Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/AZ8OvTpGpdDuAF6Y-kPV_Stbyhg.roa
File: AZ8OvTpGpdDuAF6Y-kPV_Stbyhg.roa (raw, json)
Hash identifier: 7rgz8yqocL/1oucg5hPOQaaan/ogeM7MMAM1VpFC/0U=
Subject key identifier: 01:9F:0E:BD:3A:46:A5:D0:EE:00:5E:98:FA:43:D5:FD:2B:5B:CA:18
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 019CB7E1943B561EB5E07F5ACB0346B2292B
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/AZ8OvTpGpdDuAF6Y-kPV_Stbyhg.roa
Signing time: Wed 04 Mar 2026 08:05:39 +0000
ROA not before: Wed 04 Mar 2026 08:05:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207749
IP address blocks: 212.102.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:e1:94:3b:56:1e:b5:e0:7f:5a:cb:03:46:b2:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Mar 4 08:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=019f0ebd3a46a5d0ee005e98fa43d5fd2b5bca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:32:c3:9b:86:a4:dd:f3:f1:12:c3:11:eb:
51:dd:22:05:72:a1:8d:27:78:6d:d3:f9:24:91:71:
1a:7c:58:73:15:fb:fb:5a:4f:0f:06:c0:6d:e4:40:
b5:42:33:78:4c:25:93:61:84:f2:02:aa:d7:2a:64:
5c:4d:9d:64:2a:2f:0e:f2:3e:16:8b:00:a4:ab:6e:
17:5f:4d:b3:ca:de:2f:de:c5:58:7e:36:70:fb:c4:
03:57:a8:92:58:38:77:86:64:23:92:d6:73:64:86:
8a:d1:21:fa:48:cb:bf:0e:76:09:de:51:13:ca:d4:
36:e9:66:68:eb:ed:4e:63:c3:67:36:67:fb:9b:62:
dc:b2:3d:4f:5e:4d:e2:05:f2:a1:e3:f2:02:f2:14:
0a:b2:8b:b1:d7:93:3d:72:a4:ec:02:f4:2b:05:94:
bc:2b:d5:da:7e:79:9c:0b:23:1f:44:d0:ff:dc:4d:
ce:76:4c:f2:03:7b:6d:44:85:35:6f:8a:4b:75:e4:
a7:59:9a:4d:9d:ae:9c:2a:4b:cd:52:10:d0:99:9c:
3a:e4:33:b1:3a:f2:64:0d:fb:61:ca:d3:34:7a:bb:
41:22:3f:dd:b4:ce:f4:a7:dd:20:6e:99:0c:46:76:
a0:6e:e7:c8:a9:e8:fa:ea:97:13:7e:4c:f7:32:fd:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:0E:BD:3A:46:A5:D0:EE:00:5E:98:FA:43:D5:FD:2B:5B:CA:18
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/AZ8OvTpGpdDuAF6Y-kPV_Stbyhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:96:94:f6:db:11:08:63:c8:8f:03:fd:f0:19:20:cc:53:65:
b4:43:27:ef:bc:25:db:9d:5c:fa:c3:b4:ac:de:f9:3b:39:94:
8d:81:97:9b:b4:0a:88:66:ac:27:98:40:b0:15:f9:7c:17:05:
52:a8:73:3c:8d:d5:74:d0:47:e7:86:93:8f:3b:32:b3:a5:06:
03:70:8d:7e:2e:40:ea:f0:ea:a3:96:c1:30:38:7f:db:3e:04:
44:7a:c2:c1:7c:c6:6c:8b:ee:ba:c7:03:1c:8f:07:40:0a:55:
73:35:7e:e1:5b:a7:c3:68:27:bb:07:f8:91:8b:3f:fe:3e:19:
1c:b6:74:d6:c2:70:84:6f:0d:5a:9c:13:10:54:b6:6f:58:af:
f0:c2:91:47:91:87:cd:46:5e:b0:a8:68:a6:64:fb:f5:e7:f1:
e5:92:d2:1e:6a:96:d6:87:67:f8:ce:fc:95:8b:e2:f4:f7:36:
ea:48:37:1e:52:f9:0a:ab:8f:a3:cf:87:86:be:27:db:4e:3a:
ae:e2:48:bc:ea:aa:70:1f:94:03:ab:6a:ef:cc:81:aa:18:b5:
4d:1a:26:f3:d9:ad:eb:00:4b:10:7c:5d:4e:2b:8d:e5:db:21:
55:24:ad:87:9d:2f:bf:bf:3e:c6:1d:78:39:fd:ac:fd:4e:54:
cb:0c:40:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy34ZQ7Vh614H9aywNGsikrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWJiYThiZDNmYWU3YWU4MjQ5YzljNDYxNjhiYTkwMDIz
ZGIxOTQwHhcNMjYwMzA0MDgwNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTlmMGViZDNhNDZhNWQwZWUwMDVlOThmYTQzZDVmZDJiNWJjYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo4yw5uGpN3z8RLDEetR3SIFcqGN
J3ht0/kkkXEafFhzFfv7Wk8PBsBt5EC1QjN4TCWTYYTyAqrXKmRcTZ1kKi8O8j4W
iwCkq24XX02zyt4v3sVYfjZw+8QDV6iSWDh3hmQjktZzZIaK0SH6SMu/DnYJ3lET
ytQ26WZo6+1OY8NnNmf7m2Lcsj1PXk3iBfKh4/IC8hQKsoux15M9cqTsAvQrBZS8
K9XafnmcCyMfRND/3E3OdkzyA3ttRIU1b4pLdeSnWZpNna6cKkvNUhDQmZw65DOx
OvJkDfthytM0ertBIj/dtM70p90gbpkMRnagbufIqej66pcTfkz3Mv1fewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGfDr06RqXQ7gBemPpD1f0rW8oYMB8GA1UdIwQY
MBaAFLUbuovT+ueugknJxGFoupACPbGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDct
NzgyMzEwZTY2NjJkLzEvQVo4T3ZUcEdwZER1QUY2WS1rUFZfU3RieWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDctNzgyMzEwZTY2NjJk
LzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZ4MA0G
CSqGSIb3DQEBCwUAA4IBAQASlpT22xEIY8iPA/3wGSDMU2W0QyfvvCXbnVz6w7Ss
3vk7OZSNgZebtAqIZqwnmECwFfl8FwVSqHM8jdV00EfnhpOPOzKzpQYDcI1+LkDq
8OqjlsEwOH/bPgREesLBfMZsi+66xwMcjwdAClVzNX7hW6fDaCe7B/iRiz/+Phkc
tnTWwnCEbw1anBMQVLZvWK/wwpFHkYfNRl6wqGimZPv15/HlktIeapbWh2f4zvyV
i+L09zbqSDceUvkKq4+jz4eGvifbTjqu4ki86qpwH5QDq2rvzIGqGLVNGibz2a3r
AEsQfF1OK43l2yFVJK2HnS+/vz7GHXg5/az9TlTLDEBa
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:03 2026 by rpki-client