Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9I8826o8oHSZdOvnQsmn5_iZms8.roa
File: 9I8826o8oHSZdOvnQsmn5_iZms8.roa (raw, json)
Hash identifier: latDk+65cIwlQLGgSUPiW5+Bl9Staytns9OSAZ5EeoU=
Subject key identifier: F4:8F:3C:DB:AA:3C:A0:74:99:74:EB:E7:42:C9:A7:E7:F8:99:9A:CF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DE0C7E43462DF3A65778E69FCE7D89B5D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9I8826o8oHSZdOvnQsmn5_iZms8.roa
Signing time: Thu 30 Apr 2026 23:44:49 +0000
ROA not before: Thu 30 Apr 2026 23:44:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 212.134.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 14:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e0:c7:e4:34:62:df:3a:65:77:8e:69:fc:e7:d8:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 30 23:44:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f48f3cdbaa3ca0749974ebe742c9a7e7f8999acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:0c:f1:81:ac:d4:89:07:7c:a2:55:7e:58:
1b:17:6a:7d:58:19:c9:cc:67:49:3d:c5:5d:3a:e3:
75:d8:ac:92:52:36:ea:55:69:d8:a7:a7:ad:13:f2:
d1:44:e5:bb:94:2a:23:9a:47:77:29:02:65:e1:ad:
b5:93:c2:dd:02:9b:32:65:a5:1b:fa:8e:31:37:0a:
da:b8:5f:e7:f4:54:e0:ad:b1:d7:f8:cb:ee:ba:02:
89:97:0d:a9:5d:f7:01:2a:a2:3b:b7:51:f0:6e:06:
46:8e:77:7a:2f:8a:81:07:47:64:f0:25:cf:49:6b:
2d:cc:83:26:04:bc:36:d0:a1:68:68:bf:9c:91:d9:
53:b7:1c:16:61:68:74:77:34:2f:c5:2f:f9:b8:fb:
06:32:01:55:8d:9b:cb:17:6b:26:c6:18:61:f1:df:
12:37:d0:3d:65:c2:3a:d8:36:46:7e:23:63:ba:6d:
ef:3d:30:e3:8d:99:ef:e5:a7:13:a1:8d:18:a7:cd:
5d:7e:46:7a:f9:ef:2a:2f:00:17:d2:4c:2e:59:ed:
57:67:92:3d:fc:a9:da:5c:5f:19:0e:0f:3c:15:6e:
e5:5a:fb:7a:a4:1f:1e:96:a6:a7:a0:e3:54:ad:02:
8b:b3:ee:12:b9:71:c8:aa:5f:e9:f7:19:49:83:19:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:3C:DB:AA:3C:A0:74:99:74:EB:E7:42:C9:A7:E7:F8:99:9A:CF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9I8826o8oHSZdOvnQsmn5_iZms8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.128.0/23
Signature Algorithm: sha256WithRSAEncryption
19:00:c2:db:07:95:96:44:61:bc:38:38:56:20:9f:d7:20:71:
88:57:6d:20:b8:0e:09:d3:d2:e1:76:f6:34:ee:1a:16:b6:7a:
34:da:8f:e7:4c:a0:fd:30:a2:53:c1:ff:50:f6:ae:9e:fe:66:
e8:80:e4:91:35:91:2e:b6:c6:69:dc:72:f4:8a:78:d1:97:e4:
4c:c1:53:a9:5f:06:a7:1e:57:1d:7d:ba:b3:fd:52:2e:3f:b2:
0c:a3:67:e4:65:1f:f2:61:13:a7:84:dd:f5:a5:4f:31:a7:54:
0e:19:cb:c6:5d:1f:fc:b6:95:85:d9:68:13:d3:81:c2:dd:bb:
ff:82:3c:10:4d:95:0e:45:ec:f7:3d:35:35:cf:51:df:80:3c:
d6:04:ae:9b:9d:6e:ee:99:97:5b:c2:ca:f0:77:5a:4a:74:ec:
fb:1b:c9:a8:12:3b:af:25:46:47:44:8e:4b:b6:77:9d:19:62:
0f:40:3e:31:f6:22:cb:34:14:15:63:b9:82:69:9d:79:c7:ff:
70:2a:ac:69:36:c7:18:99:5e:d4:84:b5:47:7b:4f:dc:aa:5e:
29:ef:07:ff:55:2c:90:fe:0a:e0:99:ee:3d:16:b5:60:08:3c:
eb:a7:73:fb:7f:e7:03:9f:ac:ab:40:9a:99:a4:92:90:e9:a8:
f6:53:ef:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3gx+Q0Yt86ZXeOafzn2JtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNDMwMjM0NDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDhmM2NkYmFhM2NhMDc0OTk3NGViZTc0MmM5YTdlN2Y4OTk5YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouwM8YGs1IkHfKJVflgbF2p9WBnJ
zGdJPcVdOuN12KySUjbqVWnYp6etE/LRROW7lCojmkd3KQJl4a21k8LdApsyZaUb
+o4xNwrauF/n9FTgrbHX+MvuugKJlw2pXfcBKqI7t1HwbgZGjnd6L4qBB0dk8CXP
SWstzIMmBLw20KFoaL+ckdlTtxwWYWh0dzQvxS/5uPsGMgFVjZvLF2smxhhh8d8S
N9A9ZcI62DZGfiNjum3vPTDjjZnv5acToY0Yp81dfkZ6+e8qLwAX0kwuWe1XZ5I9
/KnaXF8ZDg88FW7lWvt6pB8elqanoONUrQKLs+4SuXHIql/p9xlJgxmDawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSPPNuqPKB0mXTr50LJp+f4mZrPMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvOUk4ODI2bzhvSFNaZE92blFzbW41X2labXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1IaAMA0G
CSqGSIb3DQEBCwUAA4IBAQAZAMLbB5WWRGG8ODhWIJ/XIHGIV20guA4J09LhdvY0
7hoWtno02o/nTKD9MKJTwf9Q9q6e/mbogOSRNZEutsZp3HL0injRl+RMwVOpXwan
Hlcdfbqz/VIuP7IMo2fkZR/yYROnhN31pU8xp1QOGcvGXR/8tpWF2WgT04HC3bv/
gjwQTZUORez3PTU1z1HfgDzWBK6bnW7umZdbwsrwd1pKdOz7G8moEjuvJUZHRI5L
tnedGWIPQD4x9iLLNBQVY7mCaZ15x/9wKqxpNscYmV7UhLVHe0/cql4p7wf/VSyQ
/grgme49FrVgCDzrp3P7f+cDn6yrQJqZpJKQ6aj2U++l
-----END CERTIFICATE-----
Generated at Fri May 8 19:13:11 2026 by rpki-client