Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yIIn5C0SjiNyuNaK21oizQPBK9g.roa
File: yIIn5C0SjiNyuNaK21oizQPBK9g.roa (raw, json)
Hash identifier: KURDuRxPk087VSE7Mg5cy/UXRBVefsyEBt/C/0WOeT8=
Subject key identifier: C8:82:27:E4:2D:12:8E:23:72:B8:D6:8A:DB:5A:22:CD:03:C1:2B:D8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E6846D3D62083EA95077215F9D7BF31E4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yIIn5C0SjiNyuNaK21oizQPBK9g.roa
Signing time: Wed 27 May 2026 07:12:12 +0000
ROA not before: Wed 27 May 2026 07:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 212.134.90.0/24 maxlen: 24
212.135.134.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:46:d3:d6:20:83:ea:95:07:72:15:f9:d7:bf:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 27 07:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c88227e42d128e2372b8d68adb5a22cd03c12bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:55:9d:0a:48:81:1a:82:c0:61:54:ca:fa:
14:1d:63:a8:f4:b2:7e:09:b5:72:43:d6:7f:f2:fc:
16:9c:4b:59:9d:27:28:86:16:86:95:8e:08:06:68:
35:a6:cd:59:ac:70:15:78:24:01:c6:a5:fc:bd:2a:
0f:6b:63:0e:39:b1:82:dc:ee:8d:f3:ea:cb:1d:14:
37:c5:f3:8a:53:6d:9c:a1:21:6c:11:39:58:ef:ee:
82:50:8c:29:f3:3a:4c:5c:67:ad:ce:8f:42:39:68:
86:10:d5:5a:d6:f8:08:a7:38:e9:5c:7f:2a:b8:50:
01:e7:d9:b2:5d:23:b1:75:74:b8:20:d8:77:e8:76:
fb:d2:68:38:c4:80:27:04:47:a4:83:ad:15:5d:d6:
cb:e4:7a:ad:f0:d7:eb:22:92:a6:98:03:27:46:7d:
27:27:db:be:d8:83:f8:8c:d8:1b:91:92:3f:4e:59:
c5:32:5e:90:8c:64:ca:2f:80:bc:c2:4d:3f:53:49:
3f:34:e9:cd:9c:bc:b5:99:d0:9a:93:59:f9:08:fd:
8c:69:99:8a:2c:8f:9c:d3:23:47:0f:ef:22:d5:ba:
62:6d:af:c9:72:12:91:a9:9a:a4:98:13:f1:85:52:
83:9e:ec:b3:12:3c:e7:90:81:34:c7:89:02:8f:c4:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:82:27:E4:2D:12:8E:23:72:B8:D6:8A:DB:5A:22:CD:03:C1:2B:D8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yIIn5C0SjiNyuNaK21oizQPBK9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.90.0/24
212.135.134.0/24
212.135.160.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0c:35:84:32:02:ab:88:68:21:c6:4f:9a:65:fe:21:ca:11:
92:24:42:21:2a:fd:45:c6:c2:0a:ee:b6:ed:08:7f:fe:e3:55:
6e:71:c2:d7:64:69:9d:ab:2c:16:63:35:78:a1:f7:85:bb:e1:
3c:8a:68:e3:bf:52:db:58:14:62:6e:00:16:31:67:36:f9:9d:
02:5a:f9:0e:cc:53:d3:8c:91:bd:2d:4f:7e:11:e3:00:8d:a2:
ad:ae:63:da:30:8a:37:3f:8e:e2:bc:9f:49:84:6c:2d:05:5f:
79:05:45:ec:83:d1:75:6a:b0:f1:94:42:44:21:8d:ee:68:7a:
9f:83:ab:1c:1e:73:bb:a0:f8:88:1e:13:52:a8:02:14:46:a3:
ce:a5:2c:09:1d:41:0e:53:a1:f1:6d:0d:8d:6b:18:5a:80:a1:
fe:21:ae:19:54:8c:cd:f6:93:85:a3:d8:35:bf:03:34:18:41:
eb:e8:2b:eb:0f:20:b7:a8:aa:a0:99:27:4d:bb:95:4b:69:9f:
fa:bb:2f:ae:4a:73:7c:97:d6:d9:53:5e:cb:12:79:da:8a:79:
8d:2c:40:3f:c3:32:46:ba:bf:71:cf:ed:74:ad:69:57:b8:38:
dc:28:13:0d:17:d7:ae:f2:0b:df:fd:ff:2a:37:b7:8f:76:17:
91:20:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:42 2026 by rpki-client