Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eS9rsrapBAM6MCEZlDqTzr1Kfpo.roa
File: eS9rsrapBAM6MCEZlDqTzr1Kfpo.roa (raw, json)
Hash identifier: fTnjcjIYgsTXMFoo3SMBsFG23XnOrtuhU6uggpRmR/M=
Subject key identifier: 79:2F:6B:B2:B6:A9:04:03:3A:30:21:19:94:3A:93:CE:BD:4A:7E:9A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D286B6240782C2F7368EBB1AFB9279C01
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eS9rsrapBAM6MCEZlDqTzr1Kfpo.roa
Signing time: Thu 26 Mar 2026 04:33:39 +0000
ROA not before: Thu 26 Mar 2026 04:33:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 212.135.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:6b:62:40:78:2c:2f:73:68:eb:b1:af:b9:27:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 26 04:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792f6bb2b6a904033a302119943a93cebd4a7e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:29:6c:cb:bd:84:b2:d4:71:cd:da:40:fd:
8b:26:a2:1d:a0:c2:6c:72:eb:73:9a:a6:f8:03:a8:
56:b2:6c:ab:fc:1b:55:cb:d8:f8:1d:c3:a3:e6:2f:
e3:5e:c8:73:30:1c:9d:01:7a:ca:95:69:0e:03:4d:
3b:52:07:50:91:47:bf:b2:d0:7a:19:69:e7:e3:b5:
7c:f7:2c:91:12:85:9a:58:ae:a8:52:f1:05:74:7e:
05:a4:2b:c8:4c:a7:a6:90:d3:9c:98:04:61:45:cf:
8c:a1:9a:b8:30:a1:b7:53:79:6c:e9:1f:d8:21:45:
66:ca:87:b4:bc:f7:7b:7e:60:4f:84:4e:4c:66:18:
bd:46:74:c6:12:57:ce:c5:36:20:48:27:b7:9b:63:
cf:7f:ce:8e:e8:bc:93:10:e8:c6:ba:26:0e:2d:08:
17:06:72:ee:ce:4d:b9:15:23:ff:0d:46:20:a6:bb:
f1:84:f4:47:f2:bf:73:0e:4e:69:95:71:ba:cc:b9:
2a:6c:2a:3b:89:e0:3b:73:7c:e8:42:72:d8:4e:2b:
ac:df:05:b5:8b:90:10:52:a2:bd:3f:0a:d2:64:91:
b0:69:45:6b:08:90:5b:31:e8:89:0c:ce:7d:f1:25:
cd:ec:44:e3:c0:49:57:59:fa:54:71:eb:17:ba:ea:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:6B:B2:B6:A9:04:03:3A:30:21:19:94:3A:93:CE:BD:4A:7E:9A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eS9rsrapBAM6MCEZlDqTzr1Kfpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.240.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b4:61:14:78:ea:c9:2b:30:2f:8f:34:a9:df:a3:d0:d7:b0:
43:8e:0c:2b:85:d5:1e:8e:da:13:4e:0c:ec:6a:27:62:ea:22:
40:44:51:fd:fa:b3:65:a2:c1:7a:bb:03:d4:14:c2:9f:42:c0:
70:e4:2d:a1:74:78:1d:6c:c7:db:da:cb:8c:42:07:5f:ba:e9:
e1:21:3b:2b:1c:a3:60:d8:b5:fd:df:60:54:87:8b:c1:28:10:
4b:93:7b:7f:83:1b:ee:90:1d:02:48:61:34:fd:5a:cf:17:ce:
a1:2d:4a:e8:10:1b:b7:94:e8:ca:30:7a:5d:19:6e:bf:61:1d:
99:49:be:1d:d5:64:24:b3:c6:3e:6e:5d:d7:8e:32:16:b3:75:
30:10:53:b6:ae:b7:c4:ad:bf:41:5c:f5:a1:d2:f2:2f:40:15:
3d:6a:fe:b6:87:25:e6:b9:c9:d8:a1:bc:ac:02:fb:a5:8d:06:
22:d3:5d:4a:ed:1f:60:d9:01:ab:29:5d:4a:49:35:b5:e5:8b:
8b:c7:62:15:81:f7:8f:c9:0a:80:66:17:d3:db:03:2f:e5:00:
a1:34:0c:59:9c:b0:cb:66:94:53:d4:06:94:e2:3a:1d:cf:91:
8e:08:02:61:92:3b:10:a6:e7:78:96:5c:65:04:72:d6:1f:cb:
b5:b2:1b:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0oa2JAeCwvc2jrsa+5J5wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMzI2MDQzMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTJmNmJiMmI2YTkwNDAzM2EzMDIxMTk5NDNhOTNjZWJkNGE3ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfopbMu9hLLUcc3aQP2LJqIdoMJs
cutzmqb4A6hWsmyr/BtVy9j4HcOj5i/jXshzMBydAXrKlWkOA007UgdQkUe/stB6
GWnn47V89yyREoWaWK6oUvEFdH4FpCvITKemkNOcmARhRc+MoZq4MKG3U3ls6R/Y
IUVmyoe0vPd7fmBPhE5MZhi9RnTGElfOxTYgSCe3m2PPf86O6LyTEOjGuiYOLQgX
BnLuzk25FSP/DUYgprvxhPRH8r9zDk5plXG6zLkqbCo7ieA7c3zoQnLYTius3wW1
i5AQUqK9PwrSZJGwaUVrCJBbMeiJDM598SXN7ETjwElXWfpUcesXuuooJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHkva7K2qQQDOjAhGZQ6k869Sn6aMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZVM5cnNyYXBCQU02TUNFWmxEcVR6cjFLZnBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IfwMA0G
CSqGSIb3DQEBCwUAA4IBAQCWtGEUeOrJKzAvjzSp36PQ17BDjgwrhdUejtoTTgzs
aidi6iJARFH9+rNlosF6uwPUFMKfQsBw5C2hdHgdbMfb2suMQgdfuunhITsrHKNg
2LX932BUh4vBKBBLk3t/gxvukB0CSGE0/VrPF86hLUroEBu3lOjKMHpdGW6/YR2Z
Sb4d1WQks8Y+bl3XjjIWs3UwEFO2rrfErb9BXPWh0vIvQBU9av62hyXmucnYobys
AvuljQYi011K7R9g2QGrKV1KSTW15YuLx2IVgfePyQqAZhfT2wMv5QChNAxZnLDL
ZpRT1AaU4jodz5GOCAJhkjsQpud4llxlBHLWH8u1shtX
-----END CERTIFICATE-----
Generated at Wed Apr 1 14:50:23 2026 by rpki-client