Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ExL7cWSzqsOLocxfsp1eT3PE1Ak.roa
File: ExL7cWSzqsOLocxfsp1eT3PE1Ak.roa (raw, json)
Hash identifier: zcKctBn6zaGeH2uvry/ICok/it8p0SUp7626Zz0bjAs=
Subject key identifier: 13:12:FB:71:64:B3:AA:C3:8B:A1:CC:5F:B2:9D:5E:4F:73:C4:D4:09
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EEE7D61E25A442F9F9ECB4CEE200895D1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ExL7cWSzqsOLocxfsp1eT3PE1Ak.roa
Signing time: Mon 22 Jun 2026 08:40:54 +0000
ROA not before: Mon 22 Jun 2026 08:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133639
IP address blocks: 212.212.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 21:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:7d:61:e2:5a:44:2f:9f:9e:cb:4c:ee:20:08:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 22 08:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1312fb7164b3aac38ba1cc5fb29d5e4f73c4d409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:09:19:f4:b3:e5:f0:d7:a5:96:7f:4e:ec:
53:8a:32:78:ae:0d:8f:73:cc:95:83:98:e2:ee:8e:
30:cd:a5:8e:5d:8c:76:5d:8c:10:aa:3d:dc:f6:bf:
47:94:82:05:a6:c4:b5:de:21:d2:1c:5d:d1:0b:a7:
68:f3:11:2c:5d:94:48:1c:ba:ba:32:22:c3:fb:ee:
39:03:33:38:7e:c0:91:f7:ed:64:8b:a2:c2:e6:4d:
d9:79:b7:c2:8d:17:03:29:b5:5a:eb:08:65:95:f8:
95:62:8b:25:48:1e:36:76:b6:29:20:f6:0c:dd:db:
93:e2:93:1d:64:74:3d:b2:cc:cf:f9:40:b2:3b:cc:
50:8e:bb:26:b6:36:74:f5:7c:65:21:9e:bf:db:9b:
42:d6:c3:8c:4b:c7:1d:71:7e:e3:0b:3f:76:4d:f2:
5d:9e:2d:35:07:11:6f:7d:20:8b:88:60:90:03:58:
8c:91:50:c5:4d:25:20:8f:2f:5a:60:6f:3a:1f:8d:
36:08:19:be:ef:1b:91:ba:06:f5:08:dc:3a:be:9b:
7d:23:5b:e2:2b:c2:b2:05:f7:79:88:98:e7:c7:ec:
30:ea:85:87:3c:92:b1:59:db:ca:42:80:9b:07:93:
66:d6:b2:5e:90:ad:38:62:f8:96:92:c7:9e:82:53:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:FB:71:64:B3:AA:C3:8B:A1:CC:5F:B2:9D:5E:4F:73:C4:D4:09
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ExL7cWSzqsOLocxfsp1eT3PE1Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f6:54:4c:f3:f8:c5:6f:9d:95:36:50:b3:26:03:29:da:44:
a4:cb:3c:5c:c2:2d:01:5f:58:e0:d8:78:ce:54:7e:9d:bb:58:
8b:03:bf:7d:13:db:b9:80:34:67:e6:67:c6:d7:43:34:93:8b:
d1:57:8d:c0:01:da:61:bd:15:33:9e:cb:70:bd:29:f1:72:b7:
6b:e2:cc:99:55:1e:ba:b4:e7:09:84:16:35:49:99:51:11:9d:
7c:88:fe:13:ec:b8:10:16:16:be:8a:f9:a6:61:85:70:32:42:
bc:9e:19:68:b0:4d:20:1f:a1:58:8c:1f:99:a0:01:d3:c2:4a:
e4:42:95:8f:ff:19:3a:1c:ea:45:4c:03:4d:66:93:18:e3:b0:
f9:a0:61:05:d3:34:f7:ec:72:86:c9:72:9f:2e:a2:26:9b:6d:
1e:aa:1a:07:b5:67:b9:2b:67:3c:7b:65:45:6b:ef:76:7a:db:
f0:78:51:80:a6:3c:fa:5f:d7:0a:66:0a:ff:d6:9a:21:4b:4d:
2e:24:f6:46:37:f7:a7:82:ea:00:1d:cb:17:38:df:99:ae:cb:
bd:3b:93:8e:24:c6:40:cb:03:46:c3:b0:7c:ef:38:fa:00:99:
ad:4e:5c:69:be:bf:94:5b:f2:0e:1d:61:41:8a:a7:c3:af:72:
cd:2c:f3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:45:36 2026 by rpki-client