Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EAFI2a8YA3Tk9CltUh2otYxbUz8.roa
File: EAFI2a8YA3Tk9CltUh2otYxbUz8.roa (raw, json)
Hash identifier: VG98+jDUgkMHO/uDkoTNuE3ruxnWjL234vCbekT+QJk=
Subject key identifier: 10:01:48:D9:AF:18:03:74:E4:F4:29:6D:52:1D:A8:B5:8C:5B:53:3F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DDAA4D8B51C3DB850B10C8048F48EC5D0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EAFI2a8YA3Tk9CltUh2otYxbUz8.roa
Signing time: Wed 29 Apr 2026 19:08:49 +0000
ROA not before: Wed 29 Apr 2026 19:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 212.134.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:a4:d8:b5:1c:3d:b8:50:b1:0c:80:48:f4:8e:c5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 29 19:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=100148d9af180374e4f4296d521da8b58c5b533f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:4e:83:e0:f6:04:2f:6f:9d:a4:81:61:83:
8c:a1:07:b7:dd:74:00:22:35:2f:8e:c2:f3:9e:6f:
e0:63:78:1a:65:e1:70:00:6c:ad:ea:1c:0a:9b:7f:
66:89:9a:16:cf:dc:95:43:e0:b3:cf:30:7b:39:83:
a3:60:54:85:52:57:04:52:06:7b:2c:4b:1d:e7:e5:
c8:76:a3:5b:d6:8f:7f:75:5c:7d:9d:d3:fa:5b:45:
ab:78:70:57:6e:5f:c2:89:5e:e9:85:6d:be:ae:5a:
9a:b0:e4:ac:fc:fc:fc:0f:13:fd:95:b3:53:86:58:
0f:23:55:6d:36:17:e5:e5:55:bc:96:92:4c:c1:26:
81:fb:81:da:29:5f:df:3f:73:90:28:30:41:d2:8b:
14:5e:d3:3f:9f:5a:9e:eb:f2:02:6d:db:88:8e:dd:
eb:43:49:13:b7:12:e8:ea:5b:d1:53:0c:12:85:b4:
97:0e:52:c7:b8:f4:c3:74:cd:91:6c:93:d7:9d:35:
3b:66:b1:a7:ba:d4:bf:c7:16:c9:74:81:4a:15:49:
5d:8a:a9:9b:3b:71:a9:ba:5a:70:b5:d3:6a:6b:2a:
89:02:d2:21:86:ec:0b:c8:a2:96:1d:4a:4c:51:1a:
9f:ae:71:72:92:64:dc:18:21:19:c7:7a:d1:69:6c:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:48:D9:AF:18:03:74:E4:F4:29:6D:52:1D:A8:B5:8C:5B:53:3F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EAFI2a8YA3Tk9CltUh2otYxbUz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.131.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:09:44:18:3a:ea:3b:e2:97:64:c4:09:fa:3a:16:80:9f:93:
e4:cd:6c:67:44:f7:35:5e:80:64:c3:cf:dc:62:95:05:72:5e:
d8:70:f5:10:53:20:86:a3:ac:f3:dc:b9:b3:af:69:c4:20:c5:
90:c9:58:f9:7b:a8:a9:f8:b9:09:21:3d:97:03:54:28:f5:49:
36:0c:19:54:b3:0f:31:78:92:c1:a8:3c:db:21:91:51:a9:fb:
b8:e8:20:d3:15:4c:a9:e7:08:71:62:d8:67:3b:20:09:01:4c:
c0:fd:36:19:4b:ed:09:8d:f7:89:f8:0b:ef:17:52:2a:ac:1a:
c7:db:e0:f6:07:47:c1:b3:cc:f3:46:cc:e2:51:ba:6c:55:9f:
d1:78:e5:38:f3:bb:6c:f7:59:91:f0:aa:a9:ae:2d:fd:18:21:
29:eb:0f:0a:19:f3:48:bc:ed:4f:c5:8b:aa:ea:67:31:22:59:
c6:2c:97:06:21:6b:14:38:8d:ce:10:97:4d:07:b5:b0:cf:4a:
eb:1b:a1:52:0c:ff:cb:78:88:6c:2f:02:6c:d7:28:7b:74:2d:
59:04:33:d3:8b:79:e4:ea:43:ad:68:c8:65:c7:52:9a:18:75:
3e:45:82:49:a1:e0:98:a7:e2:87:d7:b3:9a:eb:09:ea:ab:e5:
63:a3:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:35 2026 by rpki-client