Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdFgQclWyh5ZVOo2Hun7r8KIGcQ.roa
File: kdFgQclWyh5ZVOo2Hun7r8KIGcQ.roa (raw, json)
Hash identifier: LqG3yeolLcCd9Sv7JcGxIeUf8wRhvgzrz32pIzX5FTM=
Subject key identifier: 91:D1:60:41:C9:56:CA:1E:59:54:EA:36:1E:E9:FB:AF:C2:88:19:C4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D19433C59CFF38F030E17930C1E308185
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdFgQclWyh5ZVOo2Hun7r8KIGcQ.roa
Signing time: Mon 23 Mar 2026 05:55:29 +0000
ROA not before: Mon 23 Mar 2026 05:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 212.134.129.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:43:3c:59:cf:f3:8f:03:0e:17:93:0c:1e:30:81:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 23 05:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91d16041c956ca1e5954ea361ee9fbafc28819c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:34:90:2e:a1:3f:eb:9f:5f:2d:12:be:71:
af:44:43:5f:14:ad:35:9b:f5:98:20:af:23:ad:c6:
ed:bd:9b:d9:da:a5:08:ab:03:8d:df:9c:3d:dc:76:
23:9c:09:61:f6:f3:b3:92:78:0d:19:c1:10:16:af:
f7:e2:c2:25:0f:87:81:c8:38:54:42:7c:2e:95:d4:
92:e5:69:61:b6:14:81:67:6f:84:de:26:47:44:34:
27:3d:4d:c8:1a:15:40:61:c8:69:c9:2e:33:c2:a8:
0b:e7:ca:17:b6:3a:d2:ab:dd:bd:48:3a:de:41:72:
3d:dd:96:14:aa:bc:6d:90:42:3c:eb:19:4c:80:ea:
23:01:bb:12:c7:d4:78:a7:bc:b7:23:01:99:b9:aa:
91:df:32:85:e0:7e:ce:ea:7f:34:5b:c9:88:d6:cd:
c4:08:3d:d0:f0:79:09:96:4d:6d:43:22:dc:34:dd:
2c:f5:72:3b:7b:17:08:d9:83:f6:20:54:cb:c4:8c:
96:89:11:83:96:fd:89:1c:5b:7f:10:17:dd:85:3b:
33:91:44:d4:62:45:5e:80:ca:8b:7d:aa:1b:ca:11:
0a:52:7f:c2:9c:f1:8a:6f:a5:e4:8d:87:56:39:c0:
fd:7d:b3:65:b4:03:1b:83:69:59:ea:bc:e2:58:f9:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:60:41:C9:56:CA:1E:59:54:EA:36:1E:E9:FB:AF:C2:88:19:C4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdFgQclWyh5ZVOo2Hun7r8KIGcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.129.0/24
212.135.165.0/24
Signature Algorithm: sha256WithRSAEncryption
76:15:b8:71:f9:6d:75:5d:68:50:0b:13:e4:c9:e7:07:5c:57:
c4:72:9e:d0:7f:41:25:86:33:62:e5:fb:5e:83:f7:37:dd:f5:
a0:4d:78:69:d8:48:06:09:27:41:98:ca:87:03:e3:fd:db:31:
76:c9:1a:2f:ec:6f:57:1d:8b:59:fd:72:01:3a:1b:90:06:a9:
a1:d6:48:4d:6d:a1:4d:92:b3:c8:6e:96:79:fe:d3:ca:3e:01:
76:c8:05:de:56:81:63:0a:0b:d6:1a:bb:39:c5:8c:c1:f8:f2:
b5:e5:ec:f6:04:51:84:49:f2:93:cc:f6:14:e8:f6:eb:95:fc:
6e:5e:ee:96:8c:95:05:f7:71:d2:d7:5a:ea:42:f2:d1:2a:d0:
b9:3c:8c:ea:e1:94:42:2e:25:3c:23:cd:23:36:c0:df:d3:4d:
10:6c:a2:eb:2c:ad:dc:ce:d7:68:2b:98:36:b4:9d:6f:54:b7:
39:7a:2b:00:66:bb:2f:a2:b8:98:68:a7:53:75:c8:13:bc:b5:
2e:f5:cc:43:c7:2d:45:ac:96:c9:22:06:b4:07:89:63:88:a7:
0d:75:fd:36:41:4f:2e:e5:cc:2f:39:f1:ef:d1:ed:61:64:c5:
0e:8b:b4:83:ca:92:04:d8:04:bf:8d:4c:d4:fa:1d:7a:e4:e1:
a0:5b:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:50 2026 by rpki-client