Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/Ccgqgl_xeBpoZypCyGgZftVZrgc.roa
File: Ccgqgl_xeBpoZypCyGgZftVZrgc.roa (raw, json)
Hash identifier: P0QRGk/LlMbbzXEE4SiHxc8S3mAURlsFipejT2weeBQ=
Subject key identifier: 09:C8:2A:82:5F:F1:78:1A:68:67:2A:42:C8:68:19:7E:D5:59:AE:07
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 019F89AE11CDDAB9A4DD19F51C97F59BEA1C
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/Ccgqgl_xeBpoZypCyGgZftVZrgc.roa
Signing time: Wed 22 Jul 2026 11:55:14 +0000
ROA not before: Wed 22 Jul 2026 11:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8396
IP address blocks: 212.70.192.0/19 maxlen: 19
212.70.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:ae:11:cd:da:b9:a4:dd:19:f5:1c:97:f5:9b:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Jul 22 11:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09c82a825ff1781a68672a42c868197ed559ae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:66:6d:54:4a:98:fd:cd:26:0b:be:ea:66:
63:e6:3d:0d:0f:e6:e6:7d:a0:cf:13:c5:bb:e7:ba:
ad:8a:ab:55:e9:10:66:69:28:fa:8b:7d:45:a3:d9:
ce:df:55:d5:09:5a:f4:0f:04:24:a2:5f:b3:e7:93:
7d:df:3d:6f:6e:6e:93:70:ae:b3:d3:19:f0:2e:6c:
4f:69:ac:50:99:34:38:7c:7b:77:2e:5c:62:ab:79:
dc:40:53:60:8c:80:dc:c1:a9:33:6c:8b:90:c9:86:
5d:49:76:76:81:bb:e3:36:30:85:06:62:46:69:bc:
94:ac:00:e7:8f:97:44:b5:ae:22:1e:8f:cc:c5:1e:
b5:04:9b:9f:ea:c9:2a:17:23:52:29:6e:72:ec:87:
d3:4a:8b:b2:9c:f7:12:17:35:b6:3d:d6:69:bd:18:
a3:81:98:35:2b:c5:5e:2b:9d:6e:17:f8:13:0f:7d:
cf:06:c0:0b:67:6d:0a:33:f7:b0:39:df:26:d9:f6:
cd:dd:97:73:c6:b7:0f:55:8d:1b:24:4d:95:3c:67:
39:6d:f4:37:72:1c:35:39:4c:8e:e5:f0:11:ec:e1:
c8:37:a3:a3:ff:da:e2:f2:45:6d:1e:88:52:9a:b2:
be:c8:38:04:c9:5e:d9:50:09:47:b9:0d:e8:56:cb:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:2A:82:5F:F1:78:1A:68:67:2A:42:C8:68:19:7E:D5:59:AE:07
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/Ccgqgl_xeBpoZypCyGgZftVZrgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:f6:e0:a3:8b:e7:2d:15:12:79:44:e6:af:5a:b7:0b:6b:d8:
0e:20:7d:32:4a:eb:5d:f9:31:3b:d3:1c:93:0c:54:3a:2a:cd:
29:02:f9:32:7e:11:a8:c3:ea:b6:3b:e6:8f:6d:64:b2:3f:50:
d4:98:fb:1d:a3:82:88:8d:02:03:00:31:ac:ba:77:01:ca:d5:
a5:75:2f:07:7c:48:83:af:ac:1c:07:57:46:8a:85:15:3b:8e:
cf:04:b2:e0:42:22:c6:ca:4a:f6:f2:27:13:90:24:43:01:9e:
c4:51:23:86:14:76:be:21:bd:fb:10:a9:aa:33:c9:f3:34:9b:
8c:3a:12:9a:0f:f9:d2:8e:e7:71:fc:5a:e0:d4:b6:04:5c:cc:
46:37:d4:8f:04:5b:8d:89:95:48:f1:5f:b1:e7:06:7e:f9:e2:
c7:24:c5:07:aa:6d:f1:ef:8f:11:b1:e2:98:36:0f:89:83:74:
1e:78:56:09:26:51:d1:6d:0b:de:6b:3c:c4:b8:0d:85:0c:f3:
f2:c9:92:79:4d:84:bb:9a:6b:79:60:93:73:6e:78:50:50:57:
68:15:95:33:14:07:e9:5b:cd:30:2d:d5:2a:b4:1d:95:15:4d:
fd:5f:3a:ae:91:1b:f6:70:9a:97:93:3b:e8:9c:dc:4b:6c:75:
cc:5a:b3:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+JrhHN2rmk3Rn1HJf1m+ocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTM5OGM4ZDMyODJjODhkOWQzZDAwMmEyNjRlNDI4ZTZi
YWVjMzYwHhcNMjYwNzIyMTE1NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWM4MmE4MjVmZjE3ODFhNjg2NzJhNDJjODY4MTk3ZWQ1NTlhZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhNmbVRKmP3NJgu+6mZj5j0ND+bm
faDPE8W757qtiqtV6RBmaSj6i31Fo9nO31XVCVr0DwQkol+z55N93z1vbm6TcK6z
0xnwLmxPaaxQmTQ4fHt3Llxiq3ncQFNgjIDcwakzbIuQyYZdSXZ2gbvjNjCFBmJG
abyUrADnj5dEta4iHo/MxR61BJuf6skqFyNSKW5y7IfTSouynPcSFzW2PdZpvRij
gZg1K8VeK51uF/gTD33PBsALZ20KM/ewOd8m2fbN3ZdzxrcPVY0bJE2VPGc5bfQ3
chw1OUyO5fAR7OHIN6Oj/9ri8kVtHohSmrK+yDgEyV7ZUAlHuQ3oVsvamwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnIKoJf8XgaaGcqQshoGX7VWa4HMB8GA1UdIwQY
MBaAFLyjmMjTKCyI2dPQAqJk5Cjmuuw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQt
MjY3YmExNzJkNDZkLzEvQ2NncWdsX3hlQnBvWnlwQ3lHZ1pmdFZacmdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQtMjY3YmExNzJkNDZk
LzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1EbAMA0G
CSqGSIb3DQEBCwUAA4IBAQBr9uCji+ctFRJ5ROavWrcLa9gOIH0ySutd+TE70xyT
DFQ6Ks0pAvkyfhGow+q2O+aPbWSyP1DUmPsdo4KIjQIDADGsuncBytWldS8HfEiD
r6wcB1dGioUVO47PBLLgQiLGykr28icTkCRDAZ7EUSOGFHa+Ib37EKmqM8nzNJuM
OhKaD/nSjudx/Frg1LYEXMxGN9SPBFuNiZVI8V+x5wZ++eLHJMUHqm3x748RseKY
Ng+Jg3QeeFYJJlHRbQveazzEuA2FDPPyyZJ5TYS7mmt5YJNzbnhQUFdoFZUzFAfp
W80wLdUqtB2VFU39XzqukRv2cJqXkzvonNxLbHXMWrOm
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:58:49 2026 by rpki-client