Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SDhAajYVRL3LvLqhNaz3ykCG-7A.roa
File: SDhAajYVRL3LvLqhNaz3ykCG-7A.roa (raw, json)
Hash identifier: Bzh4z1ylhcdWvGSuy90mGO0VRO//2zvncG5WD+yFy/I=
Subject key identifier: 48:38:40:6A:36:15:44:BD:CB:BC:BA:A1:35:AC:F7:CA:40:86:FB:B0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DB9244E63AFBF4EF7B7285C3771A99B96
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SDhAajYVRL3LvLqhNaz3ykCG-7A.roa
Signing time: Thu 23 Apr 2026 07:00:57 +0000
ROA not before: Thu 23 Apr 2026 07:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208504
IP address blocks: 212.134.39.0/24 maxlen: 24
212.135.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:24:4e:63:af:bf:4e:f7:b7:28:5c:37:71:a9:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 23 07:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4838406a361544bdcbbcbaa135acf7ca4086fbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:f4:5b:dd:19:a0:6f:97:5d:4d:b4:61:d9:
54:a3:3a:0f:b8:f8:f0:6c:3b:d8:39:f8:91:67:3f:
45:ac:51:1f:8e:5f:65:ba:5f:9b:68:d8:04:d1:ce:
af:77:c8:98:b7:77:30:8c:68:2c:24:08:9d:20:d3:
48:1e:04:57:e3:25:83:8a:40:f0:33:f2:01:fb:05:
df:1b:c5:87:35:b2:20:1f:9c:93:ce:99:ab:1d:2f:
2f:6d:17:09:e4:00:00:d4:84:ac:b9:67:11:a2:8f:
8a:af:56:0c:d5:d9:e8:8e:9d:3f:19:db:55:43:30:
5f:30:ff:9f:2e:de:66:7f:ba:07:54:71:d8:f6:36:
8a:f5:aa:92:e7:49:c8:1c:70:e9:75:ee:30:87:64:
63:d3:c0:1a:51:ec:27:8a:8d:1e:0b:15:d1:64:67:
d9:28:ae:b2:87:14:2e:26:13:f7:63:2e:eb:9f:3f:
b0:40:68:ce:8a:db:f2:c4:51:f0:bc:1e:4d:7e:74:
f4:69:e1:8d:14:a1:eb:2b:be:ab:54:b7:33:ce:70:
d0:be:97:ce:f3:d5:3d:35:c7:f3:05:0d:9f:f7:91:
2d:34:1f:dd:22:d3:c4:40:3e:6b:67:f0:90:e9:c9:
13:61:ac:02:90:9d:46:8c:a0:9d:7a:36:26:85:bd:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:40:6A:36:15:44:BD:CB:BC:BA:A1:35:AC:F7:CA:40:86:FB:B0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SDhAajYVRL3LvLqhNaz3ykCG-7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.39.0/24
212.135.28.0/24
Signature Algorithm: sha256WithRSAEncryption
53:13:43:54:dc:c7:e1:cc:fd:88:3e:a0:9d:89:d8:06:1e:92:
6c:c2:03:98:ae:56:73:b4:05:7f:ed:62:2f:f8:14:cb:ee:f7:
7f:ae:7d:57:7d:9b:d4:73:b9:c2:b9:ff:b2:6b:9d:9a:e9:43:
69:d9:bd:5c:c1:b9:7a:a7:8d:d8:67:71:67:a4:2b:63:25:3f:
2f:d8:e8:b7:0c:f7:4e:cb:5b:7b:cd:84:43:09:40:2c:d2:66:
0d:e4:8e:ee:48:7d:ac:c2:87:5a:6f:08:f3:64:b3:83:aa:05:
5d:03:c1:1f:c1:c9:ff:60:9d:0f:cc:8d:1a:6e:4a:d2:38:c7:
45:3c:1c:c7:5f:55:09:0b:8a:1a:d0:29:f4:8b:db:e8:18:d3:
bb:b7:4c:8a:b7:ad:f0:b1:ea:15:4e:0a:76:6f:a4:6d:a3:bc:
4d:6f:b5:a0:29:7e:f6:d5:5c:28:b8:c0:b1:50:f7:ac:30:35:
ca:51:91:7c:a4:af:ad:9d:9a:97:86:ab:8b:a4:c4:b3:c0:20:
f9:bf:85:de:75:58:6b:7c:b1:65:53:cd:df:e7:0f:0f:fe:0a:
5d:5c:19:a4:5c:19:df:c2:18:74:fb:53:9d:8d:87:b8:98:9b:
16:c5:32:e9:f3:d2:cd:9f:09:cd:d0:a1:76:37:77:e0:50:92:
1a:d2:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:51:34 2026 by rpki-client