Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M75q1dS8r0GKPLPqrc6GrtzQpS0.roa
File: M75q1dS8r0GKPLPqrc6GrtzQpS0.roa (raw, json)
Hash identifier: cwEZ4UHaxIxt5bhcvuIDKMT/t+Xm/zJjL0BEhK3B3sk=
Subject key identifier: 33:BE:6A:D5:D4:BC:AF:41:8A:3C:B3:EA:AD:CE:86:AE:DC:D0:A5:2D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E0184885C9327CA16782AC9273BCAB317
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M75q1dS8r0GKPLPqrc6GrtzQpS0.roa
Signing time: Thu 07 May 2026 08:18:43 +0000
ROA not before: Thu 07 May 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46370
IP address blocks: 212.134.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:84:88:5c:93:27:ca:16:78:2a:c9:27:3b:ca:b3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 7 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33be6ad5d4bcaf418a3cb3eaadce86aedcd0a52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:8f:83:7e:7e:4f:6f:87:da:8f:a4:3d:16:
c4:16:e5:97:bc:32:65:2e:14:8a:b2:b2:15:8c:a9:
c3:2d:cf:31:ac:9c:b7:af:ca:c1:6e:bf:51:6b:ad:
d7:5b:f7:e8:e2:e9:32:92:e5:db:df:17:6e:62:f9:
60:1b:65:b0:a8:27:f2:06:ac:54:0b:a0:c6:f1:df:
6d:94:6c:17:f9:ce:df:ae:ad:f9:1c:20:16:a6:e4:
2c:43:5d:97:2b:d4:99:4c:b0:eb:53:e8:56:cc:dc:
9a:b7:bf:f4:75:a0:40:b5:6c:8c:fd:f4:c1:4f:76:
8f:aa:80:f5:73:32:79:a2:03:76:a6:1b:f5:3d:56:
dd:41:cb:f4:74:2d:78:e1:32:f8:ff:2e:d7:2e:5f:
c6:51:24:a4:9c:b2:1e:a7:9a:db:34:3f:f3:a5:98:
78:23:15:8c:22:95:ec:c1:e6:23:c3:81:63:50:db:
d9:15:12:85:73:ca:2b:e1:5b:04:56:6c:8a:dc:24:
23:d0:21:75:9e:55:f8:75:cc:23:99:62:dc:04:da:
5e:58:7b:3b:21:ed:4a:9b:18:52:c0:13:fa:6d:71:
af:e8:f4:7f:4b:80:33:3c:36:28:a9:b4:db:8b:5c:
0c:aa:7d:53:2e:7b:26:f1:df:5e:20:a8:0b:47:9f:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:6A:D5:D4:BC:AF:41:8A:3C:B3:EA:AD:CE:86:AE:DC:D0:A5:2D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M75q1dS8r0GKPLPqrc6GrtzQpS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.255.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6e:60:fa:66:98:57:35:5e:3d:1b:44:c5:99:1b:b3:54:f1:
c9:63:a1:5f:35:0d:13:b5:d2:21:78:34:98:12:81:26:ad:43:
b8:d7:70:b5:fe:26:16:2d:42:dc:97:26:a4:fa:c5:e7:4c:d9:
4d:1e:a4:27:44:9f:a8:47:54:8a:db:3c:8c:64:6e:92:e5:5d:
93:b5:77:b8:95:e8:e8:04:e1:e7:47:a0:df:b3:2f:37:49:ea:
26:a3:25:24:94:ae:02:ec:8c:5b:2d:26:db:fb:84:dd:72:f7:
4d:d1:0a:ef:fd:cc:1a:7e:88:e7:cd:d5:81:55:cf:40:36:6e:
0c:bd:9f:fd:21:dc:0e:ba:0b:57:4b:4e:e7:7f:e6:c8:ee:40:
82:4d:87:55:16:a8:0b:38:3a:20:46:d1:4b:07:7d:2f:ed:47:
b0:9a:6c:94:07:b2:17:fa:a6:4f:89:cb:54:d2:d3:35:81:c6:
5c:63:c7:8c:df:c8:0b:00:a8:0e:83:e7:50:4b:6a:63:6c:83:
89:48:08:5a:5d:ca:2b:af:b3:2a:ca:64:93:b4:13:d8:69:a4:
d1:be:c9:85:10:fc:ff:10:8a:a2:fa:71:c7:3d:c7:31:25:7a:
09:76:cd:8a:d4:84:76:6a:c4:21:22:a9:2b:1d:4b:5d:31:16:
2a:1b:f1:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4BhIhckyfKFngqySc7yrMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTA3MDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2JlNmFkNWQ0YmNhZjQxOGEzY2IzZWFhZGNlODZhZWRjZDBhNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxuPg35+T2+H2o+kPRbEFuWXvDJl
LhSKsrIVjKnDLc8xrJy3r8rBbr9Ra63XW/fo4ukykuXb3xduYvlgG2WwqCfyBqxU
C6DG8d9tlGwX+c7frq35HCAWpuQsQ12XK9SZTLDrU+hWzNyat7/0daBAtWyM/fTB
T3aPqoD1czJ5ogN2phv1PVbdQcv0dC144TL4/y7XLl/GUSSknLIep5rbND/zpZh4
IxWMIpXsweYjw4FjUNvZFRKFc8or4VsEVmyK3CQj0CF1nlX4dcwjmWLcBNpeWHs7
Ie1KmxhSwBP6bXGv6PR/S4AzPDYoqbTbi1wMqn1TLnsm8d9eIKgLR59vPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDO+atXUvK9Bijyz6q3Ohq7c0KUtMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvTTc1cTFkUzhyMEdLUExQcXJjNkdydHpRcFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Ib/MA0G
CSqGSIb3DQEBCwUAA4IBAQCvbmD6ZphXNV49G0TFmRuzVPHJY6FfNQ0TtdIheDSY
EoEmrUO413C1/iYWLULclyak+sXnTNlNHqQnRJ+oR1SK2zyMZG6S5V2TtXe4lejo
BOHnR6Dfsy83SeomoyUklK4C7IxbLSbb+4TdcvdN0Qrv/cwafojnzdWBVc9ANm4M
vZ/9IdwOugtXS07nf+bI7kCCTYdVFqgLODogRtFLB30v7UewmmyUB7IX+qZPictU
0tM1gcZcY8eM38gLAKgOg+dQS2pjbIOJSAhaXcorr7MqymSTtBPYaaTRvsmFEPz/
EIqi+nHHPccxJXoJds2K1IR2asQhIqkrHUtdMRYqG/HF
-----END CERTIFICATE-----
Generated at Thu May 7 15:30:14 2026 by rpki-client