Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_g84F3B1ZdIV20FUKIx7NgRGt70.roa
File: _g84F3B1ZdIV20FUKIx7NgRGt70.roa (raw, json)
Hash identifier: R1qP71T4hTsTVe8tIasQhjoiO76pLmTw2bYws+gu5eE=
Subject key identifier: FE:0F:38:17:70:75:65:D2:15:DB:41:54:28:8C:7B:36:04:46:B7:BD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0F8C9A7D6041F0C4E1C777D32B7958D63
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_g84F3B1ZdIV20FUKIx7NgRGt70.roa
Signing time: Thu 01 Oct 2026 18:46:00 +0000
ROA not before: Thu 01 Oct 2026 18:46:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 212.134.102.0/24 maxlen: 24
212.134.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:c9:a7:d6:04:1f:0c:4e:1c:77:7d:32:b7:95:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 1 18:46:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe0f3817707565d215db4154288c7b360446b7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:ad:54:0a:b6:89:a3:dc:e8:1a:30:d1:fc:
5b:a1:20:91:33:02:6c:e4:7e:a8:5b:ab:85:4d:41:
2f:09:6d:5a:be:d7:b0:4a:3a:6b:35:04:6c:49:db:
ba:ec:71:d2:bd:55:11:4c:1b:35:24:a4:0d:76:25:
b2:81:87:71:6f:b0:8d:ed:1a:7d:e9:d6:1c:c0:8a:
35:d7:a6:fb:48:be:ea:90:ca:20:8e:22:dd:d3:17:
bb:db:32:5a:7e:02:d5:f5:94:a3:e6:6e:be:74:88:
8e:99:8d:ee:a9:ca:94:07:ab:ad:22:70:4e:eb:1c:
29:4c:24:7e:64:0e:a6:72:e3:99:78:40:64:6f:f7:
62:da:51:3a:09:0b:6d:f5:2c:1e:52:6c:df:39:66:
3a:0f:a9:11:6e:4b:06:42:ea:9b:87:60:49:2f:52:
5d:eb:e6:f2:0d:49:07:96:19:69:4f:de:a2:a2:77:
17:4d:e1:81:f1:c8:a2:b2:e2:a9:2e:07:f9:b9:a9:
71:df:dd:90:73:3e:93:85:bd:0e:de:88:92:f1:e8:
40:23:e2:79:06:cc:bc:e7:bc:a5:34:d8:8c:31:59:
62:69:28:97:a9:ec:fa:61:fd:09:7e:d7:31:36:41:
2d:38:0f:ec:c0:1f:de:2f:ed:6d:5e:10:de:13:91:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:38:17:70:75:65:D2:15:DB:41:54:28:8C:7B:36:04:46:B7:BD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_g84F3B1ZdIV20FUKIx7NgRGt70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.102.0/24
212.134.113.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5a:31:04:78:58:64:2a:79:16:a7:48:ce:2a:93:3f:1b:71:
30:52:e9:69:fd:d0:06:07:a1:85:95:0e:c1:02:21:0e:15:45:
0f:6d:9f:d5:66:4f:2a:d1:07:62:9c:c5:8b:56:69:e4:28:86:
0d:95:b7:8f:fd:64:20:10:40:1f:84:e7:ad:17:9a:97:6b:4c:
37:68:22:5e:50:03:a7:3f:f1:0c:f0:7b:58:62:80:be:ae:19:
56:b4:c0:fe:14:52:15:d3:b3:a6:98:fd:1f:37:01:45:60:b3:
44:e3:02:e2:16:3f:2a:e0:71:4d:8a:47:94:a6:5a:c9:ba:a9:
25:a8:33:8b:dd:eb:81:02:b2:cf:89:1c:cb:9f:a8:95:5e:15:
fb:97:56:9f:83:51:26:bb:de:5b:74:07:b1:7f:f8:2c:a0:72:
25:3d:66:02:68:3b:a9:31:42:86:80:f1:ed:44:33:d5:75:98:
5c:0d:f7:3b:c5:71:5d:f3:50:54:bd:49:f4:8d:99:36:b2:de:
36:13:d6:3b:1a:82:78:10:58:d8:4d:9a:d2:b4:a0:ff:3d:79:
40:01:5e:43:10:0b:74:51:92:a8:dd:ea:6c:db:a9:db:93:4d:
43:e7:fe:f0:32:f7:da:b5:21:81:86:66:0e:c6:d9:8e:69:89:
44:1a:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:30:49 2026 by rpki-client