Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T05JFwvA0cksaIjBetDv2tQjAHA.roa
File: T05JFwvA0cksaIjBetDv2tQjAHA.roa (raw, json)
Hash identifier: kaHc3RfIIbo0LJt06gGIePoJ2hpYs5u/FmoeQYcFrS8=
Subject key identifier: 4F:4E:49:17:0B:C0:D1:C9:2C:68:88:C1:7A:D0:EF:DA:D4:23:00:70
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019BF93E55AB2E9212BA305AAE7B17B3A08F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T05JFwvA0cksaIjBetDv2tQjAHA.roa
Signing time: Mon 26 Jan 2026 07:39:30 +0000
ROA not before: Mon 26 Jan 2026 07:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41354
IP address blocks: 212.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:3e:55:ab:2e:92:12:ba:30:5a:ae:7b:17:b3:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 26 07:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f4e49170bc0d1c92c6888c17ad0efdad4230070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:b2:46:70:6a:57:86:e2:ea:36:db:26:62:
13:23:0e:63:04:4d:58:18:50:d0:43:50:fb:c1:fa:
fc:9c:5e:84:4b:db:62:d8:7d:84:81:6e:76:c6:cf:
6b:a7:d3:c9:7e:b7:b6:de:a0:b0:5d:0b:bd:66:c0:
a4:39:30:fd:91:f0:4b:fc:1b:0c:7a:db:05:17:0c:
68:93:92:5e:c4:77:ca:c6:70:d3:84:bb:e4:ba:b3:
9c:a8:0e:38:d0:94:ee:ac:a8:a1:30:c0:bc:3a:e0:
2d:8e:72:06:34:3f:9d:d7:bf:c0:9c:bc:0a:ec:ac:
bf:f0:45:0b:ab:c0:bb:87:ba:41:61:6a:5e:06:23:
da:fc:41:95:d6:a3:30:ba:9b:2a:70:61:19:53:f6:
43:d4:06:9a:7b:32:0d:55:7c:e5:2e:e4:54:6c:29:
f1:62:01:dc:ce:7b:bb:d8:5d:e4:77:1a:0e:52:3a:
dc:05:a6:bf:00:39:88:0b:f0:3d:46:a0:c6:3b:c8:
c9:25:7d:16:f9:e7:ca:16:55:8b:e5:be:04:9f:b9:
5b:54:4e:3c:9c:86:7d:c4:d3:19:e2:8b:ad:05:a3:
b1:3c:9d:34:16:13:ba:e1:f5:72:07:43:84:e4:de:
34:26:49:b3:b0:29:e0:ec:83:16:6b:44:b2:84:f6:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:49:17:0B:C0:D1:C9:2C:68:88:C1:7A:D0:EF:DA:D4:23:00:70
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T05JFwvA0cksaIjBetDv2tQjAHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
55:66:a1:dc:31:ee:c6:b4:d0:4e:9c:b1:ba:79:72:e3:d5:58:
86:d6:33:ef:64:51:f6:45:50:68:0d:f7:15:35:52:5e:89:9a:
87:06:aa:4e:82:9a:c0:a4:d5:84:09:e9:9f:bf:83:41:5b:ea:
5d:3b:20:e2:57:8e:8e:06:96:79:02:15:ab:91:83:ca:e3:a8:
ca:e7:f0:33:14:37:ad:96:0f:a5:34:f3:ee:e8:d1:1a:25:53:
6e:ae:96:44:55:cd:e2:81:28:e7:b5:0c:3c:4c:9c:42:78:ef:
2c:bb:b6:04:8b:3d:4f:ad:cd:7b:57:44:1d:2e:f5:45:41:bd:
83:c8:af:91:7d:d4:37:b1:df:67:60:57:a1:8c:c6:2a:51:e8:
e6:65:1b:6f:c1:bb:58:dd:e3:c9:99:64:67:bb:69:92:99:02:
de:c7:40:52:77:5d:6f:3a:3e:74:d1:5e:38:79:ae:b0:47:bf:
59:c7:1c:ae:9a:d7:27:66:06:a2:c9:5d:6b:92:33:20:7e:f6:
a0:ba:02:d4:76:f2:af:56:c2:21:11:73:8d:39:95:40:0f:5c:
98:b7:0a:51:39:f9:6d:84:ef:03:22:ff:96:f5:01:20:d5:5f:
3f:89:64:e1:23:ef:9c:a4:8f:44:16:28:b2:59:dc:5f:3b:77:
4d:f1:a4:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv5PlWrLpISujBarnsXs6CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMTI2MDczOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjRlNDkxNzBiYzBkMWM5MmM2ODg4YzE3YWQwZWZkYWQ0MjMwMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/WyRnBqV4bi6jbbJmITIw5jBE1Y
GFDQQ1D7wfr8nF6ES9ti2H2EgW52xs9rp9PJfre23qCwXQu9ZsCkOTD9kfBL/BsM
etsFFwxok5JexHfKxnDThLvkurOcqA440JTurKihMMC8OuAtjnIGND+d17/AnLwK
7Ky/8EULq8C7h7pBYWpeBiPa/EGV1qMwupsqcGEZU/ZD1AaaezINVXzlLuRUbCnx
YgHcznu72F3kdxoOUjrcBaa/ADmIC/A9RqDGO8jJJX0W+efKFlWL5b4En7lbVE48
nIZ9xNMZ4outBaOxPJ00FhO64fVyB0OE5N40JkmzsCng7IMWa0SyhPavCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9OSRcLwNHJLGiIwXrQ79rUIwBwMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVDA1SkZ3dkEwY2tzYUlqQmV0RHYydFFqQUhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1NQgMA0G
CSqGSIb3DQEBCwUAA4IBAQBVZqHcMe7GtNBOnLG6eXLj1ViG1jPvZFH2RVBoDfcV
NVJeiZqHBqpOgprApNWECemfv4NBW+pdOyDiV46OBpZ5AhWrkYPK46jK5/AzFDet
lg+lNPPu6NEaJVNurpZEVc3igSjntQw8TJxCeO8su7YEiz1Prc17V0QdLvVFQb2D
yK+RfdQ3sd9nYFehjMYqUejmZRtvwbtY3ePJmWRnu2mSmQLex0BSd11vOj500V44
ea6wR79ZxxyumtcnZgaiyV1rkjMgfvagugLUdvKvVsIhEXONOZVAD1yYtwpROflt
hO8DIv+W9QEg1V8/iWThI++cpI9EFiiyWdxfO3dN8aQ+
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:01:15 2026 by rpki-client