Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q2rrqnPBkZyigP3aKCyIXr1BuQU.roa
File: q2rrqnPBkZyigP3aKCyIXr1BuQU.roa (raw, json)
Hash identifier: 80LiCKxRtSrxjSXPcA/j9bXWGJ8Gj9lfC7dB7/TeRAc=
Subject key identifier: AB:6A:EB:AA:73:C1:91:9C:A2:80:FD:DA:28:2C:88:5E:BD:41:B9:05
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A16483E3F0548D612B0DFEB7D14DE3844B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q2rrqnPBkZyigP3aKCyIXr1BuQU.roa
Signing time: Thu 22 Oct 2026 16:48:47 +0000
ROA not before: Thu 22 Oct 2026 16:48:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218729
IP address blocks: 212.134.231.0/24 maxlen: 24
212.135.98.0/24 maxlen: 24
212.135.109.0/24 maxlen: 24
212.135.110.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:83:e3:f0:54:8d:61:2b:0d:fe:b7:d1:4d:e3:84:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 22 16:48:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab6aebaa73c1919ca280fdda282c885ebd41b905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:b4:c8:ad:2f:ad:5b:1a:a1:d1:5d:8e:ff:
2b:57:27:90:89:66:84:94:0f:ab:8d:e9:6b:14:10:
ec:57:b7:ff:3f:ea:db:1e:7f:8a:73:23:62:d7:24:
2b:ff:e4:60:7b:91:03:a6:50:71:f4:09:98:97:29:
57:d4:24:28:7a:c0:5d:b9:c5:6d:e9:8e:a1:65:70:
2b:53:0c:4c:98:58:72:a0:a4:dc:17:eb:97:d7:55:
a7:b9:4a:15:da:d3:b1:f5:70:48:6a:85:47:d7:42:
81:3a:18:6f:b7:00:a7:4d:9f:f0:eb:50:02:3d:ab:
52:e7:79:00:ce:4d:cf:45:ed:ff:81:06:01:ba:e5:
7a:7f:f0:79:2b:04:f8:15:8f:dc:ae:15:c9:dc:84:
5b:a6:14:4b:cd:08:85:16:b4:2e:87:f9:d9:91:e5:
97:30:9a:81:89:e5:80:c5:2f:f2:ec:2c:88:3b:68:
2f:5e:48:7f:5f:ae:ae:34:e6:66:da:27:94:91:36:
33:70:5d:05:96:c5:db:2f:64:1d:db:2b:6e:ac:e3:
7a:9c:1a:09:84:3b:51:d3:ee:63:63:ca:64:88:95:
0f:6d:52:3c:5a:19:8b:05:62:6b:9e:06:ac:5a:e8:
4f:ba:09:5f:86:6b:72:2c:92:45:cb:e4:97:93:75:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:EB:AA:73:C1:91:9C:A2:80:FD:DA:28:2C:88:5E:BD:41:B9:05
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q2rrqnPBkZyigP3aKCyIXr1BuQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.231.0/24
212.135.98.0/24
212.135.109.0-212.135.110.255
212.135.158.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2f:2c:ce:da:47:2e:5a:ba:f9:0f:86:5d:54:1f:ad:e0:82:
2e:51:f3:b6:4a:d3:7f:df:d4:ba:96:84:9b:7c:99:5f:aa:0b:
d2:63:35:e6:3a:6a:4d:d2:f0:10:ab:53:ac:dc:9b:42:75:e1:
0a:5a:d9:16:f1:37:41:67:8b:e5:b1:c2:2a:41:97:6c:c0:b7:
22:31:23:2c:60:ac:46:fc:37:30:40:56:a6:61:ff:48:fd:b8:
73:84:a9:d5:b9:c1:bc:02:57:de:8e:45:60:dc:ef:89:0a:35:
c9:af:12:2f:0c:ae:7a:50:e7:25:a1:a8:07:01:5f:4b:72:41:
a4:20:01:44:2f:d4:b8:6f:f8:b0:23:82:60:e1:af:7d:7b:89:
70:85:99:56:c8:f8:a2:be:5a:8d:87:bd:41:4a:a7:86:d5:98:
25:56:97:05:01:c6:bd:9d:ef:a2:98:bc:5c:d0:0a:f0:96:3c:
27:ea:11:ab:db:9b:4a:9c:b8:19:67:c8:63:36:03:64:ef:26:
9b:fd:ab:d7:2a:dc:ad:30:d3:a9:54:47:ec:cb:fc:eb:37:12:
e7:76:de:08:ce:ea:b8:41:04:f1:84:4f:75:22:34:12:49:3a:
a3:1b:a0:9f:c5:d1:cd:d3:64:87:c5:17:71:b0:c8:c1:39:11:
8c:97:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:06 2026 by rpki-client