Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/qEbucLDWMTkfg6bkJMZgAcq8qds.roa
File: qEbucLDWMTkfg6bkJMZgAcq8qds.roa (raw, json)
Hash identifier: 9DUJ64ns1rvO2poC78wscUxtmWUKgp0h7BVxTPhQow4=
Subject key identifier: A8:46:EE:70:B0:D6:31:39:1F:83:A6:E4:24:C6:60:01:CA:BC:A9:DB
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019F89B95003B6AC0F0E970DE6F2B3A97F2F
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/qEbucLDWMTkfg6bkJMZgAcq8qds.roa
Signing time: Wed 22 Jul 2026 12:07:31 +0000
ROA not before: Wed 22 Jul 2026 12:07:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 212.124.68.0/24 maxlen: 24
212.124.69.0/24 maxlen: 24
212.124.70.0/24 maxlen: 24
212.124.71.0/24 maxlen: 24
212.124.72.0/22 maxlen: 24
212.124.77.0/24 maxlen: 24
212.124.78.0/23 maxlen: 24
212.124.80.0/22 maxlen: 24
212.124.86.0/24 maxlen: 24
212.124.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b9:50:03:b6:ac:0f:0e:97:0d:e6:f2:b3:a9:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jul 22 12:07:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a846ee70b0d631391f83a6e424c66001cabca9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:3f:57:21:84:4d:eb:fe:17:6e:d0:ef:6a:
9e:86:bc:b3:33:5e:1e:13:73:e4:3d:06:9a:fb:6b:
78:7a:65:fd:a6:8c:9b:18:34:71:01:75:20:b9:f4:
09:03:96:4d:ce:8d:87:bc:5c:69:5b:5e:aa:ca:96:
a0:b4:40:76:21:eb:2a:3d:82:e9:0a:06:a1:48:e4:
5c:e7:54:60:82:32:28:b5:e8:af:a4:ed:a5:dc:bd:
b2:22:4f:12:46:7f:ca:7a:2b:6a:ef:71:f0:40:6b:
dd:39:bb:17:ac:7c:47:cb:3f:53:65:83:63:49:cd:
42:9d:c3:d1:9f:35:ef:62:87:7e:a9:f9:17:9e:7e:
6e:ac:b6:43:fe:62:ca:ab:18:bf:3c:a6:66:f6:e9:
c4:c9:57:59:f0:b5:b8:d0:3b:a5:2e:4e:0a:36:15:
af:46:f6:e7:1a:a5:f6:de:2d:60:ac:91:3d:33:ff:
81:bd:64:1d:63:33:e2:5e:f0:c4:e9:e2:07:35:ac:
7d:8a:01:39:78:fc:f7:ee:ac:39:c9:a8:0e:e7:0e:
3f:d1:4a:c2:29:bf:f4:38:28:3d:28:df:97:50:1e:
90:74:3e:61:49:cb:b5:06:10:44:32:f8:f2:26:8b:
cf:ed:36:10:a9:6e:cb:86:b8:9b:68:c6:a9:2e:2d:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:EE:70:B0:D6:31:39:1F:83:A6:E4:24:C6:60:01:CA:BC:A9:DB
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/qEbucLDWMTkfg6bkJMZgAcq8qds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0-212.124.75.255
212.124.77.0-212.124.83.255
212.124.86.0/24
212.124.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:53:5f:05:60:1a:3b:46:48:43:60:d0:cb:a8:1a:22:d5:59:
1e:8f:c3:c9:60:20:56:2f:0b:99:c1:90:3c:0c:21:dd:3b:44:
be:66:8b:58:ed:f8:cc:2a:c7:05:b8:79:52:d8:97:9b:a4:22:
e5:88:5e:10:34:f4:bf:3f:61:46:c7:17:1d:4d:36:2a:db:ad:
46:41:ed:84:38:18:4f:d8:a6:78:da:26:da:42:bc:c9:7d:69:
87:e2:1d:b5:03:f0:d2:f2:51:3d:fb:30:0b:9e:81:60:30:09:
75:50:57:5c:eb:a2:c0:eb:7e:c5:d8:ae:d0:85:d2:3a:e6:31:
e8:04:f8:1c:75:56:2f:37:9e:64:0d:c2:6c:dd:77:89:cf:f4:
75:c7:23:49:ed:7a:0b:9e:f3:d3:0d:21:be:84:b5:dd:d3:e5:
db:26:bc:79:05:9e:07:83:c7:72:dc:33:1c:91:9c:10:6a:28:
67:57:b8:83:02:fb:77:97:16:c4:4a:d3:09:ba:db:84:09:f8:
5e:ca:d8:f1:07:43:af:ab:80:33:da:48:c9:8b:e1:cc:fe:ff:
28:c8:7b:41:fd:75:75:d6:05:4c:af:4d:b0:8a:d7:48:66:79:
0a:e8:07:ab:0b:47:0f:1a:2e:1f:bb:d8:8c:38:e5:d7:3e:6c:
09:74:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:09 2026 by rpki-client