Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2VCfOblL5nPRb-sXJEKunPawUTk.roa
File: 2VCfOblL5nPRb-sXJEKunPawUTk.roa (raw, json)
Hash identifier: vKJM9ch2DWfBGyaKVf03vvuSzsjyTGsaXNrhOewXgbM=
Subject key identifier: D9:50:9F:39:B9:4B:E6:73:D1:6F:EB:17:24:42:AE:9C:F6:B0:51:39
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1C9845B53A865E2C920D33A2EE8AEAE14
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2VCfOblL5nPRb-sXJEKunPawUTk.roa
Signing time: Wed 11 Nov 2026 07:30:56 +0000
ROA not before: Wed 11 Nov 2026 07:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 212.134.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:84:5b:53:a8:65:e2:c9:20:d3:3a:2e:e8:ae:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 11 07:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9509f39b94be673d16feb172442ae9cf6b05139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:b0:c0:a8:9e:53:da:4f:f3:d5:5b:d2:f7:
91:ad:ca:9f:b6:1c:d8:75:be:1b:e4:41:3c:63:e6:
54:46:6a:5e:79:3d:62:84:bb:d7:fb:4a:77:7b:fb:
cf:20:68:52:d2:4d:30:61:65:ce:ed:c7:e8:d4:7f:
32:07:38:5c:96:56:21:25:af:e7:22:f1:9c:cc:d2:
71:c9:a9:62:8b:1a:29:d0:1e:4a:70:e0:36:d9:b0:
c8:ba:56:3d:c7:e3:fd:43:42:eb:ca:61:7e:69:57:
11:83:0d:bb:c2:8d:99:ca:af:61:9d:32:2e:28:6c:
9d:54:5a:bd:be:14:19:cb:a3:7b:48:7f:a2:79:ff:
8d:ab:60:51:27:c1:f8:bf:f9:9b:b1:b4:88:d6:f0:
c3:b5:7f:01:8f:17:be:70:34:cb:ac:bd:4e:d2:33:
93:3c:58:12:97:9b:27:b7:60:3a:cc:59:3c:77:f7:
8d:f6:32:8f:27:5d:8c:af:05:19:23:d6:b9:30:e6:
6c:a0:55:06:48:9c:06:27:62:c5:12:21:ba:7f:64:
f7:9a:59:a3:a9:33:c5:76:14:dd:9d:5e:62:28:b6:
a0:ed:51:14:67:08:27:5d:c6:1b:eb:cc:77:cc:ad:
44:5e:63:67:46:8a:23:e8:2c:32:66:ae:9c:01:64:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:50:9F:39:B9:4B:E6:73:D1:6F:EB:17:24:42:AE:9C:F6:B0:51:39
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2VCfOblL5nPRb-sXJEKunPawUTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ae:bb:19:96:50:8a:4d:9e:bc:ff:09:20:95:78:0e:f9:04:
42:ef:27:3b:80:53:af:33:ea:c3:81:a2:5e:f4:ea:74:1b:5f:
37:97:c4:e2:ee:0b:c4:2e:d8:d4:5c:2a:cf:eb:a7:b5:2a:4f:
e7:ba:37:4e:cc:e8:a4:34:32:51:90:2e:26:a2:c3:71:36:d6:
46:8c:56:47:0d:4c:9c:43:63:78:2f:c0:43:f7:94:73:7c:d1:
3a:be:f0:a5:6f:f0:61:9f:11:40:d8:b6:a2:44:b9:5e:be:67:
8f:d8:73:f6:52:8f:99:c4:d7:5b:56:d9:5c:ec:3a:f3:51:a7:
15:8a:d2:46:2d:8f:d9:e7:ee:7c:20:8e:37:15:fd:ae:dd:82:
f9:e3:ef:b9:24:d4:9b:58:26:a7:51:07:62:08:72:3b:c8:e1:
57:87:c8:3f:c3:c5:94:f2:49:54:56:ce:2b:72:18:4e:49:60:
43:23:29:75:ce:f8:b6:a8:b1:15:0f:63:00:21:2e:df:45:0c:
2a:ef:52:f4:a4:47:25:09:4e:6d:26:91:fe:72:64:a3:49:ea:
33:37:e2:a0:dc:cc:67:ac:9f:5a:18:a0:eb:43:66:36:26:02:
e3:5e:1e:04:6b:0a:ac:46:6c:4b:95:f4:d2:7a:5e:99:47:09:
c8:88:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:56 2026 by rpki-client