Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7rbItg95By-hX1RfT47dvvbiM_c.roa
File: 7rbItg95By-hX1RfT47dvvbiM_c.roa (raw, json)
Hash identifier: NtVvhCaiPtMg2nZff79Jruj+fyGlBBk4NboMAcfMudA=
Subject key identifier: EE:B6:C8:B6:0F:79:07:2F:A1:5F:54:5F:4F:8E:DD:BE:F6:E2:33:F7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E3A3D9F3856CADB5DBC0B25874481E3D4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7rbItg95By-hX1RfT47dvvbiM_c.roa
Signing time: Mon 18 May 2026 08:39:37 +0000
ROA not before: Mon 18 May 2026 08:39:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 212.134.134.0/23 maxlen: 24
212.134.144.0/22 maxlen: 22
212.134.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:3d:9f:38:56:ca:db:5d:bc:0b:25:87:44:81:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 18 08:39:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb6c8b60f79072fa15f545f4f8eddbef6e233f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8f:c5:dd:71:d0:3b:27:d5:7d:83:86:fd:0a:
5f:20:79:43:cf:ee:ab:43:6e:04:50:1f:4d:40:2c:
c4:f7:e3:49:a2:0a:05:31:c4:5b:fe:9f:71:95:bf:
00:cf:bd:b3:22:4c:0b:65:fb:c9:30:92:69:49:02:
2b:b4:86:6f:f5:47:b1:01:7b:23:23:4f:6f:fe:88:
81:18:42:bb:8d:58:80:cc:31:a9:17:fc:3b:3f:e4:
e2:9c:8e:9d:d2:fa:50:6d:b7:3d:af:5f:fe:6b:7f:
c2:0d:4a:f9:35:ab:4f:5c:d9:e6:da:6b:bf:63:d7:
6d:f6:f2:f1:8d:b6:fa:55:35:80:06:c8:2c:e8:c7:
e6:34:51:34:81:bd:98:95:12:39:0e:9c:a0:5e:77:
3f:be:ab:e2:71:1c:9c:1c:fe:9b:21:50:3e:20:06:
4f:d6:81:65:b5:8d:f1:47:e4:54:a6:4c:dd:32:a2:
6a:e1:d3:16:9d:82:3f:4b:a9:c9:86:0d:f0:6e:f4:
31:bf:77:ae:b8:9c:91:da:df:ee:01:03:27:10:29:
24:fa:bf:4b:49:3f:e5:67:ee:cc:54:36:fd:1e:1f:
ab:6e:7a:59:84:e1:fd:7d:53:81:b7:44:7e:48:ff:
00:ff:54:bf:60:c7:0c:7d:f7:11:4c:88:d6:19:63:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:C8:B6:0F:79:07:2F:A1:5F:54:5F:4F:8E:DD:BE:F6:E2:33:F7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7rbItg95By-hX1RfT47dvvbiM_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.134.0/23
212.134.144.0/22
212.134.180.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:57:3a:59:4e:49:7d:b9:77:b3:b6:e8:a1:da:bd:8e:b2:ce:
91:77:1e:9b:f6:fd:98:c9:b1:3f:2a:f7:8a:bf:56:b6:96:29:
b7:8b:c6:e5:15:de:54:32:51:36:00:85:21:17:3c:b2:8f:b5:
eb:7c:7b:a2:e1:dd:75:35:41:b3:9a:a8:69:74:93:47:56:33:
cd:ff:a3:c1:d8:5c:8c:3f:83:4e:88:f8:2c:77:9a:e2:f2:fa:
1f:52:d8:5c:7b:c6:22:a2:bb:4f:72:ba:0a:b6:3c:01:e5:d5:
a3:34:a7:86:e5:a5:20:19:1b:0c:7c:11:e4:b9:ba:44:df:ab:
cc:79:0e:6c:90:97:3a:23:c6:f4:c6:87:e9:90:e7:e4:5a:7c:
14:f1:81:9f:3f:b7:34:70:a9:3b:98:42:56:ea:6d:b0:f4:2d:
f7:14:e5:31:87:c7:40:c9:48:bd:7d:ce:10:e4:af:91:04:ea:
51:4b:00:70:32:49:d1:52:b5:35:69:a2:59:aa:88:c1:a7:56:
b8:62:3e:b0:cc:36:51:ea:19:d2:ce:e0:ac:80:cb:69:ea:42:
39:0b:1c:c9:f6:4c:dc:9d:d9:02:91:91:6f:58:14:97:5c:aa:
0c:99:9f:a2:d6:11:fe:b0:79:a2:1b:54:64:0b:78:5a:15:e5:
3e:b5:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:44 2026 by rpki-client