Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iNPoIe3m-iIKq4O9OE4yn31dx04.roa
File: iNPoIe3m-iIKq4O9OE4yn31dx04.roa (raw, json)
Hash identifier: Y5Apb9RAMvA/0dE+ysxo9o4m6DrgRXAOTR4y+AeUQVQ=
Subject key identifier: 88:D3:E8:21:ED:E6:FA:22:0A:AB:83:BD:38:4E:32:9F:7D:5D:C7:4E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E2089B977896DEA01828A30F6B7F56C3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iNPoIe3m-iIKq4O9OE4yn31dx04.roa
Signing time: Wed 13 May 2026 08:52:37 +0000
ROA not before: Wed 13 May 2026 08:52:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 212.134.37.0/24 maxlen: 24
212.134.50.0/24 maxlen: 24
212.135.23.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:89:b9:77:89:6d:ea:01:82:8a:30:f6:b7:f5:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 13 08:52:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88d3e821ede6fa220aab83bd384e329f7d5dc74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:e3:de:66:53:93:59:6a:c2:d6:49:f6:c7:
0c:fd:59:85:ef:b0:7e:49:94:e1:2f:ce:99:01:45:
19:c2:93:16:3d:49:3b:9c:c8:f0:80:10:18:01:b9:
ad:15:71:b4:c1:82:35:8b:45:32:d6:d0:b5:62:82:
61:a1:0c:83:0e:1c:07:41:3c:61:6e:9e:35:3c:61:
67:a3:38:8c:4c:08:90:10:8a:7d:00:0f:de:91:a0:
fd:e4:55:b7:32:42:35:a7:5a:d6:2c:c1:28:d1:8d:
3e:88:90:1f:58:db:7b:01:c3:d1:9e:f5:ac:d2:1f:
54:a5:44:67:5b:d5:c6:eb:e2:41:ec:c4:b5:16:58:
5d:54:3e:06:2b:f1:37:9b:d3:92:ee:45:32:24:6e:
23:16:63:7c:0b:3c:eb:6d:01:fc:4f:82:ef:ab:49:
97:dd:a2:70:08:95:d8:a0:72:65:f3:f6:69:fa:d7:
95:fe:44:00:7a:83:5a:a3:58:f9:5f:b0:18:09:5e:
89:2a:bd:b7:d2:32:f6:92:12:fa:58:18:00:e2:8f:
3c:18:47:7d:cd:93:de:23:04:41:6c:b1:db:10:d4:
92:ff:6f:47:67:30:98:6e:52:ca:1b:57:56:73:45:
4d:48:02:42:f6:f3:00:8c:c5:4d:e5:03:27:7c:85:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:E8:21:ED:E6:FA:22:0A:AB:83:BD:38:4E:32:9F:7D:5D:C7:4E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iNPoIe3m-iIKq4O9OE4yn31dx04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.37.0/24
212.134.50.0/24
212.135.23.0/24
212.135.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:22:c6:84:b4:74:a5:3f:2c:fb:4e:a8:a5:92:fa:d8:d4:09:
4e:5b:37:39:04:f8:d5:98:30:11:da:91:14:3b:26:f1:b8:a5:
59:07:4f:b3:79:7a:2b:5c:cc:b2:09:95:02:81:d1:f8:b4:86:
6f:1d:0c:4b:3d:33:58:ae:ff:83:41:77:92:a3:47:06:a3:ea:
18:cf:e7:41:97:06:17:57:7b:90:7d:ec:56:63:46:7b:96:ff:
9c:c1:73:84:40:f8:f8:91:2b:35:73:ae:6a:f0:23:f3:8a:fe:
48:f6:bd:64:e3:da:92:c8:4c:8e:7b:bf:d0:90:65:e7:fc:ba:
e7:fb:57:4e:78:18:42:33:b7:a0:61:8c:4e:8a:7a:63:9a:65:
2d:ab:bd:ad:8d:09:c8:57:e5:bd:51:64:9a:db:7b:52:91:c4:
93:bb:cb:71:2d:26:6c:56:0a:04:ff:fd:f7:4d:c1:78:8c:da:
80:f4:50:fc:37:24:96:c0:8c:9c:a6:d6:ab:b6:b3:ba:ed:93:
a8:c0:1e:df:cc:0e:07:f4:a5:1c:43:fe:8e:72:ae:f5:ce:34:
67:ef:97:2b:ec:53:70:7f:6f:ad:8a:00:57:cc:8a:2d:11:07:
68:5f:00:84:7e:4e:c8:5b:f6:8d:21:b7:87:03:5b:fd:ad:fd:
a3:d8:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:42:30 2026 by rpki-client