Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NAwnl3RTWaP60YCSOzCF0wGCjAc.roa
File: NAwnl3RTWaP60YCSOzCF0wGCjAc.roa (raw, json)
Hash identifier: aK0ZSiA9GZ+YKSE7xgfpst+PlYHfjltHEVNNmrz0cq8=
Subject key identifier: 34:0C:27:97:74:53:59:A3:FA:D1:80:92:3B:30:85:D3:01:82:8C:07
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06200E6422A31C7E8C3A449D08AE4995B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NAwnl3RTWaP60YCSOzCF0wGCjAc.roa
Signing time: Wed 02 Sep 2026 12:03:41 +0000
ROA not before: Wed 02 Sep 2026 12:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 212.134.105.0/24 maxlen: 24
212.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:00:e6:42:2a:31:c7:e8:c3:a4:49:d0:8a:e4:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 12:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340c2797745359a3fad180923b3085d301828c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:f4:b7:92:cc:b7:8c:90:7d:ed:25:d7:d8:
1d:fe:4f:ad:0a:1e:a8:86:e4:15:fc:3e:3c:37:97:
4f:2e:c9:ad:cd:6e:0e:1a:18:6d:db:93:05:c0:39:
cb:54:f0:b0:a7:93:91:41:39:6c:d8:18:ce:91:47:
05:d3:9d:24:98:a7:09:e5:de:da:af:d9:20:b4:09:
11:b7:b4:f2:a3:9b:bc:05:8a:b7:88:48:ef:7f:5c:
13:2e:43:f8:2d:08:35:31:ed:6e:56:96:04:8b:79:
51:50:af:4b:83:ab:0c:14:39:a8:96:31:20:b1:82:
d6:a5:ed:df:eb:ee:b3:16:b4:e9:23:fb:c4:56:72:
ce:5a:9f:a3:c7:ec:9a:27:ec:a0:33:c5:ee:f9:fe:
17:2e:a0:bb:19:85:52:6e:25:33:3a:9d:c5:0a:d1:
c1:ae:c0:1c:c5:17:0a:56:95:6c:00:af:5f:8c:e6:
20:00:c9:e2:b3:10:27:5d:c1:2b:58:c6:67:f2:a0:
ac:3c:46:20:dc:d0:95:89:30:08:c6:0b:de:ec:26:
06:6c:90:27:1b:d8:7e:0a:22:ed:aa:8a:fe:89:2d:
cb:20:54:cf:ae:f8:d5:22:5a:5a:6f:60:d3:c9:51:
86:62:92:14:b6:52:1e:f1:77:31:3d:62:19:0d:18:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0C:27:97:74:53:59:A3:FA:D1:80:92:3B:30:85:D3:01:82:8C:07
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NAwnl3RTWaP60YCSOzCF0wGCjAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.105.0/24
212.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
38:29:0e:a9:c7:aa:dc:4a:b8:5d:eb:a9:94:1e:f7:ec:c5:00:
66:df:76:0a:87:01:d0:77:7b:6e:f3:1a:ab:eb:b5:ef:6a:87:
0b:7e:3c:fa:e3:26:53:3a:ce:5e:8d:ff:47:9c:18:6f:4b:cd:
f8:6c:9d:59:1e:b9:a5:20:89:36:ac:6b:f6:f0:89:e7:34:a8:
4d:b6:9c:cb:10:eb:e5:8b:3c:ae:f8:e7:6f:df:9a:e7:50:05:
51:7c:43:ab:61:d4:60:dd:3d:8b:ed:b4:10:85:e0:63:7e:b8:
45:e3:73:2a:2a:00:45:0a:73:28:87:83:09:3c:dd:d0:15:f6:
41:b1:65:c0:52:9c:cd:a6:d4:b9:a7:42:bc:a9:aa:2a:d1:c5:
9c:a9:39:c7:95:59:ce:16:44:45:d7:cb:0a:34:c7:1f:1d:22:
a7:d9:e3:0f:3a:f0:76:22:fb:d2:69:b0:76:dd:d1:ad:48:43:
f5:02:e2:b7:4b:2e:8d:46:51:e8:26:1b:41:37:81:15:aa:46:
43:69:e6:56:8c:17:5f:78:22:b0:a7:ba:32:95:27:4d:78:e2:
ce:c1:5f:4f:49:08:c3:fe:44:05:e3:b5:e4:35:43:39:41:b1:
99:10:9e:11:72:8a:8c:a5:04:a5:5f:5b:67:8b:d7:b8:e3:aa:
c2:f7:bc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:32 2026 by rpki-client