Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UmpHr5OEVPYarnb2se9Sj2fOHmc.roa
File: UmpHr5OEVPYarnb2se9Sj2fOHmc.roa (raw, json)
Hash identifier: ME7hDg+FPaTmesz4JbMP+MQVzBxbKfWjmTW+9uMvwcw=
Subject key identifier: 52:6A:47:AF:93:84:54:F6:1A:AE:76:F6:B1:EF:52:8F:67:CE:1E:67
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D0F52FC0863435B9A4C89FAC44FE649A6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UmpHr5OEVPYarnb2se9Sj2fOHmc.roa
Signing time: Sat 21 Mar 2026 07:36:29 +0000
ROA not before: Sat 21 Mar 2026 07:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200151
IP address blocks: 212.134.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:52:fc:08:63:43:5b:9a:4c:89:fa:c4:4f:e6:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 21 07:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=526a47af938454f61aae76f6b1ef528f67ce1e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:10:ac:16:f8:4c:4f:b7:6d:4a:68:7e:e4:
82:fb:87:d3:92:df:95:56:dd:83:a3:6f:b6:c1:af:
d7:f1:5c:12:7b:f1:3f:e7:4e:5b:c1:08:86:bb:5b:
af:e5:4c:70:67:f3:b0:a9:de:90:61:ef:41:66:71:
43:55:a6:17:1b:ef:d5:f2:ae:8b:ba:b2:c2:94:b0:
8f:88:f2:f6:0a:78:55:cd:cb:3d:58:b7:31:95:36:
29:fe:cf:60:b5:ec:e8:39:72:ed:3d:80:89:4e:41:
87:87:cd:7c:cc:0d:b6:f7:57:00:c1:fb:a1:ed:88:
33:8b:88:6a:da:a2:bd:f0:21:86:cd:c2:e6:0d:1e:
d3:6b:69:5d:1f:47:79:36:15:14:af:4e:04:46:36:
d5:49:49:24:dc:28:04:01:42:50:79:7d:c0:a2:da:
e0:a9:15:cb:d3:32:d0:13:e6:25:6a:bb:91:bb:eb:
3c:b6:d8:11:59:c4:1d:af:de:2a:4c:fb:c9:59:8f:
38:08:69:40:6f:16:e0:d2:8e:ac:ba:87:70:4c:88:
6b:7f:b4:13:5b:9e:a1:89:5e:33:ba:81:68:09:20:
e8:09:82:42:e2:4e:53:3d:7d:21:53:98:3b:35:40:
ae:32:fe:6d:0f:0c:44:8c:e8:a2:27:d5:9c:83:14:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:47:AF:93:84:54:F6:1A:AE:76:F6:B1:EF:52:8F:67:CE:1E:67
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UmpHr5OEVPYarnb2se9Sj2fOHmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:48:1f:bc:23:25:63:ca:e5:b2:8f:1c:ce:d8:65:d6:9e:59:
10:4d:10:c4:fd:96:34:11:fe:32:45:61:d2:0c:0b:6f:79:09:
76:f3:d1:09:50:3e:77:2f:49:32:8e:c1:7b:7c:53:e8:4e:7b:
94:66:a5:c4:17:e0:9b:43:d3:a3:5b:c0:3f:25:f5:cc:c0:3c:
b6:2a:00:b7:42:07:4d:e7:57:29:50:d4:75:3d:73:9c:07:f3:
e9:7b:80:70:0f:cb:df:78:41:f2:71:b2:db:4c:51:f9:b1:30:
2f:ee:be:37:2e:69:11:0a:f1:f0:6a:e8:5e:ed:c3:e6:d7:24:
64:08:39:f1:db:e5:d2:e1:cb:cf:15:b6:d5:b9:4a:00:af:55:
6a:1c:5d:bb:9d:df:66:7b:ff:32:93:ca:d6:be:79:2b:ee:d4:
a5:50:05:ad:df:73:f5:bc:fb:8f:21:4b:be:c4:b1:cc:23:0a:
62:04:f7:23:5d:ee:1a:ec:89:2b:ef:2e:e3:d2:87:a3:f5:f5:
21:1c:b9:db:e3:da:cc:75:8e:78:f1:7b:a1:d5:32:8d:ec:ca:
31:87:50:52:97:79:5b:b2:ae:7b:09:04:6e:aa:ee:fa:4d:a8:
a1:43:47:b8:f0:cf:60:77:55:e4:e8:da:de:97:3d:f7:e1:47:
9d:a2:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 03:21:57 2026 by rpki-client