Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cdDH21PsIh7HjuSEh0rJv7hZITw.roa
File: cdDH21PsIh7HjuSEh0rJv7hZITw.roa (raw, json)
Hash identifier: laGRiTNwcaOdffaYmn+Wk3pE2sYv2df5DBYb45P8IsA=
Subject key identifier: 71:D0:C7:DB:53:EC:22:1E:C7:8E:E4:84:87:4A:C9:BF:B8:59:21:3C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E5A45147B43F35D2FFE0D36ABD2BD201C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cdDH21PsIh7HjuSEh0rJv7hZITw.roa
Signing time: Sun 24 May 2026 13:55:37 +0000
ROA not before: Sun 24 May 2026 13:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 212.134.100.0/24 maxlen: 24
212.134.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5a:45:14:7b:43:f3:5d:2f:fe:0d:36:ab:d2:bd:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 24 13:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71d0c7db53ec221ec78ee484874ac9bfb859213c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9b:09:b6:6e:12:35:79:4d:8e:1f:5c:9e:27:
3a:57:20:35:70:80:93:e6:00:65:0f:cf:61:06:31:
fb:72:7a:2c:d1:94:42:01:86:0b:3e:4f:69:73:4b:
33:e9:6c:be:a7:fa:08:50:f4:04:a6:50:d3:33:6a:
da:a9:4f:14:3f:da:69:94:2d:d9:2a:f4:43:d6:66:
c4:8c:f9:04:11:13:2b:da:40:66:6d:bb:a3:06:52:
3a:1d:7e:f8:83:fb:a2:31:59:95:af:ba:cd:78:f8:
01:f7:cb:30:89:9f:a1:c0:44:9b:c5:06:b0:4c:80:
98:d1:ba:37:ec:c1:4a:2a:27:07:a6:44:bf:14:6c:
0f:e4:30:67:a3:49:bf:94:bb:05:d1:09:a8:93:e1:
0a:bc:c2:d3:6d:61:96:9f:4d:b1:ad:c0:91:10:ce:
52:36:f8:19:da:b0:0d:2c:e3:66:74:ea:88:e5:9d:
f8:08:9e:53:c4:3f:97:b2:32:0e:ad:41:41:e4:5f:
6e:38:38:9a:68:00:6e:05:88:dd:fa:3c:24:8b:3a:
1a:6b:8c:de:b6:64:88:41:f2:09:7d:4e:de:92:44:
66:88:f9:fd:d4:57:10:0d:c1:09:53:88:2e:51:29:
e8:3b:14:1d:41:74:9b:9c:71:f0:9b:21:76:52:29:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:C7:DB:53:EC:22:1E:C7:8E:E4:84:87:4A:C9:BF:B8:59:21:3C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cdDH21PsIh7HjuSEh0rJv7hZITw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.100.0/24
212.134.130.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:1d:78:4f:3e:99:c6:0d:d4:1f:cd:31:74:4c:92:86:44:45:
52:d5:f2:99:76:9a:57:d7:a1:40:21:44:3e:ba:ab:44:d6:84:
c1:75:3d:1a:84:c4:e4:57:ec:19:5e:f3:2b:ea:d3:7c:a6:91:
a4:6d:8d:6a:5d:49:8d:e1:ce:4a:ce:09:6a:cf:4a:e2:f6:64:
23:1f:29:61:7f:65:99:eb:9f:b5:b1:6f:ba:79:bc:56:1e:59:
0f:84:4c:52:65:d1:28:c3:fc:b2:79:82:33:f0:61:5e:d1:7f:
90:63:c3:7d:13:68:db:b2:1a:e5:39:cc:aa:3e:71:71:17:f1:
77:ab:c9:78:2f:2e:45:52:ed:5b:49:ca:0a:3a:14:7f:ba:fb:
91:6f:6d:10:8c:02:9a:67:5d:3a:f5:07:bf:eb:64:37:03:ce:
2c:5b:fc:bd:61:f1:b0:f6:49:db:a2:54:cf:e9:a2:d5:0e:11:
68:16:e7:55:4d:c0:c5:81:13:64:bf:17:e7:0b:14:be:26:ac:
25:04:35:b4:6b:cc:16:c9:21:c4:7a:eb:a2:20:01:d0:f1:2f:
ef:8b:14:5e:db:7e:77:cd:02:c8:35:fd:58:0b:9e:7f:91:8e:
ba:66:c5:c3:33:bf:c2:d7:01:6b:c0:b4:e9:9d:83:f9:02:25:
85:b6:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:38 2026 by rpki-client