Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/l4azBXwI1QM0KKkAZ0T8Y6Ih8sA.roa
File: l4azBXwI1QM0KKkAZ0T8Y6Ih8sA.roa (raw, json)
Hash identifier: AmVkuRsrCB+Sd0wIWdX83f390syE2RCjLKyxLuXAooU=
Subject key identifier: 97:86:B3:05:7C:08:D5:03:34:28:A9:00:67:44:FC:63:A2:21:F2:C0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0F772026E7AB5D42C5F9B8A318C49F7C8
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/l4azBXwI1QM0KKkAZ0T8Y6Ih8sA.roa
Signing time: Thu 01 Oct 2026 12:30:39 +0000
ROA not before: Thu 01 Oct 2026 12:30:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 212.32.48.0/24 maxlen: 24
212.32.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:72:02:6e:7a:b5:d4:2c:5f:9b:8a:31:8c:49:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 1 12:30:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9786b3057c08d5033428a9006744fc63a221f2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:64:9f:d3:f0:62:45:97:f7:46:d7:a0:0e:
bd:5d:08:3e:1c:87:27:d4:f5:70:2e:5f:b3:71:0b:
78:d4:15:7a:52:96:1e:8b:55:41:60:fb:4b:b9:e9:
1b:e1:d8:34:52:b4:9e:de:6f:9e:37:65:df:0e:1f:
9f:96:b8:7e:6d:fd:af:74:f3:11:20:62:a5:36:50:
7a:7f:2a:89:64:ea:76:bc:48:1e:ee:43:1a:a5:7b:
46:55:e0:d7:0e:f8:0b:12:ce:14:c3:83:1a:d0:22:
ab:c5:f8:71:e5:a6:e1:86:ad:9a:9e:e7:99:dd:cf:
82:fc:37:47:af:6d:8f:9d:b1:cd:56:c1:f3:68:ce:
18:9f:c4:33:1b:67:3a:53:82:33:b8:ec:d4:ab:13:
67:3f:f9:7b:ba:a1:61:9d:05:7e:11:1e:e2:e3:f3:
2d:f2:c9:e3:f9:27:d5:47:04:24:2c:31:b2:c6:de:
05:4e:41:18:96:62:c6:ca:de:be:33:59:c3:00:35:
e6:c9:68:e3:82:3b:e5:b4:06:26:3f:b6:78:01:29:
34:28:89:22:5e:31:4a:7b:32:a8:f0:ee:e6:7b:80:
83:4f:26:ac:fb:a7:6e:e2:23:b6:d4:c2:56:ad:e4:
12:9c:5c:0c:f0:bd:1c:77:59:40:5f:8a:4e:ce:64:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:B3:05:7C:08:D5:03:34:28:A9:00:67:44:FC:63:A2:21:F2:C0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/l4azBXwI1QM0KKkAZ0T8Y6Ih8sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.48.0/23
Signature Algorithm: sha256WithRSAEncryption
24:85:ff:b3:fe:b2:6e:0a:8c:99:f7:5e:9f:99:5c:ed:6c:1b:
4f:cb:1a:bc:44:8e:42:d0:bc:13:7d:19:89:6f:10:90:10:b3:
8a:0c:4a:55:30:9c:ec:28:54:d1:80:11:f9:0a:eb:0d:6f:b0:
8b:a1:14:d0:d1:08:fa:d9:04:12:cc:e8:51:94:90:90:6e:b0:
f4:fc:24:90:ea:cb:5c:c5:2e:13:f7:e8:09:b3:64:b5:f3:c4:
45:a5:fe:d5:2f:4c:06:7a:1b:9e:ac:61:ae:12:63:e5:75:da:
38:36:1e:a1:5d:71:2c:20:bf:17:41:e2:1a:76:9b:11:98:7e:
10:eb:80:7e:1e:63:ca:ee:f4:ff:ad:f5:71:40:fb:17:0b:b1:
82:1c:c8:d6:b5:e1:16:fe:5e:ab:b8:a8:78:21:67:06:df:0e:
bf:74:c8:da:6a:6b:1a:2e:d5:7f:62:1f:ff:e9:26:ac:b1:31:
49:d9:27:cd:88:d8:e5:e4:c6:51:40:dd:70:dc:a2:39:a0:3e:
9c:6e:c1:2f:e2:3e:81:3a:1c:99:18:56:71:04:01:c5:3f:e6:
c8:df:6b:7e:d7:4c:ab:ca:2b:82:0f:b3:49:5b:56:80:65:2b:
6f:d3:fe:be:aa:fb:66:b3:8a:9f:fb:cc:17:03:f2:84:cb:0c:
a0:32:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:15:05 2026 by rpki-client