Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/fC_BVeuSRvNhDuyiV5VErP_nsOI.roa
File: fC_BVeuSRvNhDuyiV5VErP_nsOI.roa (raw, json)
Hash identifier: nFVXkMa+yfSpLlm5e8o1/01S27zDuwQKwH6ny5ZPQwA=
Subject key identifier: 7C:2F:C1:55:EB:92:46:F3:61:0E:EC:A2:57:95:44:AC:FF:E7:B0:E2
Certificate issuer: /CN=0b2049f6ca7cfdadaf3cb3c71e48b083df0b73fe
Certificate serial: 019C57041B95A91C6CFA5D2AE57C8DCDB4D7
Authority key identifier: 0B:20:49:F6:CA:7C:FD:AD:AF:3C:B3:C7:1E:48:B0:83:DF:0B:73:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/fC_BVeuSRvNhDuyiV5VErP_nsOI.roa
Signing time: Fri 13 Feb 2026 12:40:12 +0000
ROA not before: Fri 13 Feb 2026 12:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29231
IP address blocks: 212.4.96.0/19 maxlen: 19
212.4.110.0/24 maxlen: 24
2a02:2740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:04:1b:95:a9:1c:6c:fa:5d:2a:e5:7c:8d:cd:b4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2049f6ca7cfdadaf3cb3c71e48b083df0b73fe
Validity
Not Before: Feb 13 12:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c2fc155eb9246f3610eeca2579544acffe7b0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:38:c4:f0:45:a1:c6:ff:d3:c1:9a:03:3c:
ab:43:b2:bc:62:a0:50:f4:30:b1:85:58:79:91:3f:
51:7a:e9:6c:e5:b4:2a:95:1b:e8:7d:ef:45:c0:ca:
8a:a9:0d:0b:c3:23:90:55:2b:37:26:5d:d0:37:b6:
d8:03:37:b5:78:d4:7b:bd:be:30:95:46:c7:94:48:
c6:2b:62:79:e0:f2:2f:2a:3c:19:28:89:36:24:db:
85:f1:97:dc:66:d4:21:e5:8c:d3:7d:e0:38:de:64:
64:26:67:8f:cb:73:d4:2d:ca:51:b7:f8:b6:bb:88:
64:f5:ad:b7:75:ca:8e:b4:d6:b3:68:61:ca:f0:77:
47:e2:5b:af:c6:b0:7c:b9:e9:4f:cd:4c:7a:e4:44:
15:47:57:03:ea:8f:e9:73:4b:b7:59:25:79:03:2d:
1f:21:24:c7:64:41:10:19:cb:dd:65:80:35:dc:2b:
da:18:e5:02:15:b1:f5:2b:6d:1e:40:aa:d8:7f:c3:
d3:9c:54:84:aa:19:8b:18:d8:76:b3:d3:b0:4f:ae:
fc:f5:5c:68:d1:1c:8b:73:12:c7:e9:b5:c0:13:54:
b6:e5:5a:e7:79:29:66:68:46:da:3d:d0:ef:65:61:
d2:4e:f1:9c:87:be:3d:ce:b0:b9:6d:5a:91:f8:5c:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:C1:55:EB:92:46:F3:61:0E:EC:A2:57:95:44:AC:FF:E7:B0:E2
X509v3 Authority Key Identifier:
keyid:0B:20:49:F6:CA:7C:FD:AD:AF:3C:B3:C7:1E:48:B0:83:DF:0B:73:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/fC_BVeuSRvNhDuyiV5VErP_nsOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5fa19d-dcd5-4214-b148-c9b6259dfcea/1/CyBJ9sp8_a2vPLPHHkiwg98Lc_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.4.96.0/19
IPv6:
2a02:2740::/32
Signature Algorithm: sha256WithRSAEncryption
8a:57:0b:29:62:52:88:b2:ad:61:34:71:9a:c5:cc:f9:54:5e:
fd:73:12:6d:f9:a4:bd:2b:2c:cf:05:12:ae:67:7f:c3:86:85:
c1:ba:32:99:5d:54:29:60:47:72:11:4d:d3:9e:7d:64:aa:8a:
32:5a:63:33:8d:9b:e0:88:5f:af:13:06:4f:6b:2c:73:6f:25:
7e:50:5d:17:b3:8f:20:6c:4f:cd:52:df:a5:66:3f:f2:fe:fe:
1d:4b:98:03:04:44:d1:5f:e1:e7:07:d5:c4:f6:d1:25:d3:ad:
e2:49:56:72:09:f2:c1:29:1b:85:c0:19:5d:03:7c:29:80:da:
48:c4:22:10:92:2c:84:3b:f9:d1:28:39:b2:57:6d:5f:27:0a:
47:b7:f6:25:df:b2:1f:ec:4c:b1:93:40:ab:b1:ef:5a:2a:18:
d6:2c:21:48:54:f6:ce:71:e5:b3:6b:5c:d3:80:66:2b:c7:b3:
8d:b7:29:a7:43:2a:82:97:6c:d9:34:92:ce:df:e1:03:75:5c:
02:cc:71:fb:7f:8c:63:20:6b:d3:1f:9f:b7:42:ac:5c:f8:70:
88:62:5a:e4:dc:cf:aa:99:2d:71:b5:e1:e3:87:ef:ea:42:78:
b9:85:67:e6:c6:2f:ed:47:17:c6:8c:70:00:2d:9c:1f:ca:8c:
49:19:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:02 2026 by rpki-client