Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3auNuD11OfmbTJdaqaDPZcJbvVc.roa
File: 3auNuD11OfmbTJdaqaDPZcJbvVc.roa (raw, json)
Hash identifier: bK5Qdmpn7+kanZzpr/bSuLwvhJMXDbZymcBUJ/ywgn4=
Subject key identifier: DD:AB:8D:B8:3D:75:39:F9:9B:4C:97:5A:A9:A0:CF:65:C2:5B:BD:57
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DF80ECCF7206816C1F7926017EC04C300
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3auNuD11OfmbTJdaqaDPZcJbvVc.roa
Signing time: Tue 05 May 2026 12:13:32 +0000
ROA not before: Tue 05 May 2026 12:13:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27010
IP address blocks: 212.135.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:0e:cc:f7:20:68:16:c1:f7:92:60:17:ec:04:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 5 12:13:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddab8db83d7539f99b4c975aa9a0cf65c25bbd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:61:7e:11:11:3d:27:24:88:54:0c:db:da:
7f:0c:9a:db:29:8d:e4:df:f6:71:7d:b1:ff:90:2d:
da:83:18:4b:f7:2c:d3:33:20:fc:e4:64:d5:7e:a6:
e6:50:2f:61:90:44:47:52:13:33:26:a0:64:7c:50:
11:da:9f:9c:0b:a7:33:94:d5:a4:59:e5:c1:60:e0:
69:a7:74:2e:38:fe:73:94:4d:79:20:4d:5d:38:cf:
01:87:0a:cf:3b:9c:ea:8d:88:c0:8a:cd:e0:d1:db:
2a:83:4b:c4:19:23:8e:27:f9:67:e3:42:7c:d0:2f:
72:73:23:03:4b:25:1a:a0:e6:a8:9c:31:35:5c:bf:
29:bc:0d:a5:92:55:2b:c8:65:b4:e4:61:0b:c3:6c:
08:3f:1b:c2:75:87:82:cd:6d:81:96:e2:ff:fd:d9:
74:db:19:48:37:ab:c7:0c:cf:c7:a9:38:42:30:3e:
90:27:2c:40:a4:0d:7f:59:23:41:74:5f:da:56:e1:
d6:df:a4:fc:9a:ca:b7:d4:4a:1b:38:4e:0f:2e:7c:
01:5e:cf:bb:0b:36:a5:55:7d:4f:2f:b7:7c:ac:ab:
9b:5b:0a:fe:7c:3f:f2:0c:96:68:d9:0b:1f:ae:4d:
02:d8:6b:ad:3d:2e:94:f4:35:ec:ac:f0:c9:b0:54:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:8D:B8:3D:75:39:F9:9B:4C:97:5A:A9:A0:CF:65:C2:5B:BD:57
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3auNuD11OfmbTJdaqaDPZcJbvVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.142.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:d3:24:cf:94:7a:4f:5e:44:85:6d:af:90:2a:f1:a5:c7:2d:
d1:e5:45:1e:1e:ad:b0:26:63:79:eb:2c:88:c2:33:0b:77:ed:
27:9b:83:ea:8b:ea:72:da:49:81:32:df:51:b2:88:14:dd:27:
36:03:f3:a1:4b:3a:89:0b:16:12:5f:d6:67:71:0d:fb:17:a9:
a0:0a:48:b4:c3:88:56:f0:4c:a9:29:fe:3e:66:3a:13:d0:cb:
40:af:d2:bf:db:99:fc:13:17:37:04:7d:90:53:8d:a8:29:9f:
31:21:25:0c:e8:cf:0c:a1:64:0b:c2:68:ef:a1:da:d3:9f:86:
d6:d5:35:f4:25:51:b8:28:a3:3b:ac:13:32:29:1d:df:b9:22:
03:f0:d6:9d:b5:59:0a:78:d9:96:cc:76:ee:40:3d:5f:e9:f0:
9f:d7:66:85:25:2c:3b:a7:a7:c0:a5:c7:9b:02:35:5c:4f:43:
61:aa:a8:e1:73:fd:3a:44:29:9f:4d:b9:a5:7f:89:53:91:ba:
65:69:3f:e3:05:48:90:47:91:42:ee:e9:aa:52:7c:0b:02:07:
a6:80:83:2c:4c:4b:c1:bf:df:68:90:ce:09:0d:75:d6:4e:6c:
62:27:c1:88:56:97:9a:7d:9c:3e:5a:9d:fa:2b:06:58:f3:29:
25:93:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:11 2026 by rpki-client