Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b-yL25mzGS-OuyFheb_lgvTFKUw.roa
File: b-yL25mzGS-OuyFheb_lgvTFKUw.roa (raw, json)
Hash identifier: nRZDBQthpLnBoVnL4ZBKcZP0IU2rQBLWwZdStdKjHSQ=
Subject key identifier: 6F:EC:8B:DB:99:B3:19:2F:8E:BB:21:61:79:BF:E5:82:F4:C5:29:4C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E6DF892A6A2E30FFDEDE26C89A36BDCAD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b-yL25mzGS-OuyFheb_lgvTFKUw.roa
Signing time: Thu 28 May 2026 09:44:27 +0000
ROA not before: Thu 28 May 2026 09:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210162
IP address blocks: 212.134.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:f8:92:a6:a2:e3:0f:fd:ed:e2:6c:89:a3:6b:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 28 09:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fec8bdb99b3192f8ebb216179bfe582f4c5294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:2e:4e:e4:60:a5:7c:c3:8c:d6:8b:71:03:
53:10:8c:4d:b1:df:ef:e7:2b:1e:8a:eb:6f:a8:c6:
ae:94:23:b6:43:95:77:e3:16:e9:26:5b:6c:45:7a:
30:0a:49:d8:e3:47:04:07:d7:ff:52:1d:88:ba:e0:
fd:5f:33:64:2e:14:12:39:fe:3e:98:4d:f2:97:84:
99:fd:12:e4:20:27:2c:f5:25:90:3c:fa:6c:7a:c0:
fa:ab:22:d2:76:8f:af:81:3e:63:97:47:db:e5:ad:
bf:f6:da:a9:0c:b9:0a:77:b9:ab:75:da:0f:4f:a7:
f9:cd:c3:b0:56:63:41:92:c9:b5:48:97:51:e1:9d:
e1:08:e4:27:34:58:09:fd:95:15:7c:17:25:f3:37:
e0:65:de:a6:aa:46:88:db:d2:a1:a0:7c:c7:8f:f1:
30:ed:d2:d9:18:b9:12:f1:d7:50:8d:8a:96:a1:30:
7c:df:1e:3e:61:3c:72:27:42:ae:7e:51:81:b9:5d:
47:59:53:3f:cc:dc:54:d9:e8:ab:a3:bb:7b:3e:71:
39:68:55:9f:7d:c0:e7:15:5f:a9:5a:65:3d:2b:f6:
36:0c:48:63:a0:64:77:33:4c:47:c4:4d:51:05:56:
b2:94:9b:a6:23:d6:37:87:83:05:b3:66:f3:72:83:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:8B:DB:99:B3:19:2F:8E:BB:21:61:79:BF:E5:82:F4:C5:29:4C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b-yL25mzGS-OuyFheb_lgvTFKUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.176.0/23
Signature Algorithm: sha256WithRSAEncryption
38:9b:90:e6:f5:56:85:1c:58:49:30:f2:2d:a6:bf:75:9d:0c:
ec:65:56:a3:25:99:15:35:dd:4c:98:f5:0a:1f:b5:e3:bb:fb:
76:91:da:34:e3:e1:b7:67:4f:2c:90:6e:57:70:39:b2:91:00:
a8:9d:a4:26:52:26:06:a8:d5:ba:c3:51:2b:5a:46:d2:02:a3:
b1:04:14:ec:e9:13:13:98:e3:48:9f:47:8d:49:06:b0:d5:88:
df:d1:f0:60:47:31:df:0f:62:ed:b8:26:da:a4:2b:01:5c:1f:
a3:71:38:1b:e8:a2:7e:12:0d:6a:48:b1:b0:99:a5:2e:70:f4:
1b:e5:1c:cc:1f:43:5f:e0:f7:d8:9d:c5:c3:63:78:c1:9a:41:
45:83:c3:9b:91:81:f7:97:e5:46:10:3c:2e:b7:b1:d4:0d:6d:
0c:17:00:27:4d:f0:7f:b0:19:db:02:d0:51:97:9c:66:fa:6d:
41:50:8b:b3:6a:fc:00:3d:4b:1f:85:61:4e:18:07:00:3d:2c:
89:b8:4e:a6:d4:e7:df:52:83:3b:eb:6c:7b:36:b0:0d:b0:fe:
72:d7:51:a7:bd:8e:2f:6d:90:ab:e9:7a:4e:94:9e:a9:19:52:
fc:d6:af:80:78:37:0a:dc:0c:3f:df:78:51:fb:28:a8:60:ec:
6d:2e:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:48 2026 by rpki-client