Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yEta-PmHsVljrRNtxbDWBnzQc-k.roa
File: yEta-PmHsVljrRNtxbDWBnzQc-k.roa (raw, json)
Hash identifier: Diwe81CNosXzOswZa32G2vE+0fw6KyKZ2q6NW94aPaE=
Subject key identifier: C8:4B:5A:F8:F9:87:B1:59:63:AD:13:6D:C5:B0:D6:06:7C:D0:73:E9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F418E2EE3C7A0D3424C444F6F38BF4B21
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yEta-PmHsVljrRNtxbDWBnzQc-k.roa
Signing time: Wed 08 Jul 2026 11:47:44 +0000
ROA not before: Wed 08 Jul 2026 11:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58325
IP address blocks: 212.134.220.0/22 maxlen: 22
212.135.130.0/23 maxlen: 24
212.135.132.0/23 maxlen: 24
212.135.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:8e:2e:e3:c7:a0:d3:42:4c:44:4f:6f:38:bf:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 8 11:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84b5af8f987b15963ad136dc5b0d6067cd073e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e4:34:dd:be:33:ff:d9:ee:dd:fb:b0:3c:88:
15:d9:ae:80:6f:10:a0:b0:1a:b4:4e:01:a8:ec:21:
e9:9c:15:ff:84:bf:46:fe:92:36:55:69:67:8c:44:
26:18:86:c2:16:0b:22:28:82:1c:72:26:09:ec:83:
9d:0d:97:d7:da:b0:b8:ec:15:02:bf:7c:99:4e:b1:
c1:01:1c:6a:c9:a5:9c:1f:3b:65:08:5d:4e:e8:f5:
27:49:21:11:9a:8f:c3:4f:c6:58:79:09:18:9a:fa:
a5:56:26:2d:d1:1c:44:73:cd:b0:66:4b:40:18:42:
c3:99:5a:d2:61:c6:4e:86:39:3f:28:0e:1f:11:06:
de:47:ba:3f:a2:2e:ce:9a:72:96:50:73:82:51:98:
79:f4:64:a0:2b:d6:93:3c:fd:c1:1b:84:f4:d6:6b:
56:38:5e:07:f9:ef:6b:42:fb:9f:0e:eb:9a:89:7c:
d0:01:de:33:55:b6:57:9f:e3:0c:0e:6a:f8:d0:98:
be:59:3d:4a:9a:c9:f1:3b:58:72:2e:bd:45:02:75:
e2:d5:f9:63:cd:c7:75:02:ef:24:90:14:44:f6:4b:
54:17:72:1e:35:de:54:79:e9:3a:47:23:d5:e6:50:
34:85:be:14:96:f1:2c:24:95:47:7e:0c:42:6f:33:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4B:5A:F8:F9:87:B1:59:63:AD:13:6D:C5:B0:D6:06:7C:D0:73:E9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yEta-PmHsVljrRNtxbDWBnzQc-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.220.0/22
212.135.130.0-212.135.133.255
212.135.146.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:28:6d:ee:c2:b1:4c:de:aa:d0:12:8c:0d:fb:af:bb:36:e0:
20:10:52:25:23:14:ef:91:dd:30:65:15:f8:f2:38:b5:91:7a:
cf:57:0d:eb:61:19:e3:a1:26:99:ba:80:17:ee:79:e6:4c:77:
32:cd:34:29:b0:dd:f9:d5:02:e0:a7:7f:fb:ed:47:f7:67:6a:
e2:84:22:34:ab:c7:c8:c9:72:d2:d1:40:75:37:03:84:df:16:
88:a9:1d:3b:ac:b7:42:4f:99:d8:a6:d2:41:72:33:68:be:62:
ba:38:2d:bc:c4:26:d6:46:16:c8:ff:05:8c:c0:d6:f6:85:11:
f8:fc:42:0a:7b:a6:ba:be:60:47:e2:bc:e0:68:1a:57:a6:9a:
9c:5a:5c:67:ec:5e:43:de:03:61:c7:35:38:0b:e6:0b:bd:f3:
5a:47:d3:a6:4f:13:56:94:9a:bd:16:73:ac:9a:80:b5:c8:79:
aa:0f:e0:b6:5d:ca:ad:3a:a5:b8:2c:4f:af:9b:dc:24:bf:eb:
d7:65:a2:3d:ba:39:37:da:0e:67:52:c2:c7:c6:f5:c0:f3:77:
7a:36:8d:b3:a3:1a:59:53:6a:bf:ca:4c:b4:a4:38:63:84:86:
36:da:36:60:ad:1c:4a:2e:99:d0:04:83:eb:0b:d7:f2:79:a2:
a4:78:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:20 2026 by rpki-client