Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0aJn-xFIpeyR0kY9_-dpLILk8Mo.roa
File: 0aJn-xFIpeyR0kY9_-dpLILk8Mo.roa (raw, json)
Hash identifier: i5hMj3jnyfFlNVEbKFM4Kx2N0C9ocQ3BjKTAztgNfn0=
Subject key identifier: D1:A2:67:FB:11:48:A5:EC:91:D2:46:3D:FF:E7:69:2C:82:E4:F0:CA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E1651268958BB26C69417BE6C78856F86
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0aJn-xFIpeyR0kY9_-dpLILk8Mo.roa
Signing time: Mon 11 May 2026 09:14:37 +0000
ROA not before: Mon 11 May 2026 09:14:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 212.134.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:51:26:89:58:bb:26:c6:94:17:be:6c:78:85:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 11 09:14:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1a267fb1148a5ec91d2463dffe7692c82e4f0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:51:14:90:87:71:f8:44:78:ed:39:4e:99:
78:0e:28:21:be:93:35:25:96:7d:ea:b5:41:5f:e9:
b4:88:39:34:7a:4b:6c:c5:d3:ec:e0:d5:bc:c8:ab:
3e:9e:68:32:51:5d:a2:a6:9c:6d:d9:3d:9d:7e:39:
0b:94:d5:42:0d:99:f7:be:68:d9:28:56:73:0e:c1:
e8:9a:d0:40:16:ae:1d:64:47:df:1b:9a:b8:bd:ae:
76:ed:2f:bf:02:10:54:6a:7b:8e:8c:41:29:70:5b:
d1:99:a8:ef:42:b8:f7:8e:58:6f:03:ee:7a:e0:89:
01:bf:04:54:b1:03:21:25:ab:3f:1c:ba:e3:18:6a:
b8:ce:8c:ac:b0:e7:ca:33:b0:99:39:8b:aa:fe:f7:
3a:b7:a8:88:36:a3:20:7a:3f:be:7d:89:c9:8e:58:
c2:9b:c1:56:c2:ce:d6:00:c4:73:1b:ba:3c:31:34:
f1:b2:8d:d3:ce:61:f8:2f:c4:c1:2a:dd:e4:d5:0c:
a0:be:08:71:1a:91:53:33:63:d6:5d:fc:66:c0:51:
5a:72:0b:c2:6f:1a:48:43:fb:74:f7:dd:d8:e7:eb:
a0:4e:69:97:da:32:e0:ed:25:ac:01:94:59:e9:aa:
53:e2:4c:63:af:21:a8:ed:4f:a7:32:7c:3d:25:33:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:67:FB:11:48:A5:EC:91:D2:46:3D:FF:E7:69:2C:82:E4:F0:CA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0aJn-xFIpeyR0kY9_-dpLILk8Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.156.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8d:d7:54:cd:85:7d:a5:73:ec:1e:b3:35:5c:19:31:20:d5:
bf:fa:1f:a3:74:25:aa:21:67:4c:b0:3d:a4:2d:3f:fe:15:34:
17:c5:2d:b8:5a:2e:30:b4:5f:fa:cd:67:29:b8:ce:30:4a:7b:
3c:c3:6a:05:e4:5a:99:a2:87:f5:b2:65:e0:12:de:6d:26:1f:
c3:f0:60:25:18:d0:84:65:a5:85:6d:66:fd:d9:5b:51:3c:7e:
6b:e9:5a:18:0e:5c:5f:ac:98:77:e1:e0:4a:9b:da:b6:ef:98:
19:b5:82:62:f6:ca:9f:42:d5:e3:44:ee:64:7e:09:01:90:29:
e6:27:62:6f:7d:8a:c9:6e:45:89:b4:88:7b:52:42:d1:4d:f5:
83:cc:ff:6e:d4:d4:d1:17:ae:98:3e:a5:24:44:ee:91:a5:74:
c9:35:4a:65:b3:af:56:2c:c5:6b:26:ea:7a:8d:c3:9d:be:e3:
e3:af:8e:f0:5b:78:32:94:2c:b8:d2:9c:e5:a6:3c:9a:70:38:
8b:8a:52:c8:15:82:72:00:36:58:1f:3e:0a:dc:be:4b:90:24:
87:42:36:8a:c3:09:8c:36:19:9d:8a:0d:3d:56:12:25:4d:88:
2d:bb:3a:61:d5:ee:65:69:5e:89:c7:b7:cd:b8:7f:42:c1:25:
f8:21:47:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4WUSaJWLsmxpQXvmx4hW+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTExMDkxNDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWEyNjdmYjExNDhhNWVjOTFkMjQ2M2RmZmU3NjkyYzgyZTRmMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG5RFJCHcfhEeO05Tpl4DighvpM1
JZZ96rVBX+m0iDk0ektsxdPs4NW8yKs+nmgyUV2ippxt2T2dfjkLlNVCDZn3vmjZ
KFZzDsHomtBAFq4dZEffG5q4va527S+/AhBUanuOjEEpcFvRmajvQrj3jlhvA+56
4IkBvwRUsQMhJas/HLrjGGq4zoyssOfKM7CZOYuq/vc6t6iINqMgej++fYnJjljC
m8FWws7WAMRzG7o8MTTxso3TzmH4L8TBKt3k1QygvghxGpFTM2PWXfxmwFFacgvC
bxpIQ/t0993Y5+ugTmmX2jLg7SWsAZRZ6apT4kxjryGo7U+nMnw9JTMs0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGiZ/sRSKXskdJGPf/naSyC5PDKMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMGFKbi14RklwZXlSMGtZOV8tZHBMSUxrOE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IacMA0G
CSqGSIb3DQEBCwUAA4IBAQA1jddUzYV9pXPsHrM1XBkxINW/+h+jdCWqIWdMsD2k
LT/+FTQXxS24Wi4wtF/6zWcpuM4wSns8w2oF5FqZoof1smXgEt5tJh/D8GAlGNCE
ZaWFbWb92VtRPH5r6VoYDlxfrJh34eBKm9q275gZtYJi9sqfQtXjRO5kfgkBkCnm
J2JvfYrJbkWJtIh7UkLRTfWDzP9u1NTRF66YPqUkRO6RpXTJNUpls69WLMVrJup6
jcOdvuPjr47wW3gylCy40pzlpjyacDiLilLIFYJyADZYHz4K3L5LkCSHQjaKwwmM
Nhmdig09VhIlTYgtuzph1e5laV6Jx7fNuH9CwSX4IUcC
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:06 2026 by rpki-client