Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AdOrA75GUlecJ1llO4m88GX8I3c.roa
File: AdOrA75GUlecJ1llO4m88GX8I3c.roa (raw, json)
Hash identifier: JVxJt4+YFKAhiyMbEBRGwx/JC3AzUrPqQyqge3mCMuc=
Subject key identifier: 01:D3:AB:03:BE:46:52:57:9C:27:59:65:3B:89:BC:F0:65:FC:23:77
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A9321B2086CA89B4066E52966FFB5AC5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AdOrA75GUlecJ1llO4m88GX8I3c.roa
Signing time: Wed 16 Sep 2026 07:50:28 +0000
ROA not before: Wed 16 Sep 2026 07:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275025
IP address blocks: 212.134.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:32:1b:20:86:ca:89:b4:06:6e:52:96:6f:fb:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 16 07:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01d3ab03be4652579c2759653b89bcf065fc2377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:0a:32:ea:33:89:ce:62:a9:40:53:47:b9:
f3:9c:d5:3d:f4:47:b5:04:2e:b5:b2:47:cb:af:6b:
eb:57:f9:05:df:21:e7:a6:cb:6f:41:32:2e:fb:32:
3e:d1:06:e6:79:a1:71:d6:30:48:1d:0a:09:5b:59:
52:2e:6c:bb:45:30:de:00:df:57:14:03:f5:68:35:
2d:09:11:f6:ba:6d:39:45:15:42:0f:b3:50:54:0e:
8f:7c:44:3e:ef:48:c9:19:00:3c:92:02:66:ba:28:
a7:f6:f9:8d:3f:8d:15:cf:ea:23:ac:57:b9:6b:99:
a3:4c:88:cd:d4:69:52:b4:89:11:7a:3c:ed:fe:b7:
8a:95:e2:c5:78:4b:e4:f2:cc:3a:6b:82:45:65:b8:
e9:90:4d:d1:d2:b7:ca:2f:35:1d:9f:bb:bb:b6:d8:
e6:14:95:f2:d6:b5:48:65:9b:b7:9c:a1:52:d8:49:
37:90:21:88:e0:88:64:f6:ce:da:cf:02:84:e5:9a:
f9:68:7c:1e:ef:bf:c8:4a:65:dc:74:23:34:9b:43:
f9:63:94:0f:ee:26:45:ec:56:35:24:4f:91:67:3f:
af:8d:2a:12:11:47:44:b5:47:26:1d:1c:72:25:cb:
8a:a7:b8:6d:16:97:bd:b5:44:75:68:0b:db:91:ca:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:AB:03:BE:46:52:57:9C:27:59:65:3B:89:BC:F0:65:FC:23:77
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AdOrA75GUlecJ1llO4m88GX8I3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fc:c4:3e:2e:0a:38:ee:90:04:35:78:f3:c2:ae:e4:59:c4:
9b:a5:e0:94:d9:67:9a:22:1c:b8:21:13:37:10:e2:56:f6:cf:
80:0d:80:b0:bc:c7:a7:8b:86:b0:3c:cd:e4:13:53:38:e7:23:
89:17:f7:d9:98:72:30:c4:96:8e:5f:3f:bf:db:ae:d5:48:3f:
04:32:c2:05:62:ef:4c:52:10:02:3c:26:21:91:5c:5d:82:84:
04:56:f9:12:0c:a4:4c:46:fb:ee:15:94:20:70:32:ca:69:38:
f9:13:ee:bb:17:3c:37:50:5c:a8:33:96:77:58:1a:71:10:0c:
9c:fc:bb:54:31:d3:6b:36:4b:ad:32:60:bc:4d:2d:d2:b3:80:
c3:6f:40:e1:97:bd:d6:53:14:f7:5b:e9:1d:ce:b9:6a:7d:a1:
5b:59:51:09:03:c2:f9:cc:6e:76:2c:85:5d:c4:24:c5:e8:7c:
7a:b6:9e:92:3c:07:1d:47:4c:cf:81:69:a8:c0:09:3b:96:9b:
3a:8a:ce:62:c9:f1:36:96:c0:17:43:4f:58:85:79:61:80:22:
d8:4a:de:b8:e3:be:cd:73:31:20:36:a2:1a:93:38:ac:f8:76:
03:75:a9:81:cb:96:56:c8:a7:2b:23:95:b9:0d:3d:92:e7:34:
4d:26:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:56:10 2026 by rpki-client