Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Yv1Qs2zCp-OaxlGfKtqXpp2WxLc.roa
File: Yv1Qs2zCp-OaxlGfKtqXpp2WxLc.roa (raw, json)
Hash identifier: Whe6Rf5fg2u9vW/XgOd0SGP+HhePH4v3x649WPJMWxY=
Subject key identifier: 62:FD:50:B3:6C:C2:A7:E3:9A:C6:51:9F:2A:DA:97:A6:9D:96:C4:B7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F0B902F14AD4D6EA8ED93C1CC867FC55C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Yv1Qs2zCp-OaxlGfKtqXpp2WxLc.roa
Signing time: Sun 28 Jun 2026 00:10:26 +0000
ROA not before: Sun 28 Jun 2026 00:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58325
IP address blocks: 212.134.220.0/22 maxlen: 22
212.135.130.0/23 maxlen: 24
212.135.132.0/23 maxlen: 24
212.135.138.0/23 maxlen: 24
212.135.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:90:2f:14:ad:4d:6e:a8:ed:93:c1:cc:86:7f:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 28 00:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62fd50b36cc2a7e39ac6519f2ada97a69d96c4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:99:7d:8e:5d:ef:ae:5d:b8:83:29:97:05:
e6:13:f7:11:27:2e:c3:30:3c:22:05:f1:0d:f9:e3:
0f:94:23:34:85:c5:6b:c2:41:ca:a5:16:8e:be:fa:
b1:f1:9f:1a:b5:a2:25:85:30:d0:20:c3:2e:7f:8b:
1b:ab:82:cd:40:4d:46:33:48:67:7e:91:12:eb:30:
28:ef:0f:75:4e:f3:be:49:dc:e7:c7:4d:7a:2c:fa:
7e:64:c2:c3:fc:93:6d:71:8e:75:ac:2f:6f:40:0e:
6b:07:fb:ce:79:12:8e:88:40:70:d1:cb:39:ea:af:
5c:46:92:3f:64:c6:24:3e:eb:97:3e:80:6f:d8:53:
ec:1e:16:df:e9:b2:56:aa:8d:a9:39:6e:ab:f8:2f:
9c:43:f7:ca:a5:14:19:da:db:93:8b:3e:34:e9:29:
1d:67:ca:59:ba:28:89:17:ab:c1:e6:3e:9b:90:10:
73:f5:0a:2a:ff:a1:09:8d:6b:0a:e7:df:5e:8d:91:
61:a5:70:5a:cb:59:91:f8:4f:ca:8d:86:2a:78:ef:
96:aa:a9:ae:5a:f8:2c:1b:0e:cf:52:ee:e1:d7:a8:
04:3b:34:53:25:5d:61:8f:dc:ea:10:ac:4e:e8:0e:
a9:a5:c8:d9:24:76:ba:18:ee:71:99:ef:a1:94:f2:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:50:B3:6C:C2:A7:E3:9A:C6:51:9F:2A:DA:97:A6:9D:96:C4:B7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Yv1Qs2zCp-OaxlGfKtqXpp2WxLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.220.0/22
212.135.130.0-212.135.133.255
212.135.138.0/23
212.135.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:c8:b1:0c:a7:69:53:4c:52:fa:55:79:11:46:78:a2:6f:ae:
62:0b:2a:e0:fd:d2:7a:2b:8c:9a:87:ef:51:5a:59:b1:db:3a:
36:74:2c:a6:24:bb:ba:69:f8:8a:f2:b4:5a:7c:cf:ad:8f:82:
70:fd:95:f9:4b:a4:c7:1a:93:4f:7a:03:83:23:56:33:e9:bc:
a9:43:06:71:10:ca:0e:5d:5a:06:79:cc:fc:c0:ea:4b:c9:76:
85:be:91:ec:e0:5c:3e:a0:1e:a0:d9:52:27:48:d2:10:de:8b:
80:5a:53:71:1c:99:c5:48:ba:1b:c8:d3:7a:d4:a3:01:2d:4e:
72:09:46:ee:01:3e:23:2d:32:95:73:53:ad:db:eb:be:4e:5f:
44:2d:0c:a3:93:80:a2:7e:1e:5b:d3:e0:bc:35:da:bc:91:90:
81:ca:3f:7c:61:c9:69:e5:54:46:f5:52:09:ae:e2:65:c2:dc:
24:b3:0d:35:94:30:5b:03:3d:b9:70:c5:37:57:cf:24:35:ea:
32:b9:ec:89:83:42:a0:24:4d:45:31:e0:45:57:d3:6f:2f:bf:
38:e0:27:d9:2f:8a:e6:16:8b:9b:c7:01:c1:57:24:de:bd:f3:
1e:d9:4a:6b:9b:a7:ba:86:4c:2c:a4:3d:63:8d:81:33:fd:4e:
23:20:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:28 2026 by rpki-client