Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o8nHeqdODlk0LTyxKEGk9EbZ5vA.roa
File: o8nHeqdODlk0LTyxKEGk9EbZ5vA.roa (raw, json)
Hash identifier: Mt+kL5HtDwQz5Zgdu+z1qMV4dY9vi3ULtTbahK2Sn24=
Subject key identifier: A3:C9:C7:7A:A7:4E:0E:59:34:2D:3C:B1:28:41:A4:F4:46:D9:E6:F0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D77970A4A030A8C04021E42796BA7CFCD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o8nHeqdODlk0LTyxKEGk9EbZ5vA.roa
Signing time: Fri 10 Apr 2026 13:31:20 +0000
ROA not before: Fri 10 Apr 2026 13:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203048
IP address blocks: 212.134.41.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:97:0a:4a:03:0a:8c:04:02:1e:42:79:6b:a7:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 10 13:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3c9c77aa74e0e59342d3cb12841a4f446d9e6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:c0:c1:de:d9:9c:29:ec:d3:aa:13:6f:d6:
52:1c:85:75:0c:61:7a:f8:ee:94:11:dd:5c:bf:20:
39:45:2a:8a:87:4f:3d:75:44:0c:d3:33:40:42:d5:
80:55:bc:ea:e0:3c:16:81:a3:6f:94:59:76:a3:7d:
58:a8:68:b7:bf:6b:cd:f8:b0:2b:77:12:a2:10:3f:
16:c1:fb:d3:ae:ff:ec:24:c3:d9:6a:88:85:d1:4e:
35:1e:f7:6a:99:cb:bf:d3:86:6f:ff:c3:4e:16:26:
97:d0:c9:f3:c0:9e:2c:13:e3:0c:f1:ba:8e:af:0f:
b3:32:64:46:7b:b2:8c:88:05:54:c5:dc:84:31:d6:
cd:50:b8:4f:2c:29:ad:a4:2b:6c:4b:52:ee:a8:0b:
fe:99:32:b2:e5:71:1e:1b:1d:e1:18:5e:4f:f3:2e:
4b:2a:bb:63:f2:95:65:cf:7f:9f:30:5e:19:5a:6b:
a6:20:a6:c8:a6:b2:8a:5a:c3:81:78:92:13:79:8c:
97:a1:db:3d:88:4d:b9:88:0f:54:42:1a:95:48:18:
a1:98:57:12:69:d0:56:c4:e1:6b:ed:60:d5:fc:a3:
d5:7c:a0:7a:02:63:4e:7e:31:fe:fd:f1:89:1b:f9:
8b:42:a6:e1:aa:73:75:80:13:3b:ae:92:bf:91:20:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:C7:7A:A7:4E:0E:59:34:2D:3C:B1:28:41:A4:F4:46:D9:E6:F0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o8nHeqdODlk0LTyxKEGk9EbZ5vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.41.0/24
212.134.131.0/24
212.134.198.0/24
212.134.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8a:2a:68:04:fe:93:07:a4:1d:21:fb:e4:9a:98:3b:f8:5a:
ce:43:00:28:1e:5f:cc:ca:63:66:f8:78:e2:44:df:43:2f:dd:
6c:c1:8e:f1:59:40:7b:55:73:e7:7d:3e:c7:82:dc:30:a6:0c:
82:7d:87:9d:27:a0:5f:3a:67:0b:bd:69:c7:f6:ef:8a:55:cb:
a1:d9:7c:b4:bc:70:1e:ff:45:44:35:09:c0:1f:89:8e:38:e4:
21:3d:e6:e0:d9:dd:ff:d0:b9:77:02:09:17:87:b4:db:34:84:
62:2c:64:17:e6:f3:bd:73:d0:9d:14:bb:34:3e:6a:ce:f5:13:
d5:c6:6a:48:81:bb:4b:36:e7:f2:be:fe:4c:91:b1:11:9b:b9:
91:a8:51:2b:84:98:ff:ba:c3:4d:ff:ea:f4:63:17:fa:e5:bd:
d4:33:4d:a6:b5:b9:91:94:59:4e:e2:d0:29:cd:5d:91:8e:23:
d9:2a:8d:3c:e4:ef:e6:3e:14:42:56:ce:35:b8:71:da:14:3f:
24:f2:24:fa:d8:4d:ff:c3:79:ef:ac:a9:de:51:23:48:78:05:
9b:56:2c:f8:15:f1:a3:e8:14:ca:d3:1f:a6:10:c3:e4:10:3c:
7c:65:3d:f9:5b:e4:6f:27:32:73:b3:76:0c:50:8f:37:7f:24:
09:f0:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:58 2026 by rpki-client