Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SEQRi20q7L1AbukEaViytsqJ1zM.roa
File: SEQRi20q7L1AbukEaViytsqJ1zM.roa (raw, json)
Hash identifier: +w83sebhXIgkDe9FUuUcoRF7/Z37K1KssxrmGEnfno0=
Subject key identifier: 48:44:11:8B:6D:2A:EC:BD:40:6E:E9:04:69:58:B2:B6:CA:89:D7:33
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A11B4285D2ACCF2C909863525FF930810F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SEQRi20q7L1AbukEaViytsqJ1zM.roa
Signing time: Thu 08 Oct 2026 11:25:06 +0000
ROA not before: Thu 08 Oct 2026 11:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402904
IP address blocks: 212.212.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:42:85:d2:ac:cf:2c:90:98:63:52:5f:f9:30:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 8 11:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4844118b6d2aecbd406ee9046958b2b6ca89d733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:65:be:f3:f1:6f:fd:9e:04:4d:a1:cb:a0:
be:96:94:32:01:6b:94:b8:5d:4b:da:06:fe:7f:f3:
95:5a:0a:14:84:e6:da:be:76:c4:42:67:06:85:6f:
c4:47:f2:a9:0d:f6:0c:57:75:ca:40:a6:aa:9a:ea:
c6:fd:12:fe:17:6d:23:a7:cd:4a:a1:8c:31:e6:75:
c3:11:76:f1:60:44:53:92:9b:6a:ac:f9:c5:c9:32:
c1:a2:a6:5a:c1:e2:6d:84:ef:7d:7c:87:5c:ec:57:
fe:54:53:6e:41:39:55:40:3a:36:23:a6:93:d2:d3:
f4:47:a6:45:1a:07:bb:c9:cf:b1:bd:a3:ec:cc:52:
ac:28:bc:f6:77:8a:75:57:33:80:b8:3d:e8:92:5a:
90:90:64:41:03:dd:85:5d:99:02:4c:a7:e1:a9:fd:
50:55:d5:07:89:f1:74:cc:0a:36:fe:0f:f0:5c:d3:
81:03:a0:c5:b4:e5:83:a7:6e:0b:60:22:6c:3b:1f:
57:ae:c1:7d:58:a2:f0:f1:0b:4e:fd:71:14:44:4d:
75:7e:0a:e1:83:12:e3:92:0a:b0:c3:02:68:94:12:
b5:f6:ac:70:b1:7a:fa:6f:a5:d1:95:fb:ff:49:b5:
55:08:1f:de:21:8a:d7:73:6e:8d:2d:2b:0e:9c:bb:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:11:8B:6D:2A:EC:BD:40:6E:E9:04:69:58:B2:B6:CA:89:D7:33
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SEQRi20q7L1AbukEaViytsqJ1zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.25.0/24
Signature Algorithm: sha256WithRSAEncryption
57:da:44:29:9c:14:59:39:8e:ca:55:48:81:d7:54:a1:ca:b0:
01:ac:40:a6:7e:51:c0:f9:79:c5:80:4f:4f:e4:6d:d2:c9:9e:
71:76:cd:a5:78:ae:1b:b6:70:6f:e4:a0:69:3d:98:73:79:20:
7e:88:8f:de:4f:1b:b3:f5:57:f6:dc:17:71:71:b2:7b:d8:eb:
ed:b9:26:bc:13:ee:bc:71:cc:4e:d2:94:e5:82:fb:ca:50:40:
3c:63:2c:97:67:04:c1:06:14:50:57:b1:5f:2a:20:a4:36:c7:
85:77:0d:a0:95:e2:a4:46:53:41:7b:d5:b0:bf:e9:f7:26:49:
14:81:af:e2:b8:1d:48:13:60:05:90:a7:76:80:99:6a:2b:e3:
d5:81:96:16:02:a1:4b:2c:6b:dc:8c:29:66:72:61:c9:55:23:
65:f3:8c:9e:c1:2f:5d:05:f9:4d:a8:c0:e0:c2:cb:5e:d0:07:
65:3c:d1:88:a2:5f:d5:87:f8:9d:a4:0c:06:cd:56:bb:2a:ac:
58:d4:8f:7f:5d:71:8d:43:5b:80:ef:a5:ed:26:5a:a5:d4:92:
de:42:27:3a:b9:44:0b:2f:76:d4:3a:d3:44:c7:4e:63:ec:79:
24:2a:6a:90:5c:5e:b4:13:f8:79:0d:2e:9d:26:10:e6:0f:ca:
2f:35:d3:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEbQoXSrM8skJhjUl/5MIEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDA4MTEyNTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ0MTE4YjZkMmFlY2JkNDA2ZWU5MDQ2OTU4YjJiNmNhODlkNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eplvvPxb/2eBE2hy6C+lpQyAWuU
uF1L2gb+f/OVWgoUhObavnbEQmcGhW/ER/KpDfYMV3XKQKaqmurG/RL+F20jp81K
oYwx5nXDEXbxYERTkptqrPnFyTLBoqZaweJthO99fIdc7Ff+VFNuQTlVQDo2I6aT
0tP0R6ZFGge7yc+xvaPszFKsKLz2d4p1VzOAuD3oklqQkGRBA92FXZkCTKfhqf1Q
VdUHifF0zAo2/g/wXNOBA6DFtOWDp24LYCJsOx9XrsF9WKLw8QtO/XEURE11fgrh
gxLjkgqwwwJolBK19qxwsXr6b6XRlfv/SbVVCB/eIYrXc26NLSsOnLu3+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhEEYttKuy9QG7pBGlYsrbKidczMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvU0VRUmkyMHE3TDFBYnVrRWFWaXl0c3FKMXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1NQZMA0G
CSqGSIb3DQEBCwUAA4IBAQBX2kQpnBRZOY7KVUiB11ShyrABrECmflHA+XnFgE9P
5G3SyZ5xds2leK4btnBv5KBpPZhzeSB+iI/eTxuz9Vf23BdxcbJ72OvtuSa8E+68
ccxO0pTlgvvKUEA8YyyXZwTBBhRQV7FfKiCkNseFdw2gleKkRlNBe9Wwv+n3JkkU
ga/iuB1IE2AFkKd2gJlqK+PVgZYWAqFLLGvcjClmcmHJVSNl84yewS9dBflNqMDg
wste0AdlPNGIol/Vh/idpAwGzVa7KqxY1I9/XXGNQ1uA76XtJlql1JLeQic6uUQL
L3bUOtNEx05j7HkkKmqQXF60E/h5DS6dJhDmD8ovNdML
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:51 2026 by rpki-client