Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/snK8RYXIwaWXYdKwMpYNXyJpIGs.roa
File: snK8RYXIwaWXYdKwMpYNXyJpIGs.roa (raw, json)
Hash identifier: y0b4iEa6OI8TwERURPsf2t0TcgnlN8vCn/vGR1UrDV0=
Subject key identifier: B2:72:BC:45:85:C8:C1:A5:97:61:D2:B0:32:96:0D:5F:22:69:20:6B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A07A80878A7845776167812EB417F54F6D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/snK8RYXIwaWXYdKwMpYNXyJpIGs.roa
Signing time: Mon 07 Sep 2026 06:13:58 +0000
ROA not before: Mon 07 Sep 2026 06:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:80:87:8a:78:45:77:61:67:81:2e:b4:17:f5:4f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 06:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b272bc4585c8c1a59761d2b032960d5f2269206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:83:c0:55:ea:cf:38:f7:15:a4:94:53:62:
ff:de:04:45:6c:05:4d:0d:2c:58:6b:ca:d6:e4:df:
eb:9c:92:bc:a1:c1:8f:8e:ef:0a:df:47:97:07:96:
40:57:85:14:7a:fe:9e:9f:6b:eb:21:ff:dd:97:ac:
59:8e:40:22:01:dd:3a:17:f0:05:d4:1c:19:aa:c7:
b3:9e:04:3b:f3:17:b8:e1:34:77:e1:06:0c:de:df:
76:4d:da:0a:3a:97:a8:9b:66:69:f2:5d:8a:73:f0:
41:59:6f:74:8d:d6:88:65:54:e3:0b:27:cf:15:35:
cb:fb:27:a4:f4:49:8d:99:f8:a5:9e:3c:4e:06:8b:
8c:11:49:dd:aa:9c:f6:8d:1b:b8:f7:2d:aa:04:05:
07:2f:71:76:7f:1f:76:15:94:4e:1e:0d:ac:9c:f4:
eb:9e:f8:bf:c6:ef:fe:c8:b3:ab:6c:dc:8a:0c:1b:
0d:b0:41:f4:44:e2:a9:6b:2a:6a:c2:b4:ce:fd:84:
25:6f:b3:4c:36:89:40:3c:e6:58:a9:02:c5:d9:e9:
b7:ce:53:da:77:68:86:72:12:32:e1:b6:fa:7d:6b:
c2:97:0c:07:1b:b2:e7:0f:09:00:15:49:44:ca:71:
49:f6:aa:a1:e5:46:e7:1f:bc:b2:09:45:95:e6:0b:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:BC:45:85:C8:C1:A5:97:61:D2:B0:32:96:0D:5F:22:69:20:6B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/snK8RYXIwaWXYdKwMpYNXyJpIGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
43:37:59:da:80:07:14:38:73:9c:39:ac:95:60:1a:24:b1:09:
ea:7a:8f:9e:2f:66:6a:29:35:74:ea:80:0a:d5:85:89:3c:ad:
13:17:4a:f6:87:b5:09:1a:f4:70:c1:b7:f9:11:45:5d:6a:7c:
e0:a8:5a:cf:aa:4a:0d:4c:5c:c1:69:ad:8c:4d:ef:f7:0a:d9:
ac:2e:20:08:59:80:22:24:c2:8d:5e:09:31:87:a7:e7:eb:98:
ee:60:4b:e1:6e:79:2f:2e:68:71:a5:59:e4:da:ed:6b:45:5c:
55:08:9c:99:80:a3:3c:38:1e:be:58:68:c0:4c:45:8c:0b:e8:
77:68:fc:c2:62:8d:51:19:5d:c7:b4:f0:9a:64:f5:26:14:46:
9d:2c:11:7a:91:1d:60:71:05:48:84:3f:6b:64:f2:b5:b7:24:
2c:c2:eb:31:b7:53:b7:98:0d:2b:8d:35:de:21:7b:b0:fa:8a:
6e:bc:03:02:61:64:89:b3:31:a4:06:70:73:e2:3c:c1:0b:eb:
19:cd:1f:01:75:c3:8a:18:a4:c9:1c:07:e9:8b:f6:5c:b1:0a:
53:77:0e:35:54:46:87:18:5c:80:b2:a6:39:ef:12:79:fb:91:
a3:d7:d2:ff:ba:81:3d:8a:0d:39:ed:79:1d:ab:62:ff:c6:bb:
d2:61:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:51:19 2026 by rpki-client