Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TcEsjXfVx51yk7jRowhZQasjEsQ.roa
File: TcEsjXfVx51yk7jRowhZQasjEsQ.roa (raw, json)
Hash identifier: vhoEzuzFFvjQCHMNtXNTN+H1P/1QS4S8jpBBInQDch0=
Subject key identifier: 4D:C1:2C:8D:77:D5:C7:9D:72:93:B8:D1:A3:08:59:41:AB:23:12:C4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D811798F50C0132AE39252C39756C5ADC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TcEsjXfVx51yk7jRowhZQasjEsQ.roa
Signing time: Sun 12 Apr 2026 09:48:20 +0000
ROA not before: Sun 12 Apr 2026 09:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 212.134.132.0/24 maxlen: 24
212.134.160.0/24 maxlen: 24
212.135.22.0/24 maxlen: 24
212.135.198.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:17:98:f5:0c:01:32:ae:39:25:2c:39:75:6c:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 12 09:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dc12c8d77d5c79d7293b8d1a3085941ab2312c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:6a:a8:5f:f7:c8:ca:a8:be:08:5e:26:e0:
6a:56:7e:e9:f3:06:95:a0:28:91:7c:df:c0:2a:f1:
e1:86:ec:0a:25:99:28:61:e9:2b:ae:fe:9c:be:20:
c7:d8:19:40:e4:29:6d:b6:5e:a1:6b:c3:6b:6c:1c:
b9:62:25:ac:52:a4:e3:a7:65:21:25:30:95:e1:67:
c3:48:97:d8:4e:ec:8a:41:98:5d:d1:4f:b0:8a:00:
be:e3:f3:2a:06:7e:c7:3e:3b:df:c5:e0:4d:f8:39:
93:3f:f9:56:4e:ce:49:2c:da:96:52:b1:60:13:03:
70:10:5e:01:4f:73:80:2b:59:a0:62:0b:d3:3b:1e:
63:87:e4:dd:a9:96:55:da:f9:9a:21:e5:9d:bd:27:
a6:03:e9:9a:80:09:eb:fc:95:ec:c9:12:9b:e3:ad:
63:6f:d9:2c:f4:e8:23:b0:c7:47:1c:ac:85:87:89:
59:71:75:e1:fb:bd:a8:07:87:90:91:2e:b9:86:8f:
85:7c:11:b1:82:2c:6d:d8:cf:55:ef:f4:44:29:86:
83:5e:f5:22:8d:41:06:c6:af:4f:ce:15:82:30:01:
da:a5:7e:d6:91:22:96:cb:2b:61:8d:fd:98:41:e2:
a4:39:8c:f2:bf:19:86:6a:dd:0b:ae:59:75:a0:c3:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:2C:8D:77:D5:C7:9D:72:93:B8:D1:A3:08:59:41:AB:23:12:C4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TcEsjXfVx51yk7jRowhZQasjEsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.132.0/24
212.134.160.0/24
212.135.22.0/24
212.135.198.0/24
212.135.255.0/24
Signature Algorithm: sha256WithRSAEncryption
07:62:6a:1b:4a:1c:2e:50:79:cb:6f:24:86:50:3a:1c:c3:f3:
ec:59:a4:c3:6d:9b:8c:04:ab:68:2b:c2:6c:fd:8d:53:ab:fe:
fe:a8:3e:72:67:19:55:73:a8:d8:da:f6:80:51:08:91:83:05:
f9:5e:82:7b:fb:80:38:97:63:7a:00:0a:f4:f0:bd:00:a7:2e:
97:c6:0d:69:2c:73:08:d1:4c:94:1a:da:60:ae:71:5f:da:2a:
43:be:c9:03:59:07:ce:c6:5e:23:9c:95:e2:6c:83:c9:18:5a:
86:60:8a:0c:6d:c7:2a:17:fd:be:12:5d:cf:1f:eb:fa:65:1b:
17:fe:b7:3d:8a:18:6e:5c:20:61:4f:a4:d8:43:a0:c2:a4:da:
8d:49:67:31:f4:65:86:da:43:f1:30:09:3c:0e:55:a3:01:53:
a0:ae:31:80:f2:48:b1:70:b1:89:2d:d0:3a:fc:57:5c:da:fe:
b2:37:e0:01:67:2a:44:45:b5:54:da:73:40:47:ab:01:59:36:
f4:4d:b5:ca:8d:4c:2d:34:49:4b:1e:f2:2c:33:63:3c:36:0b:
d1:3a:f2:21:ed:54:72:e7:aa:84:a4:60:51:72:90:00:21:31:
9d:ae:fe:6a:4c:ab:72:cf:f0:35:c0:bd:4a:04:8c:d9:dd:3b:
53:62:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:24 2026 by rpki-client