Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gyDEkDKkkOTYAtwVSCwv_oBbH7I.roa
File: gyDEkDKkkOTYAtwVSCwv_oBbH7I.roa (raw, json)
Hash identifier: HDBhhAZ3xjTd9XBSaqmXkkwOvLSo0xcSzh5MjvcuolA=
Subject key identifier: 83:20:C4:90:32:A4:90:E4:D8:02:DC:15:48:2C:2F:FE:80:5B:1F:B2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E69275BC422CFCB2ABA99433273878D2B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gyDEkDKkkOTYAtwVSCwv_oBbH7I.roa
Signing time: Wed 27 May 2026 11:17:27 +0000
ROA not before: Wed 27 May 2026 11:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197359
IP address blocks: 212.135.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:27:5b:c4:22:cf:cb:2a:ba:99:43:32:73:87:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 27 11:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8320c49032a490e4d802dc15482c2ffe805b1fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:cf:a1:ce:ed:b1:80:30:92:32:16:b5:05:
03:75:e3:1e:4a:9f:d1:2b:0b:3d:89:ee:8d:4f:92:
d9:a5:42:52:19:de:56:f2:14:1f:d6:ec:a8:3e:ac:
f2:aa:9a:f0:e2:7f:6b:03:e6:32:45:9d:04:e1:dc:
40:b7:da:4b:bc:f2:44:46:2c:dd:30:9a:e7:a7:bb:
31:9a:4b:ff:cc:2d:2f:f1:85:cf:a3:0d:58:41:19:
18:cc:26:c8:54:45:d8:70:e0:0b:75:47:d0:c8:75:
9e:9a:19:46:53:20:06:89:35:cf:56:c3:65:3d:d9:
4f:00:77:96:7f:d5:d5:d3:0f:4e:b7:db:9c:81:f0:
1c:3c:22:f1:cb:ad:db:90:17:6e:d5:05:89:94:cf:
be:7a:5d:c4:09:1a:d9:c5:96:5a:5f:0b:9d:8e:f1:
29:d4:62:fa:ce:2f:0c:ed:c8:3f:d7:dc:89:7d:10:
2b:79:f9:f0:0c:cd:34:37:cd:b1:9a:19:9d:4c:88:
0e:9d:79:92:0b:c1:2f:a4:0b:33:67:69:a5:eb:df:
a6:5f:19:d6:50:aa:d6:35:47:3d:6e:9c:bf:cf:33:
93:a5:83:41:bb:c0:3f:29:9b:8f:bb:07:22:9e:9a:
5a:f4:89:51:6a:c7:dd:2b:a8:16:54:50:cf:84:31:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:C4:90:32:A4:90:E4:D8:02:DC:15:48:2C:2F:FE:80:5B:1F:B2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gyDEkDKkkOTYAtwVSCwv_oBbH7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.148.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:9e:1f:f2:df:7a:93:e5:5b:b5:96:45:19:d4:13:48:fc:e6:
0d:bc:3b:21:c7:9d:d1:2d:8c:98:77:7c:24:ce:c0:b1:7d:ae:
77:eb:c5:6a:f5:24:f3:f4:43:33:cf:09:a5:f5:12:a1:32:2f:
ab:34:f6:b1:d0:8a:76:c8:36:1c:3f:3d:d9:b9:71:d4:d5:f9:
52:84:1b:7a:bb:37:d7:52:b6:e9:83:89:8b:89:92:6b:89:38:
3e:58:d0:4e:2a:b3:b6:95:28:35:bd:d6:39:e4:7b:76:54:80:
ef:98:69:88:53:75:8b:e9:e6:74:e9:b4:b0:03:38:50:85:7e:
3d:23:51:56:43:eb:94:4a:37:49:20:da:67:17:f3:07:04:34:
b1:d5:71:6f:b3:a5:de:49:91:fc:bf:1f:ce:87:d9:1d:b1:25:
0d:e5:24:4d:7c:df:81:ca:15:ef:5b:f9:48:ed:ba:2f:e1:49:
04:95:69:b2:eb:be:4f:2c:c7:60:76:e9:45:89:82:eb:44:57:
7d:52:65:66:b8:e3:c9:4e:3b:ff:77:07:13:a0:92:74:4b:cf:
c0:cc:10:70:35:8f:0d:2a:98:cb:33:f2:86:54:ce:df:5e:3a:
5c:fb:bf:13:c5:78:03:49:0e:b5:e7:5b:cc:9c:ba:3f:1b:31:
b7:77:35:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5pJ1vEIs/LKrqZQzJzh40rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTI3MTExNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzIwYzQ5MDMyYTQ5MGU0ZDgwMmRjMTU0ODJjMmZmZTgwNWIxZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0DPoc7tsYAwkjIWtQUDdeMeSp/R
Kws9ie6NT5LZpUJSGd5W8hQf1uyoPqzyqprw4n9rA+YyRZ0E4dxAt9pLvPJERizd
MJrnp7sxmkv/zC0v8YXPow1YQRkYzCbIVEXYcOALdUfQyHWemhlGUyAGiTXPVsNl
PdlPAHeWf9XV0w9Ot9ucgfAcPCLxy63bkBdu1QWJlM++el3ECRrZxZZaXwudjvEp
1GL6zi8M7cg/19yJfRArefnwDM00N82xmhmdTIgOnXmSC8EvpAszZ2ml69+mXxnW
UKrWNUc9bpy/zzOTpYNBu8A/KZuPuwcinppa9IlRasfdK6gWVFDPhDFDxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMgxJAypJDk2ALcFUgsL/6AWx+yMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZ3lERWtES2trT1RZQXR3VlNDd3Zfb0JiSDdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IeUMA0G
CSqGSIb3DQEBCwUAA4IBAQDSnh/y33qT5Vu1lkUZ1BNI/OYNvDshx53RLYyYd3wk
zsCxfa5368Vq9STz9EMzzwml9RKhMi+rNPax0Ip2yDYcPz3ZuXHU1flShBt6uzfX
Urbpg4mLiZJriTg+WNBOKrO2lSg1vdY55Ht2VIDvmGmIU3WL6eZ06bSwAzhQhX49
I1FWQ+uUSjdJINpnF/MHBDSx1XFvs6XeSZH8vx/Oh9kdsSUN5SRNfN+ByhXvW/lI
7bov4UkElWmy675PLMdgdulFiYLrRFd9UmVmuOPJTjv/dwcToJJ0S8/AzBBwNY8N
KpjLM/KGVM7fXjpc+78TxXgDSQ6151vMnLo/GzG3dzUl
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:38 2026 by rpki-client