Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xAEoWTcAjIu3cpWiHsrGWUApSj8.roa
File: xAEoWTcAjIu3cpWiHsrGWUApSj8.roa (raw, json)
Hash identifier: j/D5w+nGh7/3Hf3xHRRNjJGVkc3DKyGdX1mkWm7kYgQ=
Subject key identifier: C4:01:28:59:37:00:8C:8B:B7:72:95:A2:1E:CA:C6:59:40:29:4A:3F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E8664B52F2885F441419E93F1C6E86098
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xAEoWTcAjIu3cpWiHsrGWUApSj8.roa
Signing time: Tue 02 Jun 2026 03:33:27 +0000
ROA not before: Tue 02 Jun 2026 03:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 212.134.168.0/23 maxlen: 24
212.135.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:86:64:b5:2f:28:85:f4:41:41:9e:93:f1:c6:e8:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 2 03:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c401285937008c8bb77295a21ecac65940294a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:11:8c:8c:31:0b:d9:2f:e4:58:6f:ca:44:
03:00:b1:19:30:80:8d:11:9d:bd:34:0d:62:5a:e6:
a6:a2:cd:db:b5:28:f8:63:af:9e:cd:2c:95:95:02:
af:e9:f6:b2:88:b1:d6:f8:72:43:40:31:1a:83:f3:
c6:8f:ef:12:ab:a1:6b:4e:53:66:eb:eb:9e:74:74:
ee:65:85:ec:e3:c7:e4:0c:e8:c1:ff:bc:6d:7e:16:
bc:03:86:80:5a:a7:4f:f1:4b:35:9f:80:91:db:4a:
c2:43:75:bf:b0:a4:b8:9d:05:f3:5b:7a:6d:a7:f8:
17:5f:23:4c:54:65:4d:30:3c:b4:38:a8:ef:fd:92:
80:cc:d9:03:a1:d8:63:ea:7a:ab:0c:ec:fb:d2:0e:
81:25:89:d5:9b:f3:55:09:d4:62:5a:a4:e0:f8:dd:
1f:fb:be:94:07:cb:e3:89:dd:b6:b4:46:30:97:96:
0b:0c:d0:72:13:0a:7f:c0:dc:55:9e:be:b6:a4:81:
9e:e4:1b:22:70:da:5f:12:54:86:1e:2e:4d:02:98:
35:4b:e1:fc:a0:45:1e:e0:b3:6d:92:42:c0:fb:cc:
e9:54:3b:45:3c:c3:58:6d:88:08:ac:eb:a1:31:d0:
77:45:1c:4b:5b:3b:5b:ed:24:60:53:47:5f:f7:63:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:28:59:37:00:8C:8B:B7:72:95:A2:1E:CA:C6:59:40:29:4A:3F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xAEoWTcAjIu3cpWiHsrGWUApSj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.168.0/23
212.135.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:8c:ef:fe:59:94:1a:c5:36:dc:dc:30:02:86:ee:9d:a9:e2:
05:d6:b1:4b:7c:4a:e4:59:3d:0f:2e:e7:01:33:5b:62:43:f5:
bc:a5:b9:9c:b8:01:fc:d4:98:82:54:9d:a4:74:99:b7:51:3d:
3d:b2:9f:00:cc:83:3d:40:17:87:10:08:df:85:f8:9e:5a:e5:
58:ab:be:fb:49:82:74:e8:88:04:34:c8:c2:de:6c:6b:97:fd:
5b:b1:0e:9d:8a:7a:2d:d5:d1:70:43:77:4e:cd:c9:7b:57:9f:
fd:a3:83:fb:7c:a8:f4:e3:82:0a:7b:d2:f4:77:8c:f4:fa:e0:
a5:27:5e:67:42:a5:b9:de:a3:7f:aa:0f:8d:b7:9d:a1:b9:d5:
9d:24:35:67:c5:df:22:51:84:d3:d2:06:89:fc:7a:6a:cc:22:
2e:4b:a0:10:a3:29:d4:e7:65:af:6c:66:41:13:62:31:fb:df:
d4:4c:03:b4:b8:16:61:5e:09:17:54:7d:01:c6:45:c0:ee:1f:
6c:d0:29:99:60:0e:11:e7:a8:25:7c:d8:1f:f1:35:d4:51:bd:
8e:f9:ea:a4:ae:be:ac:c2:ce:ee:71:d0:dd:94:62:05:2f:25:
0b:e4:8e:30:32:b7:8b:d8:45:a3:98:7a:9c:09:16:3a:82:63:
2e:3b:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:44 2026 by rpki-client