Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NjIbEW95cGpdB_jk-c1_K8BFhC8.roa
File: NjIbEW95cGpdB_jk-c1_K8BFhC8.roa (raw, json)
Hash identifier: o5hPwnqSChOEN6YD9IBoRSMVvOO9Y73Eqoc8rMmHZlw=
Subject key identifier: 36:32:1B:11:6F:79:70:6A:5D:07:F8:E4:F9:CD:7F:2B:C0:45:84:2F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DA06D743F2ADAE2337CFF68C39ACC9889
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NjIbEW95cGpdB_jk-c1_K8BFhC8.roa
Signing time: Sat 18 Apr 2026 11:50:20 +0000
ROA not before: Sat 18 Apr 2026 11:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203054
IP address blocks: 212.134.40.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.205.0/24 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.196.0/24 maxlen: 24
212.135.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:6d:74:3f:2a:da:e2:33:7c:ff:68:c3:9a:cc:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 18 11:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36321b116f79706a5d07f8e4f9cd7f2bc045842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:51:b5:91:75:34:f0:50:aa:7d:99:69:45:
54:d4:86:27:48:bc:1f:c0:35:20:cc:18:61:c5:f4:
e6:41:ee:54:bf:31:d6:df:f8:28:7e:b9:78:1c:8c:
c0:0e:10:4f:60:eb:8c:7f:5c:e7:ba:33:2c:bf:0c:
a7:00:09:39:65:40:33:21:c2:67:43:e7:56:3e:16:
c2:0b:73:f8:1d:02:ea:a2:72:ef:05:3d:3c:27:5e:
ff:85:cc:f7:75:e2:e7:2e:0c:1f:90:a1:ba:77:ae:
3d:8e:d7:2f:b2:ac:5e:b3:af:77:1d:63:e8:dc:5c:
83:7d:ca:4a:ba:ea:1e:35:38:a3:19:98:7c:d2:e5:
7b:08:4d:73:25:2a:73:54:93:c7:54:fa:23:65:30:
2f:f9:eb:d9:08:8e:9d:54:5c:b9:1b:be:17:f6:95:
5e:1f:9a:14:4b:6d:42:d8:20:53:e5:22:5e:a9:bb:
b6:20:8c:6f:02:7c:7f:55:4b:67:e1:8c:03:da:22:
56:76:9a:a4:6f:f0:65:bf:00:81:8d:93:46:fa:1f:
8f:e0:99:73:62:48:c0:20:09:12:63:17:5f:99:34:
3f:74:37:19:ee:50:40:d5:83:7a:07:61:a7:21:a6:
95:85:0b:3c:7e:bc:a9:55:1c:6a:bf:a7:70:67:f0:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:1B:11:6F:79:70:6A:5D:07:F8:E4:F9:CD:7F:2B:C0:45:84:2F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NjIbEW95cGpdB_jk-c1_K8BFhC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.40.0/24
212.134.176.0/24
212.134.205.0/24
212.135.144.0/24
212.135.196.0/24
212.135.199.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e3:a0:df:95:ca:4b:8d:a2:71:86:00:dc:80:f4:9f:ca:fb:
a4:ba:12:ae:87:9a:97:2e:74:c5:1c:82:7a:a2:3d:83:76:5b:
fc:33:09:b9:16:38:b0:e6:68:1a:f9:f5:ca:82:02:bc:0e:06:
2a:42:ac:eb:3d:50:24:31:1d:90:68:37:2c:6f:33:34:c0:54:
32:7c:85:67:17:97:16:1f:02:b9:59:ad:43:d6:ad:fc:a4:62:
78:66:d3:c2:36:50:06:00:d4:ad:4e:20:a6:c7:de:85:8f:0a:
79:84:07:13:4d:dc:70:c4:13:dd:9d:90:ab:d4:75:d9:44:99:
da:24:ad:ff:dd:9a:4a:49:8e:22:75:ed:83:ae:fe:c1:64:47:
74:8e:d2:a2:bb:ad:69:0e:69:f2:9f:0b:5d:f3:3d:2a:40:ab:
d2:c1:e0:af:c6:36:12:60:e0:f4:62:9d:d3:71:fb:9b:3d:86:
11:1c:40:34:32:73:51:2e:d6:70:c2:87:94:af:4d:b9:2e:d1:
48:6a:44:1b:bb:8d:ac:bf:c8:7b:e3:57:f3:cc:8c:61:be:81:
c4:eb:61:77:8a:47:1a:17:90:7f:07:c7:66:76:39:e5:0d:b1:
3d:ef:b9:66:c4:94:88:bc:49:05:73:f7:44:34:db:ea:fa:c3:
d2:dd:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:00:03 2026 by rpki-client