Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kB-GejnXCCyTSTN-9BzEvSc4Yfk.roa
File: kB-GejnXCCyTSTN-9BzEvSc4Yfk.roa (raw, json)
Hash identifier: jQBJqJjtZaB20j95Kh4S0fuhcBjcUVDQ5AVgHur1p60=
Subject key identifier: 90:1F:86:7A:39:D7:08:2C:93:49:33:7E:F4:1C:C4:BD:27:38:61:F9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D31C26BA7F8123EA58F6FE6187B45E56B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kB-GejnXCCyTSTN-9BzEvSc4Yfk.roa
Signing time: Sat 28 Mar 2026 00:05:18 +0000
ROA not before: Sat 28 Mar 2026 00:05:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 212.134.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:c2:6b:a7:f8:12:3e:a5:8f:6f:e6:18:7b:45:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 28 00:05:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=901f867a39d7082c9349337ef41cc4bd273861f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:41:c0:85:49:21:20:c1:d5:17:9f:bc:b7:
41:9f:db:06:2d:a8:f6:5e:72:eb:86:c7:12:29:ca:
b9:a8:2b:3a:09:6a:87:91:c7:41:11:f5:c8:dd:83:
3d:94:f7:83:75:60:fc:65:24:31:98:d4:06:e6:3e:
9e:af:21:76:37:88:91:09:76:b4:12:43:9f:9b:53:
5c:b4:07:78:93:e9:48:d5:3c:fa:6e:1a:53:a6:25:
45:a6:20:6f:c0:23:d4:b2:ff:dc:13:61:b6:6e:97:
ce:de:99:10:8d:0d:14:20:36:8d:fc:10:b2:1d:cd:
0f:cc:37:31:45:25:e8:37:59:78:79:8f:fc:4b:70:
82:68:f6:6e:9d:8d:09:28:93:42:b7:77:da:f0:1a:
a8:d6:ed:a6:39:7d:ce:ca:09:99:6c:5b:5f:eb:08:
36:34:99:8a:4a:5f:8d:b4:d4:90:a1:d7:c5:43:e5:
93:dd:f4:27:b7:45:56:94:d2:db:21:21:7e:12:c3:
0c:cb:6d:46:17:8e:3f:e8:d9:8f:8d:50:02:67:78:
f4:15:ff:df:d3:23:e5:a0:0a:97:c3:7a:99:41:91:
4a:23:d4:8d:59:67:b4:5d:6c:08:f3:00:ba:d4:72:
ce:a5:43:0b:16:fc:72:b8:35:62:43:11:78:bf:dc:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:86:7A:39:D7:08:2C:93:49:33:7E:F4:1C:C4:BD:27:38:61:F9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kB-GejnXCCyTSTN-9BzEvSc4Yfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b5:91:f8:5e:6f:d8:13:ab:7c:25:c5:8d:4e:6e:05:04:6d:
57:e0:ff:90:79:28:c5:48:1c:8f:60:77:fa:da:1b:a4:a0:a9:
4c:c1:c8:3a:aa:b6:21:a2:62:35:e0:6f:59:72:a4:ab:24:b1:
9b:25:87:51:60:e7:6c:9b:80:d9:3f:34:ce:e9:05:c8:9d:21:
53:d7:ab:86:f4:f8:62:57:80:77:59:74:0e:fd:68:8f:9a:e7:
8c:b8:a8:c1:08:14:85:c3:57:a2:19:36:19:00:23:62:bc:59:
24:ea:72:f2:c4:a4:57:2d:45:92:cd:b3:c9:46:a9:ab:21:e3:
2b:c0:a0:b9:e8:43:cb:70:84:20:0e:69:aa:a5:2a:bf:08:1d:
8b:00:10:f0:91:78:0d:a4:46:97:fd:de:dd:3b:1b:cd:86:ee:
31:7d:0f:cb:2f:38:24:7b:95:65:d1:0a:8c:1f:95:31:c3:5b:
31:df:69:01:43:be:5c:66:ac:91:a9:9c:76:de:1d:18:82:cf:
e8:30:20:81:3f:0e:b5:b5:ce:29:8f:95:a4:1c:72:36:76:31:
f3:85:20:98:27:7b:80:a0:11:d0:0f:f2:df:8a:16:4f:84:08:
45:bb:70:ee:55:31:5d:9f:d5:b6:f0:54:d5:c7:72:71:1d:71:
03:38:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:40:46 2026 by rpki-client