Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/SD6sHxAt1pjK9oQLSlV57TTHq-c.roa
File: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (raw, json)
Hash identifier: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=
Subject key identifier: 48:3E:AC:1F:10:2D:D6:98:CA:F6:84:0B:4A:55:79:ED:34:C7:AB:E7
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 019F74CB01A1B42ACAC416D8720210C06738
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/SD6sHxAt1pjK9oQLSlV57TTHq-c.roa
Signing time: Sat 18 Jul 2026 10:34:48 +0000
ROA not before: Sat 18 Jul 2026 10:34:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 212.47.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:cb:01:a1:b4:2a:ca:c4:16:d8:72:02:10:c0:67:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Jul 18 10:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=483eac1f102dd698caf6840b4a5579ed34c7abe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:c5:c3:b6:bc:b8:54:6a:01:a3:6e:e9:60:
ea:56:fc:86:1d:92:32:1c:e9:c7:88:b5:60:6b:57:
a5:a9:f5:29:0f:82:32:ca:1c:ce:f0:78:fe:23:35:
90:c8:36:e2:c7:6e:c7:2e:48:07:82:c1:97:11:ec:
57:ad:32:27:c6:47:be:7c:51:ad:03:67:d1:af:3e:
26:27:0a:b3:72:f4:41:cd:9f:44:1f:ac:9a:2d:c8:
95:94:b5:3d:50:a6:3f:96:a8:73:cc:cb:12:62:ed:
b4:de:91:f8:2f:3d:d8:bc:c9:73:f9:5e:58:29:53:
90:e5:3b:9d:8b:e0:b7:08:f5:f4:28:8f:12:60:a1:
37:81:45:6b:11:ec:dc:50:49:e2:c3:66:cf:c9:33:
25:2e:0d:84:be:17:fd:15:92:24:79:02:7d:cc:8b:
1a:9c:97:a9:f1:16:2f:6e:8f:20:50:8f:3b:90:7b:
52:fa:3b:13:5b:e1:b6:15:62:05:de:ac:e6:41:66:
c7:82:3f:82:04:26:dc:f9:bb:22:a4:cb:40:88:f1:
30:46:1b:d8:46:37:1b:77:98:01:7a:04:30:0e:32:
9d:93:ca:73:39:0c:6f:de:88:65:4f:98:e3:29:9d:
0d:7f:10:68:1f:8c:58:66:35:47:8e:e4:05:57:6b:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3E:AC:1F:10:2D:D6:98:CA:F6:84:0B:4A:55:79:ED:34:C7:AB:E7
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/SD6sHxAt1pjK9oQLSlV57TTHq-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.60.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:05:c2:db:7b:84:53:67:9a:12:c7:b1:9a:ca:f8:e5:98:
ca:31:5d:cf:1e:1d:a0:73:1c:9e:e6:42:58:ee:97:49:f3:a9:
0f:87:cc:11:fc:6c:73:ed:9c:28:12:06:8d:df:4c:ab:27:ca:
19:c8:ac:6a:c0:8f:d8:4c:b2:ab:e3:55:03:e4:07:4c:f4:66:
d8:24:86:a0:e1:83:b4:26:63:0c:56:34:cf:79:d2:7d:81:51:
c2:19:77:74:15:a2:d7:e8:0c:1e:b8:20:c1:ca:67:22:92:35:
2e:f1:ce:b9:77:f0:69:1b:64:d7:9e:9c:bf:2b:8a:cf:3b:f4:
f8:d6:ab:d8:28:54:02:4b:66:3b:43:1c:e9:94:ba:02:4a:a3:
0a:7d:78:2b:a8:b6:d1:66:db:74:73:91:22:2c:9d:71:64:fc:
69:62:45:c8:b8:79:a2:79:48:34:d3:26:f9:b6:b8:f7:59:7a:
d6:3f:63:01:f3:b5:80:db:34:80:2b:21:d5:b6:2f:a4:20:8d:
f2:1f:26:48:c6:81:38:8d:2a:6e:ab:74:87:21:39:cd:78:15:
a1:4c:a5:81:a5:cc:82:cb:b7:8f:c4:39:81:ea:16:ed:35:f2:
02:33:ff:90:18:9a:6b:06:ba:05:90:df:05:88:66:7c:cb:84:
fb:fe:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:56 2026 by rpki-client