Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uUDd7hhrTHXgb-YMkDw3f5IcC20.roa
File: uUDd7hhrTHXgb-YMkDw3f5IcC20.roa (raw, json)
Hash identifier: SkWtNjRnRl4QzAgafSQLmQDX0HIe9TVbRwiZwImllUE=
Subject key identifier: B9:40:DD:EE:18:6B:4C:75:E0:6F:E6:0C:90:3C:37:7F:92:1C:0B:6D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E3A3D9DA0F37DE1A5419ECF58D446D121
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uUDd7hhrTHXgb-YMkDw3f5IcC20.roa
Signing time: Mon 18 May 2026 08:39:37 +0000
ROA not before: Mon 18 May 2026 08:39:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 212.134.134.0/23 maxlen: 24
212.134.144.0/22 maxlen: 22
212.134.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:3d:9d:a0:f3:7d:e1:a5:41:9e:cf:58:d4:46:d1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 18 08:39:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b940ddee186b4c75e06fe60c903c377f921c0b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:fd:e4:3f:71:eb:b9:d8:91:49:52:23:8d:
be:ed:5a:ef:b0:9d:d2:a6:58:37:55:76:bb:01:b7:
68:07:aa:fc:2c:c3:72:3a:4e:a0:14:08:fa:36:fe:
cd:b7:c0:8b:cc:a3:56:3d:26:48:96:ec:db:1e:0b:
bb:ea:ce:06:57:2e:ba:75:d3:60:95:9e:1c:01:ba:
16:0b:6b:87:c5:cd:77:ec:75:98:01:2b:5c:d0:42:
fc:90:bf:5e:bb:37:92:a2:e2:05:94:74:35:6d:f1:
87:a9:7c:60:e4:5e:0c:9d:e6:0a:34:08:36:af:3a:
38:03:a7:b0:56:59:4a:c0:6b:cb:79:9a:25:ea:27:
6b:3a:56:b9:a1:4f:2b:ac:ec:7c:7a:10:14:fe:d9:
b0:3f:82:15:c4:c0:8c:a9:43:b0:7c:7d:38:0f:ca:
64:d5:11:14:4e:57:ed:17:9b:05:39:3f:d1:dd:a2:
33:19:98:3e:8d:3c:ac:cf:fb:c3:24:6b:51:87:54:
45:45:3d:bf:37:1a:2d:e2:89:cb:d7:70:45:57:86:
d0:7a:12:aa:3b:e7:6f:31:1c:2f:e3:22:ec:c9:7a:
5c:b3:a5:2a:96:77:6c:fb:25:5d:ca:0f:8c:c3:6c:
35:21:a1:1b:62:ab:49:80:e0:34:b2:0a:c6:72:ee:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:DD:EE:18:6B:4C:75:E0:6F:E6:0C:90:3C:37:7F:92:1C:0B:6D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uUDd7hhrTHXgb-YMkDw3f5IcC20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.134.0/23
212.134.144.0/22
212.134.180.0/23
Signature Algorithm: sha256WithRSAEncryption
98:26:0a:31:57:69:10:4e:9e:11:22:98:2f:35:80:01:f3:a0:
2b:6c:89:a2:6b:98:5c:55:fc:46:f6:14:a0:31:6f:19:d0:66:
9e:41:a9:53:36:f2:9f:64:8e:a6:1d:69:a6:c8:7c:dc:06:8b:
bb:df:34:1d:1c:18:69:b6:ac:94:a3:1e:0f:4e:50:66:18:e1:
5c:6e:ba:3b:c1:f5:5f:e6:16:d8:ce:65:a5:e7:82:41:55:42:
e6:9b:3f:a4:31:aa:e7:dc:cf:72:59:1c:d7:1b:95:04:8b:34:
e6:27:5f:34:81:a5:5c:62:8c:cd:5b:4a:18:a2:23:fe:cf:4a:
b9:44:84:fb:52:14:ed:b2:64:e0:97:e0:f6:fe:15:cc:63:52:
a1:50:93:e6:47:f5:00:4d:fb:18:7c:12:4d:49:1d:60:8f:0d:
86:6f:2b:49:8e:51:6c:de:64:11:9c:e7:12:c9:81:92:54:27:
86:df:98:35:4a:aa:6d:5e:67:a4:e6:c0:a7:63:8b:f0:25:a1:
9f:3a:f4:ea:9a:86:a5:08:ba:4e:a3:d7:a2:32:0c:53:a2:20:
ca:da:42:80:5e:ac:fd:7b:0e:ab:54:54:83:58:97:48:60:44:
15:30:bd:74:34:3a:d5:49:86:13:b1:3b:e7:44:5b:ea:4c:18:
61:d8:20:fc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ46PZ2g833hpUGez1jURtEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTE4MDgzOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTQwZGRlZTE4NmI0Yzc1ZTA2ZmU2MGM5MDNjMzc3ZjkyMWMwYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vL95D9x67nYkUlSI42+7VrvsJ3S
plg3VXa7AbdoB6r8LMNyOk6gFAj6Nv7Nt8CLzKNWPSZIluzbHgu76s4GVy66ddNg
lZ4cAboWC2uHxc137HWYAStc0EL8kL9euzeSouIFlHQ1bfGHqXxg5F4MneYKNAg2
rzo4A6ewVllKwGvLeZol6idrOla5oU8rrOx8ehAU/tmwP4IVxMCMqUOwfH04D8pk
1REUTlftF5sFOT/R3aIzGZg+jTysz/vDJGtRh1RFRT2/Nxot4onL13BFV4bQehKq
O+dvMRwv4yLsyXpcs6Uqlnds+yVdyg+Mw2w1IaEbYqtJgOA0sgrGcu67WwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLlA3e4Ya0x14G/mDJA8N3+SHAttMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdVVEZDdoaHJUSFhnYi1ZTWtEdzNmNUljQzIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQB1IaGAwQC
1IaQAwQB1Ia0MA0GCSqGSIb3DQEBCwUAA4IBAQCYJgoxV2kQTp4RIpgvNYAB86Ar
bImia5hcVfxG9hSgMW8Z0GaeQalTNvKfZI6mHWmmyHzcBou73zQdHBhptqyUox4P
TlBmGOFcbro7wfVf5hbYzmWl54JBVULmmz+kMarn3M9yWRzXG5UEizTmJ180gaVc
YozNW0oYoiP+z0q5RIT7UhTtsmTgl+D2/hXMY1KhUJPmR/UATfsYfBJNSR1gjw2G
bytJjlFs3mQRnOcSyYGSVCeG35g1SqptXmek5sCnY4vwJaGfOvTqmoalCLpOo9ei
MgxToiDK2kKAXqz9ew6rVFSDWJdIYEQVML10NDrVSYYTsTvnRFvqTBhh2CD8
-----END CERTIFICATE-----
Generated at Fri May 22 14:18:34 2026 by rpki-client