Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/C5p8LM7HmRcfUID1rsbb3yCqZtk.roa
File: C5p8LM7HmRcfUID1rsbb3yCqZtk.roa (raw, json)
Hash identifier: docDKAD/tU7EQOVt4NBDcZtyV88C08WONikM1eM5KUQ=
Subject key identifier: 0B:9A:7C:2C:CE:C7:99:17:1F:50:80:F5:AE:C6:DB:DF:20:AA:66:D9
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 01A0ADE097B1C91E6C97025131E11071E643
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/C5p8LM7HmRcfUID1rsbb3yCqZtk.roa
Signing time: Thu 17 Sep 2026 05:39:32 +0000
ROA not before: Thu 17 Sep 2026 05:39:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8396
IP address blocks: 212.70.192.0/19 maxlen: 19
212.70.204.0/24 maxlen: 24
212.70.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:e0:97:b1:c9:1e:6c:97:02:51:31:e1:10:71:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Sep 17 05:39:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b9a7c2ccec799171f5080f5aec6dbdf20aa66d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:05:c9:4d:08:90:de:cc:cd:9e:2a:14:f5:
f5:19:6a:41:27:dd:9f:02:e2:65:2d:93:d6:84:54:
54:cb:a0:4a:9c:45:10:f5:d0:0e:2d:fe:9e:ea:82:
de:ad:14:3b:10:47:78:72:34:42:4b:17:6a:50:06:
ed:72:2f:05:45:73:73:46:e3:06:7e:43:1b:1d:bf:
d4:f6:7c:a7:4d:38:1b:15:8c:a5:7e:65:93:07:d4:
cc:fb:0e:8b:24:30:99:c0:fc:fa:b4:cf:7e:c6:8e:
8c:f1:76:68:10:60:f9:e5:01:16:fb:c8:e9:c6:5e:
c5:db:e4:ce:35:01:60:46:87:06:35:b9:63:6f:89:
8b:b0:6b:8a:a8:88:1c:3e:53:bb:d7:dc:70:e6:8b:
e0:fb:24:42:b1:db:e0:ff:95:a5:77:8d:93:98:19:
27:6a:26:6f:f9:3c:ac:be:6f:aa:6a:b6:80:f5:2b:
c2:5c:59:16:af:5d:d8:ae:1e:4b:f0:14:bd:16:a6:
31:9a:50:f0:28:d6:bf:cf:39:42:10:2b:78:d8:4d:
98:01:d8:dd:6d:4a:83:0f:fe:f4:4f:55:36:6a:81:
52:8e:bf:97:ac:4a:1a:f9:6f:8d:f8:16:fc:60:01:
f1:51:ec:26:0d:f6:17:79:43:e6:12:24:d3:c7:f9:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:7C:2C:CE:C7:99:17:1F:50:80:F5:AE:C6:DB:DF:20:AA:66:D9
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/C5p8LM7HmRcfUID1rsbb3yCqZtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:2b:8f:51:f2:00:33:2a:8f:5f:c8:26:ce:a8:1f:41:24:be:
9f:b1:eb:46:05:f1:4e:84:be:1d:58:87:45:98:c0:c1:f1:c8:
f9:87:8f:51:ea:d8:0f:ec:b6:60:a8:36:06:7a:f6:15:84:33:
6d:2f:d3:1b:11:03:59:d9:68:92:82:30:67:53:de:86:25:29:
d2:b2:c1:b0:ff:33:db:d2:d6:4f:12:2f:be:1c:82:ee:66:72:
fc:e8:8f:97:e5:14:32:4c:2f:00:6e:e4:1c:3d:fd:03:80:b5:
f9:51:33:e3:fc:f6:0d:56:e4:c8:38:db:35:35:e2:27:65:63:
f1:6d:e6:cb:f4:6c:b2:9e:55:00:7c:b6:45:3b:87:49:62:19:
c0:f9:13:14:4e:dd:62:01:c4:16:b9:2f:0d:1d:9f:5b:12:88:
fc:22:5c:1d:fe:a5:e8:59:c8:53:cb:f4:01:7b:26:e6:64:c3:
76:c5:bb:32:50:44:55:78:07:67:5c:9b:79:59:e8:5a:34:d7:
9e:4d:ae:39:01:6c:30:d6:eb:50:2d:24:fd:a0:ff:6b:20:a5:
41:25:8a:ec:ab:3c:8c:a0:dc:f6:91:c5:f4:fb:b2:73:64:d1:
6d:97:f1:55:58:49:79:5d:49:8b:49:41:d3:c7:52:ce:3b:d7:
68:43:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:31 2026 by rpki-client