Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/D_nN_vPhKORNTjWjIas_aeL_fw4.roa
File: D_nN_vPhKORNTjWjIas_aeL_fw4.roa (raw, json)
Hash identifier: 2kCeAo6j8PDX4i6BTYf7QZybuVQ19wHuoI+CXgfbp/g=
Subject key identifier: 0F:F9:CD:FE:F3:E1:28:E4:4D:4E:35:A3:21:AB:3F:69:E2:FF:7F:0E
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019C70249B3729274CB359B4DDE620A6DB2C
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/D_nN_vPhKORNTjWjIas_aeL_fw4.roa
Signing time: Wed 18 Feb 2026 09:46:13 +0000
ROA not before: Wed 18 Feb 2026 09:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 212.68.164.0/22 maxlen: 22
212.68.164.0/24 maxlen: 24
212.68.165.0/24 maxlen: 24
212.68.166.0/24 maxlen: 24
212.68.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:24:9b:37:29:27:4c:b3:59:b4:dd:e6:20:a6:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Feb 18 09:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ff9cdfef3e128e44d4e35a321ab3f69e2ff7f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:ac:6a:39:ab:23:9c:35:49:3e:55:f5:5a:
fa:17:12:d9:9a:8e:21:77:bf:f5:d6:76:09:c3:69:
de:b5:6b:d9:5b:87:57:48:1b:29:79:8c:cb:c7:f4:
41:65:af:18:9a:13:bd:f6:31:c7:b7:29:db:42:c8:
bb:7d:7f:b5:d3:32:9f:dc:b8:0b:28:4c:9a:e2:d4:
06:f0:80:e2:f6:30:c3:f0:4f:50:32:0a:f9:00:72:
11:77:dc:15:bb:65:04:64:43:b8:d2:37:30:81:ef:
43:2d:b0:dc:d4:75:64:54:f0:8c:0a:40:77:1b:7f:
cf:e3:09:8b:37:e2:44:82:7c:0c:ae:1b:96:fa:ec:
4b:29:49:99:c1:01:1a:06:ec:b4:3c:1b:a3:ec:8f:
72:40:56:2a:be:8d:c6:de:00:93:b5:76:15:7f:cf:
0e:ca:f7:14:bb:35:ce:e6:83:61:05:1d:89:38:fd:
32:83:4f:68:25:51:27:c0:ba:b0:e8:af:87:9c:73:
9b:e6:ee:9d:36:58:0d:c7:90:68:13:04:d8:30:01:
af:3c:8c:5e:3d:81:e3:6c:eb:4d:9e:de:94:df:10:
60:7b:a4:2a:ad:44:68:2d:a2:e2:77:4e:06:af:fa:
b9:33:2f:dc:ed:7c:ba:73:90:97:94:82:ad:7c:cf:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:CD:FE:F3:E1:28:E4:4D:4E:35:A3:21:AB:3F:69:E2:FF:7F:0E
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/D_nN_vPhKORNTjWjIas_aeL_fw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:d9:f3:b7:d0:03:57:7e:d7:90:cb:d1:17:aa:14:82:1e:66:
52:e8:63:4a:ae:29:25:70:3b:29:f3:fb:6d:a7:ce:bf:ba:20:
d8:55:1c:27:85:68:79:53:b6:9f:9d:67:a6:cd:0c:e7:7c:6a:
a7:03:45:7e:33:ec:09:9e:f2:ff:11:81:18:94:ae:d9:cd:ab:
1c:2b:64:43:89:1c:9a:c8:e8:b2:70:3c:25:f0:68:b6:2e:4c:
0f:09:49:65:a0:d7:b9:44:d7:d9:87:1f:4b:d6:c0:f1:dc:c4:
24:0f:93:70:17:fc:7c:33:3a:44:e6:56:d9:0f:8b:60:d6:39:
80:5c:45:11:df:e5:56:0e:86:e1:93:ac:34:fb:1b:6e:ed:69:
86:2d:7b:c9:5f:1b:5f:27:1a:f3:da:c9:1e:0d:8d:5f:38:f2:
81:27:68:a6:ef:87:7e:27:e3:0e:59:fb:b2:b0:28:ea:f4:7e:
48:6e:ba:55:f3:c7:d4:5a:46:5b:81:17:14:34:d2:ce:6b:4b:
5c:f1:65:ec:18:ca:92:c7:f9:17:8e:c1:a7:75:e6:70:31:aa:
6a:73:b5:e6:47:7c:b1:82:4a:31:43:77:8e:05:27:1c:42:fb:
ed:d8:be:84:c4:e2:8c:27:75:8d:74:2e:d8:98:eb:f4:5c:de:
df:95:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:23:10 2026 by rpki-client