Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M8C86IzWuL8nvh1RXjNBNukzwMs.roa
File: M8C86IzWuL8nvh1RXjNBNukzwMs.roa (raw, json)
Hash identifier: AlyVb93GuXT4UPhlNeDJJHXokhtxvuMEDebh415nk28=
Subject key identifier: 33:C0:BC:E8:8C:D6:B8:BF:27:BE:1D:51:5E:33:41:36:E9:33:C0:CB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F79748F076E193819A74DA51B6BF81526
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M8C86IzWuL8nvh1RXjNBNukzwMs.roa
Signing time: Sun 19 Jul 2026 08:18:29 +0000
ROA not before: Sun 19 Jul 2026 08:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 212.134.252.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:74:8f:07:6e:19:38:19:a7:4d:a5:1b:6b:f8:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33c0bce88cd6b8bf27be1d515e334136e933c0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:9c:e0:bb:d1:9e:0e:ac:df:f4:8a:00:c2:
68:3e:ef:e6:46:5e:a9:0e:34:4f:00:0f:33:dc:4e:
ff:61:0f:30:17:1d:d9:6a:ed:8c:8b:21:3f:30:87:
46:2e:d4:7a:9d:22:2b:8e:7c:b0:fc:ae:a0:eb:b8:
cb:b6:a7:33:c5:3a:2d:3e:f7:6f:fc:18:3b:60:9f:
05:8f:80:3d:d5:dd:42:72:39:d4:7b:66:ec:32:9d:
1b:ed:d4:2e:53:97:16:be:22:2c:5d:38:cc:f4:e4:
35:5e:cd:07:72:65:ca:01:d4:54:7c:30:83:6d:e7:
c9:bb:f1:5b:0d:55:08:9c:e5:2b:c7:31:34:5f:1b:
db:a4:14:df:2a:1f:64:b3:13:79:58:11:44:6e:f0:
9c:45:7f:05:b7:be:df:61:a9:a7:f7:97:35:cd:14:
a5:5c:dd:36:1d:6c:4b:38:fd:23:9d:26:1e:50:1c:
62:8f:b9:a6:05:3f:18:5f:52:f4:64:24:83:71:a7:
a1:97:64:be:ce:09:8d:5a:8d:e6:9e:b1:f1:e2:4a:
28:b3:bc:86:78:4a:52:cd:21:2c:9a:de:9b:8d:a1:
3d:af:b4:16:8a:a5:b2:e2:d6:d3:bc:50:66:cd:4c:
e0:be:b6:4d:7f:cb:6d:6c:89:c0:bd:f4:f8:ef:c3:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:BC:E8:8C:D6:B8:BF:27:BE:1D:51:5E:33:41:36:E9:33:C0:CB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M8C86IzWuL8nvh1RXjNBNukzwMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.252.0/24
212.135.143.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ea:af:ca:fb:7c:1a:cc:cc:14:b6:f0:91:d6:f4:dd:d1:20:
53:6d:e2:8c:4c:93:c4:9d:2a:f8:f4:6f:24:73:23:93:8c:7f:
46:28:33:f6:1f:26:95:0f:d2:a1:a0:ca:8b:c0:ff:ab:92:68:
4f:6a:a8:ba:01:ce:f0:04:59:2f:af:1e:b0:12:a1:ae:96:09:
22:62:5e:73:68:7a:2d:cf:78:8e:0a:33:dc:96:d9:69:e9:60:
45:c7:29:bd:ed:58:74:7f:f1:51:3a:0f:79:30:75:c5:fa:c8:
82:f2:d1:b3:e8:40:a3:dc:7e:68:82:45:d3:fe:85:f2:2a:7f:
8c:63:f5:1e:69:ff:b9:39:5b:cf:4c:55:ae:dc:ce:66:ff:74:
55:cd:cd:9a:f9:be:39:d6:57:71:d4:19:e5:49:aa:66:0a:ed:
4d:3d:26:ef:54:ca:07:81:99:26:3a:2a:8c:63:42:5f:f2:02:
57:70:fd:3d:5d:2f:a2:7f:f8:7b:08:2b:67:06:53:96:89:d5:
aa:38:32:77:e7:73:48:a4:dc:32:fd:17:30:4f:36:f7:20:38:
af:66:20:fc:11:32:69:a0:a5:e3:e5:89:ef:53:eb:0f:41:20:
77:8a:11:d0:4d:ab:c8:35:23:cb:5d:87:64:fb:9a:e2:70:c8:
e1:85:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client