Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/226jvLxm7pj5k76TXY0rAUQ7tkA.roa
File: 226jvLxm7pj5k76TXY0rAUQ7tkA.roa (raw, json)
Hash identifier: bQz/GtwnjKdzjCfXelSjH40+aA8fst5CfHlGEpFH/KU=
Subject key identifier: DB:6E:A3:BC:BC:66:EE:98:F9:93:BE:93:5D:8D:2B:01:44:3B:B6:40
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D26CE7AEDE4F7C8EA2BC8BD862DB47162
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/226jvLxm7pj5k76TXY0rAUQ7tkA.roa
Signing time: Wed 25 Mar 2026 21:02:39 +0000
ROA not before: Wed 25 Mar 2026 21:02:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 212.135.24.0/22 maxlen: 22
212.135.64.0/22 maxlen: 24
212.135.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:ce:7a:ed:e4:f7:c8:ea:2b:c8:bd:86:2d:b4:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 25 21:02:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db6ea3bcbc66ee98f993be935d8d2b01443bb640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:6c:04:46:19:4a:0d:5a:dc:ff:82:54:0c:
80:ac:de:f5:2d:8a:58:3e:cc:02:5a:ff:90:33:19:
19:5b:99:2e:72:b6:05:27:3d:8d:5e:81:d0:b3:4f:
b8:f3:59:cf:77:c8:3f:c3:63:71:6c:47:b0:c3:41:
b8:4e:c6:b5:f0:65:ca:ad:5f:d7:c7:9a:aa:03:e9:
b3:e0:37:ef:7d:c7:3d:af:c6:89:2b:48:44:be:74:
9d:53:1b:dc:0d:fd:af:26:ae:80:36:6e:34:be:e4:
31:f2:c4:15:b3:cd:2e:a0:12:ba:8c:e2:83:5f:33:
b6:9c:68:e7:2e:a4:03:36:b0:9a:63:26:fa:2f:13:
fb:5e:8b:ff:60:6e:1c:d7:0c:93:d7:f1:4d:12:8d:
25:4d:62:8e:75:cf:ed:b5:a3:e3:ee:1e:37:ce:4f:
bc:4d:a0:b2:6b:1f:da:1e:2d:55:70:cb:73:1c:55:
70:28:78:0f:99:c3:ad:5e:c9:28:55:4d:c5:89:ee:
54:b7:61:fe:65:ed:3b:e3:0f:3e:f5:d9:0e:3e:0d:
26:79:f1:d9:15:94:55:a6:4e:04:49:cf:a9:ef:d5:
b1:8f:8d:0c:ec:94:3e:62:10:8e:2e:fb:bf:5f:a6:
23:44:ab:92:38:cf:3c:a6:20:58:0c:34:c4:57:cc:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:A3:BC:BC:66:EE:98:F9:93:BE:93:5D:8D:2B:01:44:3B:B6:40
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/226jvLxm7pj5k76TXY0rAUQ7tkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.24.0/22
212.135.64.0/22
212.135.104.0/22
Signature Algorithm: sha256WithRSAEncryption
22:f3:bf:d4:08:e3:af:86:64:b5:62:47:a8:db:5c:10:04:e7:
83:ed:10:3d:4d:4d:2d:6f:27:c8:5f:19:79:29:2b:b7:f0:87:
24:f8:10:67:f1:1b:b8:d4:7a:2c:3d:53:05:59:7a:1d:d5:dc:
ce:1b:55:55:65:ba:28:12:06:d8:a9:71:e8:e3:5d:4b:1b:1d:
d7:f2:34:30:28:e9:25:c1:32:5d:6b:5c:62:56:ad:17:7e:eb:
60:84:61:35:46:80:5e:18:8c:cd:b3:dd:76:af:8a:84:9c:0a:
e0:13:52:e1:d3:f8:b7:cb:7c:28:f2:13:ec:46:90:17:12:99:
71:95:ea:46:16:85:f9:10:6c:19:54:29:55:d3:f7:c0:63:2e:
52:80:fb:f6:f9:27:46:be:b5:c1:d8:a2:31:4d:a1:54:15:68:
06:f8:dc:71:6d:94:37:fb:55:4e:05:59:c3:7d:19:32:3c:64:
01:3c:a5:ea:fb:e3:3d:66:ab:9a:af:ca:06:d5:3b:dc:62:6d:
39:f7:d6:04:83:3f:32:e4:54:e2:13:53:ac:a3:09:20:72:88:
f4:ca:85:fe:41:59:3e:9b:95:63:59:02:00:b4:6a:50:5e:c9:
7a:b5:d0:42:79:5e:fc:e8:20:5c:f6:37:41:42:5e:50:19:e6:
34:3f:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:46:41 2026 by rpki-client