Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hnaua8-fhYuU4zSkU-HlPqohpgk.roa
File: hnaua8-fhYuU4zSkU-HlPqohpgk.roa (raw, json)
Hash identifier: 0zdnsBNMDySDcRhrbZRITh5RhAZW+wJhHthzqRPrTEI=
Subject key identifier: 86:76:AE:6B:CF:9F:85:8B:94:E3:34:A4:53:E1:E5:3E:AA:21:A6:09
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E165211EE1A67DF638739FCB224893885
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hnaua8-fhYuU4zSkU-HlPqohpgk.roa
Signing time: Mon 11 May 2026 09:15:37 +0000
ROA not before: Mon 11 May 2026 09:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 212.134.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:52:11:ee:1a:67:df:63:87:39:fc:b2:24:89:38:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 11 09:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8676ae6bcf9f858b94e334a453e1e53eaa21a609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:06:47:7a:07:2e:f0:de:fd:13:5e:e2:c1:
86:46:69:55:a4:df:a0:24:03:8c:59:74:fc:a3:b1:
bf:d1:56:7b:c8:94:cd:6f:a4:26:bc:72:89:3c:7f:
b0:a4:39:d2:03:5a:73:3b:31:d0:cc:96:ed:e6:61:
50:a3:73:98:be:7e:c3:2d:43:03:86:a8:24:b5:e6:
aa:2e:60:70:98:2e:33:28:ab:d2:b2:12:23:ac:63:
12:93:a7:ff:f7:22:22:f3:ce:7e:dd:cc:b8:ad:97:
8a:08:78:db:c8:f7:3d:3a:1d:b9:84:16:dc:80:44:
13:3b:8e:04:52:49:96:c7:1b:52:f4:2a:bd:23:7b:
c2:f6:28:38:c7:d5:96:8a:8b:53:54:73:6f:6b:51:
1c:6a:cb:e6:fb:44:b2:ad:80:a1:c1:a0:5a:93:81:
9c:e6:a8:5a:7b:d5:b0:3e:a6:4c:7a:61:74:52:9a:
cc:4a:b1:d4:c2:4a:c9:42:8d:dd:c4:6a:c7:fe:85:
c2:fa:af:38:18:62:42:c1:3a:8e:d0:4c:7a:cf:74:
10:39:4e:60:c4:06:e5:a0:7e:2c:4d:d7:c5:87:2f:
9e:0e:80:1e:5d:bc:17:d6:94:85:b9:85:05:0a:89:
4b:de:e2:16:05:46:24:98:b3:53:3b:c4:63:eb:ff:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:AE:6B:CF:9F:85:8B:94:E3:34:A4:53:E1:E5:3E:AA:21:A6:09
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hnaua8-fhYuU4zSkU-HlPqohpgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:94:a5:29:86:9f:82:d1:23:21:dd:c1:38:70:0d:e5:71:d0:
d1:47:5d:06:91:2c:b3:17:54:fc:18:c5:f2:08:9c:9d:96:a0:
f3:31:f7:47:9f:86:73:15:21:91:0e:71:cc:c5:46:30:dd:1a:
cf:85:fb:2f:18:83:c9:1b:03:88:d6:d2:92:7d:3a:c6:cc:68:
45:7f:68:f7:03:c7:de:e9:7b:df:d9:48:01:1d:40:82:4d:53:
e3:88:b7:ce:aa:1f:d7:9b:f9:8b:c5:01:68:69:43:40:8f:fe:
8f:74:b1:87:58:60:3b:ac:60:15:4a:01:cf:19:0d:04:7a:92:
59:2b:fa:e1:c3:52:59:f7:f9:61:81:4a:e4:8f:43:9c:54:1b:
12:6f:f4:d0:80:8f:4d:fc:b2:62:43:09:e6:c8:41:b1:1b:32:
a1:09:34:c9:86:22:60:4d:21:8a:42:37:ae:65:aa:e5:60:bd:
06:7b:db:c5:2a:25:fb:fb:85:f3:99:98:1b:63:08:72:41:ba:
bd:47:d7:1d:d6:4a:28:00:68:db:65:34:41:c4:a4:eb:da:4b:
dc:e2:dc:4d:3f:fc:1b:4a:57:8b:34:cc:f2:57:49:11:61:3d:
03:f6:6a:09:87:56:a5:1e:7c:ed:e9:f8:88:c8:fb:26:b3:f2:
c8:f1:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:16:56 2026 by rpki-client