Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_p_7fW7XIekZYM-73liMKdNKfvM.roa
File: _p_7fW7XIekZYM-73liMKdNKfvM.roa (raw, json)
Hash identifier: JYl+EbRpykWl5IjCTj08tx8HBSJTdcZ9PB3fYRpCVRU=
Subject key identifier: FE:9F:FB:7D:6E:D7:21:E9:19:60:CF:BB:DE:58:8C:29:D3:4A:7E:F3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F3C81F1BB7929F7594197D271B44E01D7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_p_7fW7XIekZYM-73liMKdNKfvM.roa
Signing time: Tue 07 Jul 2026 12:16:16 +0000
ROA not before: Tue 07 Jul 2026 12:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 212.134.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:81:f1:bb:79:29:f7:59:41:97:d2:71:b4:4e:01:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 7 12:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe9ffb7d6ed721e91960cfbbde588c29d34a7ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:07:c8:1e:f9:46:d1:bf:4b:20:e1:89:87:
0d:36:c3:72:69:5e:35:63:21:ee:00:a0:23:09:69:
b0:5e:1c:36:4c:4f:33:6b:26:6c:68:f5:dd:cc:93:
31:85:2a:e3:e1:62:bf:84:bc:69:cd:b6:ac:5a:76:
31:41:f4:a9:e3:89:31:5a:10:7d:cb:9a:12:f2:e3:
3a:52:47:71:43:5a:7d:84:63:a7:67:19:a1:d0:ad:
10:94:4b:e4:6c:8a:03:51:d5:1b:1b:99:fd:47:b9:
68:7c:0d:dd:85:45:96:d0:42:eb:c7:15:b3:8f:b4:
34:8c:3f:3b:a4:71:71:a8:cf:92:d8:97:c9:62:0a:
41:da:a9:83:46:d4:35:07:41:f4:bb:c5:b8:35:5f:
8d:b3:ec:f2:c9:bd:7d:2b:4d:f7:63:01:c8:5d:d2:
44:fc:21:15:0e:f2:ee:c1:f4:d0:88:d8:4b:e5:cf:
55:17:15:dc:72:0f:a4:0f:3b:49:25:1a:5d:31:69:
e9:0a:8b:5d:89:2f:c7:4f:12:6b:5a:66:ad:fa:79:
24:21:a9:0f:da:63:8e:bc:e6:e6:f7:34:4d:db:f6:
19:16:08:11:45:b0:3a:9a:4f:83:87:94:bd:b8:2f:
09:be:c1:1e:01:cf:00:77:4d:b6:33:68:97:d1:3d:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:FB:7D:6E:D7:21:E9:19:60:CF:BB:DE:58:8C:29:D3:4A:7E:F3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_p_7fW7XIekZYM-73liMKdNKfvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:59:0f:3c:04:3e:60:2c:a5:92:b1:73:e5:08:dd:e6:9e:a5:
be:4d:1b:7f:10:cc:ba:9a:a5:01:1e:98:bb:61:c8:88:fe:97:
78:b4:2f:c1:c0:15:1a:7f:1e:4d:b8:6e:79:bb:54:46:0b:14:
f3:cc:20:d5:c1:3a:33:8a:2a:8e:77:ac:e6:b6:62:d4:96:1e:
cd:7a:e1:29:dd:29:0e:66:44:b6:6f:72:8f:a2:0a:43:27:46:
e9:59:da:99:d9:f8:d4:92:29:5a:aa:62:c6:1a:64:7f:d2:5e:
22:2d:8e:08:ab:a6:15:8c:d1:08:2e:66:ca:f8:bc:d4:c0:28:
cd:f4:0f:f3:7b:15:0d:a4:62:28:24:de:1c:20:00:13:94:f3:
c4:54:8a:ae:08:20:d0:f0:7c:55:e7:97:f9:41:c1:d1:cc:47:
6f:ef:bc:9f:72:c2:35:a6:30:84:0d:9a:6a:5a:c1:d7:0a:44:
48:58:b5:da:fe:69:7e:63:83:08:2b:00:14:2b:48:d3:b4:1f:
07:04:3d:c4:33:65:15:37:40:38:15:5b:6d:62:34:d3:7b:56:
66:c0:21:c2:42:10:46:6d:65:78:08:b6:05:9b:7a:01:b8:be:
c7:4e:5b:51:16:d8:db:df:2d:27:a2:f0:ab:e9:89:9d:92:49:
7c:78:dc:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ88gfG7eSn3WUGX0nG0TgHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzA3MTIxNjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTlmZmI3ZDZlZDcyMWU5MTk2MGNmYmJkZTU4OGMyOWQzNGE3ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnwHyB75RtG/SyDhiYcNNsNyaV41
YyHuAKAjCWmwXhw2TE8zayZsaPXdzJMxhSrj4WK/hLxpzbasWnYxQfSp44kxWhB9
y5oS8uM6UkdxQ1p9hGOnZxmh0K0QlEvkbIoDUdUbG5n9R7lofA3dhUWW0ELrxxWz
j7Q0jD87pHFxqM+S2JfJYgpB2qmDRtQ1B0H0u8W4NV+Ns+zyyb19K033YwHIXdJE
/CEVDvLuwfTQiNhL5c9VFxXccg+kDztJJRpdMWnpCotdiS/HTxJrWmat+nkkIakP
2mOOvObm9zRN2/YZFggRRbA6mk+Dh5S9uC8JvsEeAc8Ad022M2iX0T1QjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6f+31u1yHpGWDPu95YjCnTSn7zMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvX3BfN2ZXN1hJZWtaWU0tNzNsaU1LZE5LZnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IayMA0G
CSqGSIb3DQEBCwUAA4IBAQB9WQ88BD5gLKWSsXPlCN3mnqW+TRt/EMy6mqUBHpi7
YciI/pd4tC/BwBUafx5NuG55u1RGCxTzzCDVwToziiqOd6zmtmLUlh7NeuEp3SkO
ZkS2b3KPogpDJ0bpWdqZ2fjUkilaqmLGGmR/0l4iLY4Iq6YVjNEILmbK+LzUwCjN
9A/zexUNpGIoJN4cIAATlPPEVIquCCDQ8HxV55f5QcHRzEdv77yfcsI1pjCEDZpq
WsHXCkRIWLXa/ml+Y4MIKwAUK0jTtB8HBD3EM2UVN0A4FVttYjTTe1ZmwCHCQhBG
bWV4CLYFm3oBuL7HTltRFtjb3y0novCr6Ymdkkl8eNzO
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:01 2026 by rpki-client