Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Vj5HkEll8BW2rQ9QeAzAg4uHYPI.roa
File: Vj5HkEll8BW2rQ9QeAzAg4uHYPI.roa (raw, json)
Hash identifier: eEu0aPhatLLQntnQpeW4oWsjtgHMjsmByeLasP4fLvQ=
Subject key identifier: 56:3E:47:90:49:65:F0:15:B6:AD:0F:50:78:0C:C0:83:8B:87:60:F2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E2ADEAEA01DA911348F1D1B04C985354C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Vj5HkEll8BW2rQ9QeAzAg4uHYPI.roa
Signing time: Fri 15 May 2026 09:01:37 +0000
ROA not before: Fri 15 May 2026 09:01:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57344
IP address blocks: 212.134.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:de:ae:a0:1d:a9:11:34:8f:1d:1b:04:c9:85:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 15 09:01:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=563e47904965f015b6ad0f50780cc0838b8760f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:ef:78:f5:b0:fa:c1:c0:1f:34:94:e6:ee:
6e:76:1a:c8:68:3b:0c:56:2b:76:f4:ba:ce:c8:b5:
ea:16:c8:08:a1:e6:92:71:d0:44:8d:7b:9e:b9:28:
5a:68:9c:8d:3a:3e:82:a3:fa:47:89:08:83:8e:75:
b2:ab:4a:61:04:c2:e8:06:34:2c:d6:05:5b:1b:92:
6a:6e:cc:58:96:19:76:1c:71:bf:1d:b2:df:d5:a5:
5e:32:64:29:83:10:3a:f4:f5:5c:25:23:ce:8c:72:
20:1d:74:09:a0:ed:33:e6:e0:83:70:4b:1a:e7:97:
19:aa:13:4d:90:57:5e:d9:6d:d0:74:31:c7:77:7f:
37:20:c6:b3:e8:7b:02:c7:c2:79:b2:1c:ea:c7:52:
c9:fa:39:31:92:b2:f4:f1:3e:36:d7:e3:02:d5:b4:
95:c1:dc:b2:13:e8:21:fb:25:ac:58:22:3e:84:a0:
4d:0a:88:fc:70:38:f2:69:e0:5a:a9:67:c1:34:1f:
e8:be:ee:28:8a:82:2b:f2:f8:ba:79:75:29:e6:93:
3f:dc:e2:85:e1:ee:73:e7:9d:c4:13:e2:3b:1f:f4:
d7:95:7f:a7:4a:5f:37:00:f4:df:f2:f5:9a:43:98:
53:68:a3:71:01:0e:6e:a7:bd:13:ca:dd:29:af:c9:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:47:90:49:65:F0:15:B6:AD:0F:50:78:0C:C0:83:8B:87:60:F2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Vj5HkEll8BW2rQ9QeAzAg4uHYPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.154.0/24
Signature Algorithm: sha256WithRSAEncryption
20:25:9a:43:45:ad:9c:43:2c:e9:30:18:77:af:8e:78:35:59:
37:6f:78:2e:44:aa:9c:1e:4c:46:8d:5b:a4:43:2d:33:a4:9a:
25:d9:93:61:f5:44:1a:4c:2c:6f:04:f9:1f:ce:0c:5f:cf:ac:
5f:e4:18:42:f9:85:ac:4f:71:7c:7e:d1:54:bb:34:5a:02:6a:
fe:6e:86:f0:20:69:02:29:ff:ef:df:2f:44:9c:29:ef:7d:e6:
75:ca:30:d0:57:8c:bd:a8:0b:6b:98:a8:2e:3c:dd:ff:bc:37:
8e:2c:54:4c:03:13:5b:35:74:64:57:71:11:64:c3:4f:5b:88:
f2:c3:90:b9:2f:8e:f7:cc:73:49:f3:f3:15:a5:bd:40:8b:96:
73:96:d5:8e:4d:91:03:be:87:bb:e0:bc:1f:4d:68:3a:6a:ff:
e8:31:b4:a1:06:c6:1f:7d:b1:2f:b9:f2:f0:31:e8:b8:11:0b:
9e:9f:71:63:f5:e8:29:71:b9:99:aa:db:16:a6:c6:b5:83:fd:
c6:2c:e5:ed:6c:57:3f:a6:76:d8:d4:0d:e7:e3:7e:7c:97:d0:
58:45:da:ca:b2:32:87:e1:80:41:e0:3f:88:da:bd:5c:c0:72:
8f:8d:31:9d:91:a0:94:24:d1:c9:58:5a:b9:10:13:66:b5:4b:
75:a9:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:13:06 2026 by rpki-client