Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m4NavirwNHa1iE0rA5a2uWo5nQY.roa
File: m4NavirwNHa1iE0rA5a2uWo5nQY.roa (raw, json)
Hash identifier: LZ9gYEdfuSLyS8IppN8jVLI9wKa53VMSxVFWtt1IEzQ=
Subject key identifier: 9B:83:5A:BE:2A:F0:34:76:B5:88:4D:2B:03:96:B6:B9:6A:39:9D:06
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A017523CF65D6B659CC5C1AD634F4B8E3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m4NavirwNHa1iE0rA5a2uWo5nQY.roa
Signing time: Wed 19 Aug 2026 00:01:00 +0000
ROA not before: Wed 19 Aug 2026 00:01:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 212.134.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:52:3c:f6:5d:6b:65:9c:c5:c1:ad:63:4f:4b:8e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 19 00:01:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b835abe2af03476b5884d2b0396b6b96a399d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:b1:37:20:29:68:4f:f3:8b:db:82:6c:51:
12:a6:13:4f:50:80:e0:c8:ec:58:6e:dc:a8:71:7c:
78:85:cf:df:74:f7:fa:9e:b7:4c:98:dd:d1:4d:e8:
97:a8:ad:1f:28:69:98:00:40:cb:f8:36:ed:29:28:
22:d5:6d:e2:50:28:54:49:ea:ed:21:11:57:8a:85:
52:45:e1:2d:70:05:d8:10:c0:02:88:6a:f9:67:83:
81:57:71:80:43:e9:21:d3:d5:e1:71:60:41:e6:40:
32:40:1c:4e:98:74:b1:5b:dc:16:56:67:8b:54:a4:
a8:21:e7:c1:26:46:6f:2f:91:f1:74:8e:3c:61:4b:
ec:1c:a5:f5:62:3d:37:0d:e8:c1:7e:73:b9:3e:cc:
6e:4f:64:d2:44:ac:ad:a6:22:26:6e:67:0a:2f:c0:
6b:2f:dd:3a:a3:dc:75:1f:81:bd:bc:10:a1:d2:3d:
a7:de:f0:fe:c6:de:3d:42:b0:aa:9c:f8:a8:ce:0c:
f8:11:15:13:c4:11:8d:91:ed:2f:22:93:f3:79:f8:
93:ad:e6:c4:9a:5a:5d:22:71:72:b4:c6:d1:6a:b3:
49:7f:1b:19:aa:54:dd:ff:80:9c:b5:32:f5:7d:3b:
3d:e6:9d:90:68:86:6b:97:61:22:2b:1f:46:ec:ee:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:5A:BE:2A:F0:34:76:B5:88:4D:2B:03:96:B6:B9:6A:39:9D:06
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m4NavirwNHa1iE0rA5a2uWo5nQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:db:b1:4b:d3:44:7f:48:eb:4f:49:39:b3:fc:07:e7:cd:b6:
fa:c0:f3:0b:59:64:8a:4e:73:70:49:35:8a:3b:74:ac:e1:1d:
ad:57:c8:dd:ba:5b:e1:c6:84:cf:48:eb:5b:51:39:27:78:ef:
fb:fa:1c:d3:e7:f0:4c:64:31:d7:69:e4:25:ca:e4:8f:e2:89:
d5:c3:62:07:42:84:9c:fc:b2:d0:f4:1d:81:29:56:72:35:09:
ae:9d:aa:aa:f5:a4:d2:aa:3b:03:26:36:e7:a2:b1:45:84:5b:
ff:b2:d9:69:35:64:ab:26:38:92:ba:96:66:72:f5:7d:9c:ca:
1a:27:0c:ae:46:05:fd:a1:ba:a1:4e:5f:21:72:8b:b6:26:49:
f9:bc:d4:bb:1a:6b:be:b4:98:ea:95:8c:8d:c0:86:b4:2d:f6:
f9:35:5b:a2:6a:b8:76:4c:81:bd:f4:c5:be:1e:fd:f7:c5:c5:
a2:7f:74:53:6d:2c:e7:6a:64:df:f5:69:10:d9:eb:e7:34:6b:
43:c2:d3:4a:10:b0:a7:aa:98:a1:95:b5:0c:0d:6d:10:9a:61:
74:5d:9b:52:a2:73:44:1c:a8:04:f2:f3:3a:bf:bd:9e:16:8e:
9d:b2:c4:d9:a6:ec:dd:30:dc:6f:93:c6:c6:d2:1b:76:39:88:
c6:bd:4a:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAXUjz2XWtlnMXBrWNPS44+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODE5MDAwMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjgzNWFiZTJhZjAzNDc2YjU4ODRkMmIwMzk2YjZiOTZhMzk5ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdexNyApaE/zi9uCbFESphNPUIDg
yOxYbtyocXx4hc/fdPf6nrdMmN3RTeiXqK0fKGmYAEDL+DbtKSgi1W3iUChUSert
IRFXioVSReEtcAXYEMACiGr5Z4OBV3GAQ+kh09XhcWBB5kAyQBxOmHSxW9wWVmeL
VKSoIefBJkZvL5HxdI48YUvsHKX1Yj03DejBfnO5PsxuT2TSRKytpiImbmcKL8Br
L906o9x1H4G9vBCh0j2n3vD+xt49QrCqnPiozgz4ERUTxBGNke0vIpPzefiTrebE
mlpdInFytMbRarNJfxsZqlTd/4CctTL1fTs95p2QaIZrl2EiKx9G7O6jqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJuDWr4q8DR2tYhNKwOWtrlqOZ0GMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbTROYXZpcndOSGExaUUwckE1YTJ1V281blFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Ib8MA0G
CSqGSIb3DQEBCwUAA4IBAQCw27FL00R/SOtPSTmz/Afnzbb6wPMLWWSKTnNwSTWK
O3Ss4R2tV8jdulvhxoTPSOtbUTkneO/7+hzT5/BMZDHXaeQlyuSP4onVw2IHQoSc
/LLQ9B2BKVZyNQmunaqq9aTSqjsDJjbnorFFhFv/stlpNWSrJjiSupZmcvV9nMoa
JwyuRgX9obqhTl8hcou2Jkn5vNS7Gmu+tJjqlYyNwIa0Lfb5NVuiarh2TIG99MW+
Hv33xcWif3RTbSznamTf9WkQ2evnNGtDwtNKELCnqpihlbUMDW0QmmF0XZtSonNE
HKgE8vM6v72eFo6dssTZpuzdMNxvk8bG0ht2OYjGvUp/
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:04:11 2026 by rpki-client