:22:2b:a0:cf:79:40:a1:47:d0:2d:45:
ae:2a:5a:fc:e7:6a:06:8b:a0:64:e7:41:88:ca:e8:
45:70:44:47:93:9e:0b:59:a7:3d:67:6d:ad:3b:72:
ee:4b:32:62:5c:e6:ae:fa:69:ad:60:41:66:28:c0:
1e:f4:78:5f:04:59:4c:64:de:cc:75:9c:92:3d:27:
db:f5:1a:1f:92:2c:61:e2:9e:c1:72:2a:15:b9:1a:
bd:79:57:f0:c8:53:24:f6:4a:24:29:e1:3d:d6:95:
6c:7c:30:d0:58:e6:c1:8d:3d:a4:0b:4c:99:a5:a8:
be:b4:b2:0f:4e:65:99:18:15:07:09:43:45:c0:60:
45:a3:78:cb:40:d3:ce:10:c7:9d:8a:b8:25:79:a8:
65:23:3a:ac:39:d6:62:e5:f1:1e:ad:7e:7a:0b:e4:
6e:1c:8b:3d:1c:cc:75:71:04:dd:4a:24:78:f2:a2:
b9:76:b8:c0:3e:d4:e5:7a:f1:4c:16:0a:a6:01:32:
7f:bc:79:a1:98:98:0c:8d:2c:9a:2b:bb:c4:ef:8e:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:09:87:4E:9D:05:7D:99:FE:E2:8C:33:3C:D5:6F:7F:C9:A5:02
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.72.0/24
Signature Algorithm: sha256WithRSAEncryption
50:02:02:65:da:be:8c:3d:88:56:ff:45:c4:46:8f:63:25:47:
84:9b:1e:27:9d:e6:4b:9d:e2:1b:6b:b9:02:4e:36:48:45:b9:
09:93:4c:a3:80:d1:37:7d:3d:eb:0c:9e:87:6d:71:10:c3:3e:
60:4f:62:4f:12:97:b8:6a:59:c3:9b:c5:9f:2e:cf:63:3b:6b:
fd:d4:a1:88:0a:17:06:4e:87:cf:94:22:15:02:da:4a:52:1c:
6a:85:ca:5e:47:5f:b4:de:36:a5:fd:7d:6e:13:8a:60:81:8d:
e8:16:0c:5b:a4:e6:15:bc:16:27:c1:13:be:ea:09:8b:49:b4:
1c:69:14:8b:e9:3e:e0:c2:3a:9d:2c:61:df:41:37:cc:b6:82:
fd:24:6d:aa:79:72:c4:fe:91:4e:75:74:88:24:38:ee:d1:76:
4a:b2:c4:24:c6:39:6f:c4:59:e7:52:1a:2e:cb:7e:68:10:db:
a2:3e:62:9b:a4:49:c1:f1:ff:38:4a:a5:24:50:10:ce:c0:72:
c3:4a:1b:69:69:13:a7:87:1b:3d:fb:20:c2:58:5c:68:cc:92:
bc:50:e9:49:d4:1d:7a:f4:3f:1b:fa:82:8a:59:cc:fc:d4:ee:
e8:7e:59:31:74:35:32:00:a9:fd:f2:68:b0:82:3b:84:43:92:
5c:e5:da:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0+36ZTVvnxNyiq0KKA2LLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwMzMwMTMxMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjQxMDk4NzRlOWQwNTdkOTlmZWUyOGMzMzNjZDU2ZjdmYzlhNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VcO/te3bC4ewSGxWVLb5Z9eQeMW
HT7bg7kWhT8Rc/J9bbAUHocROSyjY4/cv/rdIiugz3lAoUfQLUWuKlr852oGi6Bk
50GIyuhFcERHk54LWac9Z22tO3LuSzJiXOau+mmtYEFmKMAe9HhfBFlMZN7MdZyS
PSfb9Rofkixh4p7BcioVuRq9eVfwyFMk9kokKeE91pVsfDDQWObBjT2kC0yZpai+
tLIPTmWZGBUHCUNFwGBFo3jLQNPOEMedirgleahlIzqsOdZi5fEerX56C+RuHIs9
HMx1cQTdSiR48qK5drjAPtTlevFMFgqmATJ/vHmhmJgMjSyaK7vE744ARQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9BCYdOnQV9mf7ijDM81W9/yaUCMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvUDBFSmgwNmRCWDJaX3VLTU16elZiM19KcFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZIMA0G
CSqGSIb3DQEBCwUAA4IBAQBQAgJl2r6MPYhW/0XERo9jJUeEmx4nneZLneIba7kC
TjZIRbkJk0yjgNE3fT3rDJ6HbXEQwz5gT2JPEpe4alnDm8WfLs9jO2v91KGIChcG
TofPlCIVAtpKUhxqhcpeR1+03jal/X1uE4pggY3oFgxbpOYVvBYnwRO+6gmLSbQc
aRSL6T7gwjqdLGHfQTfMtoL9JG2qeXLE/pFOdXSIJDju0XZKssQkxjlvxFnnUhou
y35oENuiPmKbpEnB8f84SqUkUBDOwHLDShtpaROnhxs9+yDCWFxozJK8UOlJ1B16
9D8b+oKKWcz81O7oflkxdDUyAKn98miwgjuEQ5Jc5dqY
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:59 2026 by rpki-client