Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5_cb3u6uwmRkPOggK5IMgMj8CMc.roa
File: 5_cb3u6uwmRkPOggK5IMgMj8CMc.roa (raw, json)
Hash identifier: Ie6SgHUphe/tJM13W71wN9QfA5Ew+lPvEr+WPixu/58=
Subject key identifier: E7:F7:1B:DE:EE:AE:C2:64:64:3C:E8:20:2B:92:0C:80:C8:FC:08:C7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DD85AE84B25C5070818A173149BE4CEBF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5_cb3u6uwmRkPOggK5IMgMj8CMc.roa
Signing time: Wed 29 Apr 2026 08:28:49 +0000
ROA not before: Wed 29 Apr 2026 08:28:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 212.134.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:5a:e8:4b:25:c5:07:08:18:a1:73:14:9b:e4:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 29 08:28:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7f71bdeeeaec264643ce8202b920c80c8fc08c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:96:5b:f7:cb:a1:a4:57:20:72:b5:40:65:
63:4b:d4:17:16:15:a4:5a:97:48:2d:d7:73:c5:e9:
a4:4b:81:e0:6e:46:86:78:fb:76:60:5e:5e:a3:cb:
19:f9:34:73:53:f6:5a:80:e8:c7:fd:e7:88:01:e6:
bf:5c:a6:b3:9e:67:d0:cb:be:f2:62:8d:55:c9:c6:
b8:47:65:3b:5f:15:93:fe:14:8b:f7:8f:49:8d:4b:
08:cf:4e:f3:25:fd:32:97:d4:02:1a:01:58:17:05:
13:a8:75:e4:42:ac:51:03:21:5a:0f:eb:a4:8c:6d:
f2:ef:cf:e0:75:ea:e0:18:f1:ee:b6:96:00:de:2b:
e9:e9:5e:11:1c:d6:b5:6c:70:bb:39:73:af:98:49:
a2:52:38:2f:f7:1a:81:4a:aa:f9:3b:0a:89:b0:e2:
5a:6c:55:c6:63:cd:c1:e2:34:76:61:a1:d4:e9:8d:
3c:2b:0a:4a:dc:e9:1b:4c:f5:23:d5:1e:42:85:da:
6b:af:3d:57:03:4e:34:65:5a:f4:99:a8:31:00:66:
2f:4d:2a:e1:15:97:78:07:6a:ce:de:fa:88:3c:b6:
b5:c5:5d:c3:c9:39:7d:26:43:3b:ad:ac:a2:2e:9d:
da:a1:5f:10:35:33:d4:b2:ee:58:ec:95:ee:49:45:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:1B:DE:EE:AE:C2:64:64:3C:E8:20:2B:92:0C:80:C8:FC:08:C7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5_cb3u6uwmRkPOggK5IMgMj8CMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e3:46:44:8a:9b:9b:f7:aa:51:38:2a:12:79:7b:cf:37:c2:
61:37:40:75:80:3a:8c:00:f9:e8:a9:0e:8f:67:60:8a:28:d2:
c9:e2:47:6c:af:4d:9b:f7:c6:9b:c4:8e:fc:96:c8:71:15:d9:
9c:0e:4f:48:68:5c:77:8f:c9:6e:7a:d9:88:c8:49:98:99:fc:
3f:be:6a:e8:57:9e:37:06:fc:e6:75:a5:d4:4e:83:b4:8c:73:
e3:51:7c:bf:a2:8c:01:88:a0:c1:f3:c2:e0:8e:47:3f:46:42:
74:1d:2e:89:d9:57:30:35:05:b8:9b:2b:4e:db:2c:d8:4c:0d:
e4:a4:db:a1:cd:ec:6d:f7:25:29:c8:3f:7c:0d:d5:61:2b:50:
54:f9:32:75:e4:b0:44:b0:3a:4a:32:48:7a:1a:20:81:47:95:
5a:5e:b3:50:e0:dd:cf:8c:88:ce:4b:02:ff:0d:f3:c1:9f:3b:
96:d8:da:7f:5e:0c:f6:a2:8e:98:e4:eb:fb:04:47:b6:49:ef:
41:57:63:6a:12:b8:4b:6e:a5:a0:8d:45:72:55:0d:f9:fb:0e:
1b:be:cf:d3:ca:61:04:76:e7:1e:42:94:54:67:35:54:3c:cf:
3d:70:e8:72:00:11:30:43:ef:c4:77:ec:1c:e0:e1:e9:21:9b:
9f:80:d4:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3YWuhLJcUHCBihcxSb5M6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNDI5MDgyODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Y3MWJkZWVlYWVjMjY0NjQzY2U4MjAyYjkyMGM4MGM4ZmMwOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt2WW/fLoaRXIHK1QGVjS9QXFhWk
WpdILddzxemkS4HgbkaGePt2YF5eo8sZ+TRzU/ZagOjH/eeIAea/XKaznmfQy77y
Yo1Vyca4R2U7XxWT/hSL949JjUsIz07zJf0yl9QCGgFYFwUTqHXkQqxRAyFaD+uk
jG3y78/gdergGPHutpYA3ivp6V4RHNa1bHC7OXOvmEmiUjgv9xqBSqr5OwqJsOJa
bFXGY83B4jR2YaHU6Y08KwpK3OkbTPUj1R5Chdprrz1XA040ZVr0magxAGYvTSrh
FZd4B2rO3vqIPLa1xV3DyTl9JkM7rayiLp3aoV8QNTPUsu5Y7JXuSUUBgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOf3G97ursJkZDzoICuSDIDI/AjHMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvNV9jYjN1NnV3bVJrUE9nZ0s1SU1nTWo4Q01jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IaFMA0G
CSqGSIb3DQEBCwUAA4IBAQCz40ZEipub96pROCoSeXvPN8JhN0B1gDqMAPnoqQ6P
Z2CKKNLJ4kdsr02b98abxI78lshxFdmcDk9IaFx3j8luetmIyEmYmfw/vmroV543
BvzmdaXUToO0jHPjUXy/oowBiKDB88Lgjkc/RkJ0HS6J2VcwNQW4mytO2yzYTA3k
pNuhzext9yUpyD98DdVhK1BU+TJ15LBEsDpKMkh6GiCBR5VaXrNQ4N3PjIjOSwL/
DfPBnzuW2Np/Xgz2oo6Y5Ov7BEe2Se9BV2NqErhLbqWgjUVyVQ35+w4bvs/TymEE
duceQpRUZzVUPM89cOhyABEwQ+/Ed+wc4OHpIZufgNRz
-----END CERTIFICATE-----
Generated at Wed May 13 07:52:43 2026 by rpki-client