Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Y7_T-tazVX5cUYBq7n8haoAwOzY.roa
File: Y7_T-tazVX5cUYBq7n8haoAwOzY.roa (raw, json)
Hash identifier: F0LiOSiIhW6uikQZCedGyO2/ijN6w2cEtSaZbOFbOxU=
Subject key identifier: 63:BF:D3:FA:D6:B3:55:7E:5C:51:80:6A:EE:7F:21:6A:80:30:3B:36
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A10278C43FE9CB093E102634F2F3EAF388
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Y7_T-tazVX5cUYBq7n8haoAwOzY.roa
Signing time: Sat 03 Oct 2026 15:53:51 +0000
ROA not before: Sat 03 Oct 2026 15:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 212.134.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:78:c4:3f:e9:cb:09:3e:10:26:34:f2:f3:ea:f3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 3 15:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63bfd3fad6b3557e5c51806aee7f216a80303b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:20:51:29:be:c8:f5:f2:85:54:4e:6a:29:
94:67:39:5a:20:e8:a7:ec:eb:c9:1a:64:2e:9f:5c:
e7:90:e6:f3:cb:d0:46:14:94:1e:fa:96:79:ea:73:
da:20:a0:c2:89:74:06:29:01:85:ba:58:34:c3:fd:
71:b1:1c:a3:b0:bc:61:cc:d5:a7:4b:b7:b8:e5:61:
27:28:ce:fb:ba:9c:20:2c:02:14:f6:93:37:51:0d:
7d:d5:0a:19:4f:9f:a7:40:1d:c4:95:b4:ed:9c:5d:
9f:30:a4:f4:74:d0:6e:e5:dc:08:0a:1f:ce:ab:b1:
72:18:82:e6:cb:a7:f3:a4:62:e9:12:71:93:c0:3f:
9f:97:8d:2d:02:a7:70:d8:d2:b6:05:b5:fc:b0:cb:
4d:cc:9d:78:c9:5c:f1:bb:3b:3c:14:59:84:a6:95:
2a:44:a1:e6:11:04:1a:1f:a8:2f:f9:17:24:0b:6f:
ab:5f:88:da:0a:78:90:6f:bc:0d:3c:98:bd:a5:75:
df:d1:1c:37:9a:f5:6c:55:dc:77:0d:2b:49:b0:62:
6e:23:e4:9c:27:27:e8:af:52:ce:28:1f:a9:61:08:
60:a8:7b:bf:cc:fb:10:5b:3b:ee:33:52:a8:b0:a5:
d1:f6:44:d2:7c:de:4b:57:d3:eb:85:97:ea:a6:d2:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:D3:FA:D6:B3:55:7E:5C:51:80:6A:EE:7F:21:6A:80:30:3B:36
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Y7_T-tazVX5cUYBq7n8haoAwOzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.112.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c0:b4:91:47:c9:28:bb:9d:57:b5:63:44:e2:2a:17:a2:7c:
59:39:f5:06:da:f4:6a:e0:46:a7:db:4e:4d:ae:d3:7c:4a:52:
d9:a2:0c:30:b4:9c:25:b5:6b:98:e0:48:28:1a:36:9e:12:b9:
13:e3:16:98:93:15:10:87:94:a1:22:90:66:10:af:1a:76:d9:
71:b7:51:48:08:5e:1c:3a:4b:af:31:d8:43:a5:0e:dd:81:a3:
d4:ae:68:a0:67:61:a5:eb:95:52:e7:db:72:22:67:8a:ff:8f:
57:7c:95:ea:73:ed:f8:61:7a:fa:a4:46:c9:90:a2:90:55:d6:
53:f7:cf:d7:07:9e:93:a5:4b:ca:f7:5d:75:00:b4:f1:db:0c:
d2:79:08:16:bf:4a:0e:4e:75:1e:f1:3b:49:30:90:b2:43:12:
e8:2e:4a:ac:1a:3a:14:7f:f8:3c:dd:56:38:4f:59:3b:00:1e:
fb:c5:55:f8:b3:55:d6:ca:53:e3:07:d6:cc:48:b4:65:57:45:
c8:cb:55:bf:4c:e3:f5:9a:cc:d5:f8:04:c9:f6:2d:db:cd:a6:
3c:c7:f2:7f:06:6a:8b:a4:e3:72:ff:a8:4e:f4:0f:23:ea:13:
99:ad:29:9a:99:e8:c6:2e:91:46:2d:f3:ed:5c:06:b9:1d:f4:
bc:15:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:55:04 2026 by rpki-client