Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8vY3kbnSv6cKpwUSN0NU5lrQ4LA.roa
File: 8vY3kbnSv6cKpwUSN0NU5lrQ4LA.roa (raw, json)
Hash identifier: NN8P8eN7tarIBiBqdwI9Q2rGiggSbKxmDMx2JddbWtU=
Subject key identifier: F2:F6:37:91:B9:D2:BF:A7:0A:A7:05:12:37:43:54:E6:5A:D0:E0:B0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D9FE24C48B35E60BDDDD5ABF7860497B2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8vY3kbnSv6cKpwUSN0NU5lrQ4LA.roa
Signing time: Sat 18 Apr 2026 09:18:21 +0000
ROA not before: Sat 18 Apr 2026 09:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 212.134.16.0/24 maxlen: 24
212.134.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 14:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:e2:4c:48:b3:5e:60:bd:dd:d5:ab:f7:86:04:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 18 09:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f63791b9d2bfa70aa70512374354e65ad0e0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:b5:86:04:3b:a0:44:58:a2:91:34:89:07:
ac:58:93:57:ee:14:3e:90:2b:3e:d5:5d:54:63:4a:
77:4b:32:98:1d:5f:b9:28:c7:81:0b:f6:d4:45:cb:
a9:4f:fd:73:ce:8b:0f:0f:b2:16:de:74:e2:66:c8:
1e:bc:f1:79:6a:d2:4e:0d:b9:1b:b6:29:02:34:eb:
d4:bb:5e:04:8c:23:82:d8:aa:06:f9:ac:ee:d5:df:
82:6c:92:e4:e7:3d:82:96:be:b0:6d:f9:12:b1:84:
ca:0f:25:82:32:33:0c:e1:b9:81:02:a1:1c:38:a1:
e6:f9:46:d8:ad:4f:85:8e:0c:ab:1c:b4:ef:3e:aa:
68:36:35:1b:5f:7e:36:ca:ee:ad:69:f6:7e:0b:98:
ef:9f:13:8f:02:ed:b9:73:f1:47:50:32:24:86:9c:
39:06:79:b5:6f:5d:72:ab:8f:84:50:c2:61:36:7b:
0b:0d:e2:d6:7f:d8:89:6d:a8:00:ed:fe:41:57:24:
70:5e:40:ed:73:2d:ea:6e:16:3b:bf:33:ee:0a:19:
52:30:63:f4:22:69:d0:92:1e:b1:1b:4b:67:c7:cf:
e1:bd:5d:4c:aa:9d:a2:ec:7a:88:0d:1f:99:be:c8:
25:b4:96:f7:14:49:3c:9c:46:6e:01:cd:24:38:0e:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F6:37:91:B9:D2:BF:A7:0A:A7:05:12:37:43:54:E6:5A:D0:E0:B0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8vY3kbnSv6cKpwUSN0NU5lrQ4LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.16.0/24
212.134.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5d:1c:15:ab:b5:3a:5c:9e:54:18:57:f2:25:19:e2:1d:f8:
66:73:a0:87:4d:d4:84:a6:53:e8:d0:28:98:69:f6:a1:97:60:
c6:aa:7a:fb:07:bf:7c:03:4e:9a:81:8d:4d:4b:2e:10:a9:5e:
5e:61:aa:da:de:0d:29:69:13:57:a6:6d:f2:14:94:35:96:59:
0c:7d:30:d2:85:ad:ee:6e:5f:00:56:8b:65:c5:37:03:f8:4d:
ed:7c:24:20:6d:74:84:fb:15:d7:5f:3b:bb:64:5a:a8:79:31:
a5:ae:0c:11:ab:1e:73:e1:bd:0c:e3:0a:ed:e1:81:f9:73:df:
8c:27:a0:d3:70:f6:39:0b:80:ad:55:a4:4e:05:b6:5d:a7:92:
67:80:9c:ea:17:f3:3c:6d:be:dc:e4:8a:13:b1:9f:38:c6:44:
47:dc:ec:8e:22:1f:4d:0c:0e:c1:18:48:f1:b6:43:0a:25:6f:
3a:df:91:0c:a3:a7:2f:b4:1d:e5:3c:bf:d8:24:21:06:fd:16:
ee:60:18:87:86:35:52:03:88:51:52:14:e2:3c:dc:98:0c:39:
67:23:88:60:b1:7a:b4:6b:be:22:26:b8:6d:de:88:64:d5:d2:
da:6d:f5:86:25:20:d7:e0:d3:e2:68:dd:1b:76:7f:4b:c0:4d:
35:e1:15:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2f4kxIs15gvd3Vq/eGBJeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNDE4MDkxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY2Mzc5MWI5ZDJiZmE3MGFhNzA1MTIzNzQzNTRlNjVhZDBlMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZG1hgQ7oERYopE0iQesWJNX7hQ+
kCs+1V1UY0p3SzKYHV+5KMeBC/bURcupT/1zzosPD7IW3nTiZsgevPF5atJODbkb
tikCNOvUu14EjCOC2KoG+azu1d+CbJLk5z2Clr6wbfkSsYTKDyWCMjMM4bmBAqEc
OKHm+UbYrU+FjgyrHLTvPqpoNjUbX342yu6tafZ+C5jvnxOPAu25c/FHUDIkhpw5
Bnm1b11yq4+EUMJhNnsLDeLWf9iJbagA7f5BVyRwXkDtcy3qbhY7vzPuChlSMGP0
ImnQkh6xG0tnx8/hvV1Mqp2i7HqIDR+ZvsgltJb3FEk8nEZuAc0kOA4ciQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPL2N5G50r+nCqcFEjdDVOZa0OCwMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvOHZZM2tiblN2NmNLcHdVU04wTlU1bHJRNExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IYQAwQA
1IaGMA0GCSqGSIb3DQEBCwUAA4IBAQBNXRwVq7U6XJ5UGFfyJRniHfhmc6CHTdSE
plPo0CiYafahl2DGqnr7B798A06agY1NSy4QqV5eYara3g0paRNXpm3yFJQ1llkM
fTDSha3ubl8AVotlxTcD+E3tfCQgbXSE+xXXXzu7ZFqoeTGlrgwRqx5z4b0M4wrt
4YH5c9+MJ6DTcPY5C4CtVaROBbZdp5JngJzqF/M8bb7c5IoTsZ84xkRH3OyOIh9N
DA7BGEjxtkMKJW8635EMo6cvtB3lPL/YJCEG/RbuYBiHhjVSA4hRUhTiPNyYDDln
I4hgsXq0a74iJrht3ohk1dLabfWGJSDX4NPiaN0bdn9LwE014RUb
-----END CERTIFICATE-----
Generated at Mon Apr 20 00:26:51 2026 by rpki-client