Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdy7b3rrXyAU4RR0woYtnQ8rE1M.roa
File: kdy7b3rrXyAU4RR0woYtnQ8rE1M.roa (raw, json)
Hash identifier: eI+8xjFUK0U6EZJkKSAi9hGaxlTkmY6Zfxo3wj1CTis=
Subject key identifier: 91:DC:BB:6F:7A:EB:5F:20:14:E1:14:74:C2:86:2D:9D:0F:2B:13:53
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DD7E03A86D0C8DB57861FD25E03ECDA6D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdy7b3rrXyAU4RR0woYtnQ8rE1M.roa
Signing time: Wed 29 Apr 2026 06:14:49 +0000
ROA not before: Wed 29 Apr 2026 06:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 212.134.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:e0:3a:86:d0:c8:db:57:86:1f:d2:5e:03:ec:da:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 29 06:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91dcbb6f7aeb5f2014e11474c2862d9d0f2b1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:d5:a1:ab:c9:e3:c8:5d:40:93:3d:dc:ed:
31:60:7f:b5:a4:b3:6e:09:68:a9:d3:53:77:75:aa:
90:67:6f:26:c0:04:30:f1:6f:cc:ae:29:69:9c:17:
b3:08:a7:4c:53:37:e5:e7:25:09:1b:78:15:0d:ce:
82:f1:10:46:6b:bb:88:b4:63:e1:c3:cf:ab:9f:84:
d0:46:b1:19:d8:e1:05:d2:5a:01:d4:f5:ae:7e:7a:
29:02:1d:06:1e:7a:8f:7e:61:eb:59:f0:8e:e6:31:
f9:7d:84:bc:dd:79:43:1e:29:2c:94:91:08:79:7d:
15:99:f5:a0:13:ed:fa:cf:f5:ec:ae:a8:29:27:bf:
a3:3e:5c:20:0e:fc:4d:c2:b5:28:a2:b0:33:b9:43:
a0:f5:d7:55:50:a2:b8:09:33:38:6a:68:bf:7f:89:
0c:c2:d3:41:6c:e3:87:d3:01:1c:55:57:37:2a:9e:
82:bc:1c:91:94:e3:b2:6d:6f:d4:3b:fe:23:1f:68:
60:c2:47:41:ac:82:be:9c:b1:e2:b0:19:b4:c6:34:
64:71:bf:de:51:32:9d:20:82:53:c5:50:0a:66:02:
23:c7:9c:0d:04:c2:66:bd:d3:3c:24:51:c0:15:c1:
bd:15:5b:db:c6:81:1e:68:29:f9:e4:fa:ab:eb:1b:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:BB:6F:7A:EB:5F:20:14:E1:14:74:C2:86:2D:9D:0F:2B:13:53
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdy7b3rrXyAU4RR0woYtnQ8rE1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c0:7c:fa:49:50:12:d5:6e:e2:2a:e6:ab:ef:5f:98:56:51:
6d:b0:af:d8:cb:a9:11:b4:be:a0:76:68:4b:79:a1:ea:99:9b:
79:02:fa:fb:2a:ac:5e:38:db:94:14:22:63:09:cc:b0:00:5f:
d4:54:c1:14:fd:12:61:4e:f7:4a:e7:ab:a9:f0:20:17:5f:1c:
92:af:99:c4:39:f5:0c:56:b7:bb:81:be:77:11:a4:ef:ac:a2:
90:c0:9c:6c:d1:34:db:66:39:69:07:46:11:de:42:82:99:3a:
ef:22:38:af:b4:e1:e7:67:f6:f9:be:f0:2b:7e:3c:0a:74:cb:
47:ec:f0:4c:65:76:87:0c:ce:f3:22:35:a4:34:a4:92:a0:d6:
4c:2b:72:78:94:cd:a7:05:87:35:96:5d:40:84:f7:88:04:ea:
52:1f:6e:0f:d5:aa:23:e7:a4:ed:89:02:01:07:77:e6:a5:b1:
e4:01:c3:90:a0:59:5f:0c:e2:df:76:6e:17:c2:29:11:71:72:
89:62:dd:cd:4e:c1:d1:be:30:79:64:3e:6e:33:c2:80:e3:8c:
e5:de:27:0a:63:e2:ee:a7:54:38:1e:10:63:86:d5:5f:53:2a:
38:e2:80:cb:ce:31:22:e9:09:b7:55:54:ca:e7:e2:4d:8a:11:
fd:81:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:48 2026 by rpki-client