Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/udDV_5resmqRlqikDlz01EbSXSM.roa
File: udDV_5resmqRlqikDlz01EbSXSM.roa (raw, json)
Hash identifier: TE7C5lfn0FwxOGVNLW6fMuW3uYqTUbbN6Wh8U2N54is=
Subject key identifier: B9:D0:D5:FF:9A:DE:B2:6A:91:96:A8:A4:0E:5C:F4:D4:46:D2:5D:23
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A045AEFD05AA8E6B81968C95F0252D5798
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/udDV_5resmqRlqikDlz01EbSXSM.roa
Signing time: Fri 28 Aug 2026 00:04:50 +0000
ROA not before: Fri 28 Aug 2026 00:04:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 212.134.32.0/22 maxlen: 22
212.134.106.0/24 maxlen: 24
212.134.107.0/24 maxlen: 24
212.134.108.0/24 maxlen: 24
212.134.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:ae:fd:05:aa:8e:6b:81:96:8c:95:f0:25:2d:57:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 28 00:04:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9d0d5ff9adeb26a9196a8a40e5cf4d446d25d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:d4:84:11:65:b7:3e:8c:d9:b0:7b:ba:6f:
92:0c:0d:11:0d:d2:d8:ac:bc:2b:42:f3:e7:ee:cc:
c9:31:c0:38:5d:6a:d0:60:26:81:5f:dc:fc:f5:42:
be:f7:98:6f:6d:3f:ca:7d:36:c7:f8:4f:36:e4:21:
44:00:55:08:9b:45:9a:9d:0d:3d:88:c8:a7:2a:84:
93:b6:9d:fd:c3:51:da:65:95:1e:3e:c4:5c:9e:f0:
82:59:fd:55:af:dc:58:5a:4e:2c:f9:d4:af:c4:51:
31:fb:84:9e:28:8c:18:b2:f6:76:53:ef:c2:15:46:
57:a9:76:ab:41:b6:4c:0a:01:64:94:9b:46:af:90:
28:96:b7:a9:cc:6b:15:1d:d8:78:8f:2e:a6:c9:89:
c1:97:4a:33:6c:b2:34:05:65:3c:ae:61:f9:f2:5e:
26:39:62:ab:97:b6:67:43:39:3d:b2:2a:8b:56:e8:
bc:2a:8d:5b:be:91:f8:ee:33:85:7e:20:d9:e3:d2:
b2:58:db:1a:cf:ea:dd:a4:51:25:6d:ed:af:36:0b:
a2:4f:dc:0e:4f:2c:fd:3c:35:93:97:b8:31:97:29:
6d:08:c4:84:20:ac:0b:8e:27:73:e6:ad:0c:a3:2a:
3a:85:bb:ed:eb:f7:e2:6e:af:ef:a4:0e:f6:07:47:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:D5:FF:9A:DE:B2:6A:91:96:A8:A4:0E:5C:F4:D4:46:D2:5D:23
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/udDV_5resmqRlqikDlz01EbSXSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.32.0/22
212.134.106.0-212.134.109.255
Signature Algorithm: sha256WithRSAEncryption
b1:f7:8f:37:62:66:13:bf:78:ac:fb:e4:f5:96:5c:b5:f9:40:
95:2f:c4:3a:82:9d:c3:9a:3d:1b:4c:51:fd:e0:5b:ac:9a:c8:
f6:59:6a:73:10:17:b6:bb:f4:99:7b:27:4f:52:06:59:f8:88:
a5:9c:24:6c:93:5c:1b:4c:4a:de:ce:4e:f1:91:9a:3f:34:b0:
b7:4f:ab:78:68:ea:e5:c1:e4:86:f2:3f:df:1b:e2:41:8a:9f:
04:bf:c9:85:dc:e9:d7:5e:0c:0b:d2:42:8a:c6:6c:11:ca:0c:
4f:b0:b8:ba:e5:86:15:f3:64:2d:2f:80:a9:31:fd:83:e6:55:
c3:8f:b3:6e:20:17:0f:44:70:c4:08:3e:78:b3:21:05:b1:73:
91:b3:46:3b:d0:0b:85:0c:4d:d5:fe:4e:db:52:27:12:61:81:
f3:1c:ff:18:6d:16:e6:60:10:8a:6a:8e:46:fb:a5:98:6b:6e:
84:47:50:3d:4d:2b:14:91:28:9a:f3:17:24:00:28:e3:23:a2:
db:9c:98:9f:9a:8f:79:e0:2c:20:e1:d1:73:86:1b:1d:a9:58:
d2:a5:6d:b6:14:3e:93:ce:3f:75:63:ff:76:82:39:d6:b2:bd:
25:8d:e6:9e:fa:73:03:f5:23:5f:fc:a7:1d:2f:26:7c:80:a1:
c6:b2:62:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:55 2026 by rpki-client