Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yEruiq0Ya_mvRCyOCG8-hwXcOTs.roa
File: yEruiq0Ya_mvRCyOCG8-hwXcOTs.roa (raw, json)
Hash identifier: ijxVoXVO5HuBZFLwUQo+yD9I3RVxsgidP7c3hnDp2FM=
Subject key identifier: C8:4A:EE:8A:AD:18:6B:F9:AF:44:2C:8E:08:6F:3E:87:05:DC:39:3B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F191BD4BF47EA846A1CE9A0DC621C96D2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yEruiq0Ya_mvRCyOCG8-hwXcOTs.roa
Signing time: Tue 30 Jun 2026 15:18:02 +0000
ROA not before: Tue 30 Jun 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:1b:d4:bf:47:ea:84:6a:1c:e9:a0:dc:62:1c:96:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 30 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84aee8aad186bf9af442c8e086f3e8705dc393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:ae:4c:10:33:7d:3c:3b:88:84:f7:79:8a:
61:c1:cf:77:59:47:32:68:22:6d:d1:8c:a2:f4:87:
a6:2c:c0:97:0a:0c:f1:a7:4d:d7:5c:14:0d:31:44:
d7:f7:2a:ae:0f:65:51:4c:53:01:1a:b6:55:ad:a6:
c8:5b:e8:13:6e:06:e8:8f:11:21:c5:d9:8c:8a:bd:
84:b6:98:79:96:09:12:66:aa:0c:25:f0:7a:3d:61:
5d:d2:ba:5d:7b:48:c0:bf:4f:f4:12:12:77:b8:a3:
3c:14:ff:6d:26:68:ca:73:1d:bb:30:a9:a5:27:48:
11:ab:67:0a:8c:f9:3d:44:eb:1b:7e:1c:1d:de:7f:
01:63:f3:4f:66:d8:53:06:ba:a5:10:80:6c:17:b0:
62:80:5a:b9:81:5d:00:09:a7:8d:3f:0c:30:8e:7b:
d0:21:be:38:1f:e7:02:c8:4a:88:c4:3c:88:ad:13:
18:13:6d:9f:28:c1:d4:9f:b8:30:85:97:5e:a2:44:
72:d8:e5:e3:0f:0e:6e:51:7f:49:a6:05:4d:52:db:
44:11:4a:ed:0c:c2:d9:c8:b7:94:69:f7:8a:ee:8d:
ce:9d:9a:6f:9c:f9:ad:13:a6:34:ff:53:5b:e3:b9:
d9:dd:c6:cb:af:5c:f0:b3:2d:38:24:75:d8:81:38:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:EE:8A:AD:18:6B:F9:AF:44:2C:8E:08:6F:3E:87:05:DC:39:3B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yEruiq0Ya_mvRCyOCG8-hwXcOTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8b:65:d4:41:6a:6c:44:11:d5:ac:d7:d9:66:76:b3:99:47:
67:b7:f1:b2:67:d6:70:7e:f2:93:76:64:e4:73:e9:3f:9c:52:
34:c5:03:c8:14:ef:82:c4:49:e1:17:44:77:4d:de:e9:b0:65:
35:d4:31:1c:46:c3:8c:f9:97:4d:b2:b5:27:6c:a4:23:15:59:
2b:22:4d:9b:f4:63:8b:60:e1:f6:1d:30:56:c9:0c:40:fc:25:
e6:5d:5c:35:74:6b:eb:f9:ae:24:42:68:df:6b:5c:5e:c0:d7:
a5:87:fd:1d:78:15:93:b5:f1:25:96:75:81:7e:45:b2:5e:58:
eb:84:92:19:6a:68:b3:40:10:b0:f7:98:4c:93:4a:05:3c:8b:
88:f5:1b:f4:be:24:5c:29:36:bb:b5:d0:a2:c7:5c:49:26:95:
b5:f6:1e:7e:1a:30:a0:f2:fb:5a:06:86:a7:75:10:9b:fe:42:
59:39:0e:82:a2:13:1a:b3:5c:12:cd:1a:3a:05:4f:47:5d:bf:
60:87:0b:8d:ff:32:88:6e:ba:e3:0f:f4:a8:f7:cd:0f:92:c9:
a5:67:7c:ea:4d:33:81:7b:2a:6b:d9:0c:a3:a3:03:ff:4b:d1:
63:d5:de:f4:ec:eb:6a:93:48:04:91:70:b5:ca:0c:21:15:9a:
e6:ba:e4:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8ZG9S/R+qEahzpoNxiHJbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjMwMTUxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODRhZWU4YWFkMTg2YmY5YWY0NDJjOGUwODZmM2U4NzA1ZGMzOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvSuTBAzfTw7iIT3eYphwc93WUcy
aCJt0Yyi9IemLMCXCgzxp03XXBQNMUTX9yquD2VRTFMBGrZVrabIW+gTbgbojxEh
xdmMir2Etph5lgkSZqoMJfB6PWFd0rpde0jAv0/0EhJ3uKM8FP9tJmjKcx27MKml
J0gRq2cKjPk9ROsbfhwd3n8BY/NPZthTBrqlEIBsF7BigFq5gV0ACaeNPwwwjnvQ
Ib44H+cCyEqIxDyIrRMYE22fKMHUn7gwhZdeokRy2OXjDw5uUX9JpgVNUttEEUrt
DMLZyLeUafeK7o3OnZpvnPmtE6Y0/1Nb47nZ3cbLr1zwsy04JHXYgTiMywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhK7oqtGGv5r0QsjghvPocF3Dk7MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEveUVydWlxMFlhX212UkN5T0NHOC1od1hjT1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IZaMA0G
CSqGSIb3DQEBCwUAA4IBAQC9i2XUQWpsRBHVrNfZZnazmUdnt/GyZ9ZwfvKTdmTk
c+k/nFI0xQPIFO+CxEnhF0R3Td7psGU11DEcRsOM+ZdNsrUnbKQjFVkrIk2b9GOL
YOH2HTBWyQxA/CXmXVw1dGvr+a4kQmjfa1xewNelh/0deBWTtfEllnWBfkWyXljr
hJIZamizQBCw95hMk0oFPIuI9Rv0viRcKTa7tdCix1xJJpW19h5+GjCg8vtaBoan
dRCb/kJZOQ6CohMas1wSzRo6BU9HXb9ghwuN/zKIbrrjD/So980PksmlZ3zqTTOB
eypr2QyjowP/S9Fj1d707Otqk0gEkXC1ygwhFZrmuuSs
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:21 2026 by rpki-client