Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CCr9VbCaIHlgBdBJwZaWAy-2EC4.roa
File: CCr9VbCaIHlgBdBJwZaWAy-2EC4.roa (raw, json)
Hash identifier: +oGlGSOgUnLSA4VF1z9Wz+8EviU/IRoiV6GFWeiqnQo=
Subject key identifier: 08:2A:FD:55:B0:9A:20:79:60:05:D0:49:C1:96:96:03:2F:B6:10:2E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DBB22B61371EA8E61C99F06E1F8499536
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CCr9VbCaIHlgBdBJwZaWAy-2EC4.roa
Signing time: Thu 23 Apr 2026 16:18:27 +0000
ROA not before: Thu 23 Apr 2026 16:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 212.134.50.0/24 maxlen: 24
212.135.18.0/24 maxlen: 24
212.135.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:22:b6:13:71:ea:8e:61:c9:9f:06:e1:f8:49:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 23 16:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=082afd55b09a20796005d049c19696032fb6102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:46:13:b2:a8:57:5a:f3:a7:c8:29:82:05:
83:e4:a8:ef:e0:ee:65:f7:d4:94:b3:fe:08:1f:83:
06:79:5b:0a:19:5b:f7:45:f9:c2:94:b8:73:7b:60:
fb:90:ae:ac:e1:59:ef:9d:fa:e8:52:d6:c2:32:45:
7e:44:1e:a0:6b:3d:7d:54:e8:c1:a4:9f:b3:8d:3b:
e5:58:84:1c:08:81:dd:79:04:0f:44:21:cb:92:f9:
33:95:9a:49:0b:73:10:6c:ce:8c:89:5d:e7:0d:3d:
ae:88:10:e0:4b:82:2e:8c:7c:75:29:aa:83:ab:bd:
cd:27:90:4a:90:7a:8a:4f:7e:bc:28:c1:a3:2b:04:
69:53:e5:a3:69:39:bf:a1:7c:cf:b4:38:c6:bd:59:
ce:44:68:cc:b0:db:35:e5:b1:41:73:74:9f:ad:c0:
af:79:7d:9e:dd:e0:69:a2:cc:df:30:ff:5a:fe:a6:
ab:12:94:4c:95:4e:ef:a6:9f:c3:3b:48:5b:4b:d3:
63:30:ae:95:85:8d:33:1a:e1:bf:ed:5d:0b:e4:07:
08:5c:17:df:4b:c2:30:db:54:cb:f0:b2:4d:5f:d2:
d4:2f:3b:8e:b9:0c:22:9a:da:36:bb:d6:a3:8d:92:
05:39:ea:8c:ad:aa:5c:f3:43:19:7c:7d:3f:35:eb:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:FD:55:B0:9A:20:79:60:05:D0:49:C1:96:96:03:2F:B6:10:2E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CCr9VbCaIHlgBdBJwZaWAy-2EC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.50.0/24
212.135.18.0/24
212.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:09:9b:10:08:bf:08:9e:04:65:0f:4e:77:92:1e:e5:82:1e:
9a:76:29:5f:17:b8:9e:15:05:75:94:93:5b:97:b3:5d:b7:58:
1e:da:0e:61:31:05:64:f5:0f:7b:52:6f:f9:60:eb:30:a1:c5:
e4:0f:5b:8f:49:5b:e2:0d:15:77:83:45:57:1d:3d:53:46:57:
ef:5f:3c:71:99:02:3c:cc:87:2e:0b:54:8f:28:fe:2a:65:68:
c1:39:23:67:7d:0e:a6:ae:75:60:18:a7:2b:98:6e:e8:19:d3:
15:56:ca:01:aa:39:32:48:cb:6a:85:b0:44:07:24:c9:23:26:
c0:91:d0:ed:52:0a:2a:60:b1:1a:cf:af:55:1a:92:fd:9c:b2:
50:e1:b3:e4:f3:c6:f5:32:2b:ea:98:6a:bf:9f:b7:75:a4:ce:
b6:5a:a6:ca:97:cf:9d:21:b7:65:15:6d:31:d0:cc:8c:b7:aa:
c8:0c:a9:a2:54:7d:55:8b:7c:7c:6b:8d:c4:10:1d:b7:d5:f9:
86:76:54:08:0f:3e:05:48:43:6e:5d:4d:4b:f8:17:99:e7:7d:
e2:21:6f:9f:66:e5:c0:cf:9f:76:16:e7:f9:16:76:32:d0:ad:
42:e8:42:7b:0b:80:2f:48:a6:3a:f0:55:14:48:14:b1:d8:2c:
8e:4e:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 07:55:09 2026 by rpki-client