Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Y71JSOza9l99m2LkV-uZBA1qT4k.roa
File: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (raw, json)
Hash identifier: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=
Subject key identifier: 63:BD:49:48:EC:DA:F6:5F:7D:9B:62:E4:57:EB:99:04:0D:6A:4F:89
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0CCFC61A9D804F1666D8FF604A38BA2BD
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Y71JSOza9l99m2LkV-uZBA1qT4k.roa
Signing time: Wed 23 Sep 2026 06:38:07 +0000
ROA not before: Wed 23 Sep 2026 06:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218732
IP address blocks: 212.23.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:fc:61:a9:d8:04:f1:66:6d:8f:f6:04:a3:8b:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 23 06:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63bd4948ecdaf65f7d9b62e457eb99040d6a4f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:77:36:5a:4e:43:2d:2c:76:b6:22:01:b2:
d1:42:63:28:c7:0c:bf:d0:54:8c:28:66:3d:e5:b9:
2f:14:b0:5b:6b:ea:e8:54:51:22:f6:b4:11:2d:f0:
b7:f8:08:77:76:ff:17:8d:4b:38:74:5e:c5:ab:62:
67:50:43:6e:1d:7a:1c:33:21:c6:7e:2b:0f:d3:7f:
7d:66:6a:db:a1:3e:27:39:c0:44:cf:6a:26:65:b8:
e8:5e:99:a1:ad:df:af:ad:13:ff:d1:8c:b3:08:45:
2e:c5:30:29:86:70:c7:51:ed:56:5e:cc:b4:07:b2:
b1:da:ac:f2:a6:42:a7:3f:12:8d:ca:5e:3e:a7:73:
73:20:8b:81:69:19:56:9b:43:3d:26:ed:6d:60:5a:
7e:f0:42:79:f9:18:83:a6:50:26:4a:40:18:ea:ff:
1b:25:29:f5:9a:82:30:13:a4:ec:35:3b:5b:01:cb:
34:46:27:2c:b4:c6:ec:69:33:b0:48:d7:2d:d5:c2:
2f:8c:81:b5:4c:ad:8a:d7:72:41:47:f4:5c:d2:9b:
31:c8:d1:a3:ab:4b:6f:d4:c7:11:33:61:6d:48:0e:
12:65:49:17:1d:a3:a9:6c:54:3b:77:77:27:70:0c:
53:70:b8:94:82:f2:98:a6:f2:9c:16:9a:ba:4e:7b:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:49:48:EC:DA:F6:5F:7D:9B:62:E4:57:EB:99:04:0D:6A:4F:89
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Y71JSOza9l99m2LkV-uZBA1qT4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:12:08:23:71:2b:3c:b0:ac:3b:96:7e:c7:67:28:d3:ef:c1:
aa:a1:21:35:6a:99:00:db:3b:f6:4f:e3:c8:68:0e:ad:69:39:
ca:28:8a:3d:d7:98:90:de:64:bf:c0:c4:3c:4e:38:4f:69:01:
e3:fa:d8:6a:6e:7e:63:f3:05:9a:52:5b:80:52:5b:c5:b2:71:
e5:20:77:bf:32:26:a7:13:0d:36:c4:30:a1:39:e0:86:47:33:
26:74:56:0b:b2:cf:8a:63:2a:73:cb:81:65:dc:fb:f2:e8:7e:
62:51:59:9c:5a:fe:7f:f1:99:c2:cf:61:b4:fe:21:7d:64:2b:
82:b4:d2:d2:b0:3f:bb:8e:85:74:56:34:e7:fd:9a:3d:1e:92:
eb:79:6d:67:ef:e4:83:d9:94:b4:c4:c9:6b:f1:54:21:56:94:
f3:4d:15:9f:37:26:3a:45:4b:0c:49:40:79:48:09:69:71:7b:
b0:20:37:ae:e0:a4:92:71:79:31:63:2c:9e:d7:55:62:d9:82:
bc:28:b7:d7:c7:9a:45:9a:14:19:cc:ce:0b:36:fa:22:53:a2:
a2:1a:c1:47:52:58:1b:02:16:19:ab:8b:d6:57:fe:65:6b:5f:
9f:ba:18:03:87:00:05:3e:21:6f:4c:14:0b:c8:70:d9:8e:68:
b0:93:64:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDM/GGp2ATxZm2P9gSji6K9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwOTIzMDYzODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2JkNDk0OGVjZGFmNjVmN2Q5YjYyZTQ1N2ViOTkwNDBkNmE0Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bh3NlpOQy0sdrYiAbLRQmMoxwy/
0FSMKGY95bkvFLBba+roVFEi9rQRLfC3+Ah3dv8XjUs4dF7Fq2JnUENuHXocMyHG
fisP0399ZmrboT4nOcBEz2omZbjoXpmhrd+vrRP/0YyzCEUuxTAphnDHUe1WXsy0
B7Kx2qzypkKnPxKNyl4+p3NzIIuBaRlWm0M9Ju1tYFp+8EJ5+RiDplAmSkAY6v8b
JSn1moIwE6TsNTtbAcs0RicstMbsaTOwSNct1cIvjIG1TK2K13JBR/Rc0psxyNGj
q0tv1McRM2FtSA4SZUkXHaOpbFQ7d3cncAxTcLiUgvKYpvKcFpq6TntyTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGO9SUjs2vZffZti5FfrmQQNak+JMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvWTcxSlNPemE5bDk5bTJMa1YtdVpCQTFxVDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfWMA0G
CSqGSIb3DQEBCwUAA4IBAQAOEggjcSs8sKw7ln7HZyjT78GqoSE1apkA2zv2T+PI
aA6taTnKKIo915iQ3mS/wMQ8TjhPaQHj+thqbn5j8wWaUluAUlvFsnHlIHe/Mian
Ew02xDChOeCGRzMmdFYLss+KYypzy4Fl3Pvy6H5iUVmcWv5/8ZnCz2G0/iF9ZCuC
tNLSsD+7joV0VjTn/Zo9HpLreW1n7+SD2ZS0xMlr8VQhVpTzTRWfNyY6RUsMSUB5
SAlpcXuwIDeu4KSScXkxYyye11Vi2YK8KLfXx5pFmhQZzM4LNvoiU6KiGsFHUlgb
AhYZq4vWV/5la1+fuhgDhwAFPiFvTBQLyHDZjmiwk2RO
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:24 2026 by rpki-client