Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kprU0miaEvcJbEUErRWLX2bAraA.roa
File: kprU0miaEvcJbEUErRWLX2bAraA.roa (raw, json)
Hash identifier: jH5eOEPdth2SfO6fcMmEMXkeX9VIDfL+9Ooii/M00UQ=
Subject key identifier: 92:9A:D4:D2:68:9A:12:F7:09:6C:45:04:AD:15:8B:5F:66:C0:AD:A0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E10D02ABBBC4B516DCA78FCB8931331FC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kprU0miaEvcJbEUErRWLX2bAraA.roa
Signing time: Sun 10 May 2026 07:35:38 +0000
ROA not before: Sun 10 May 2026 07:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55177
IP address blocks: 212.134.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:10:d0:2a:bb:bc:4b:51:6d:ca:78:fc:b8:93:13:31:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 10 07:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=929ad4d2689a12f7096c4504ad158b5f66c0ada0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:5b:8a:a6:de:d5:e1:d9:57:3b:2f:a7:56:
19:49:cb:bb:07:94:19:e7:27:0e:37:f0:be:95:ba:
5e:58:4b:19:94:72:53:68:f5:3e:1f:0a:47:6c:b8:
f9:fe:e2:da:0e:21:a7:06:da:55:03:ca:c4:f5:cd:
71:f6:dd:42:6d:45:d0:77:4c:7d:07:fc:cd:b5:45:
8b:0b:2c:ea:db:f7:98:f7:c5:85:f0:86:18:4a:d3:
0c:ec:59:54:df:ac:82:db:aa:bd:ad:e0:c6:a8:45:
fd:5f:e2:f3:ec:97:79:40:d5:8e:ad:c4:09:1a:db:
c2:5d:af:a5:2e:14:fb:e1:05:98:65:31:83:ec:7b:
b5:ab:49:ee:2a:8d:60:9f:cf:2e:98:94:9f:f3:5c:
ca:49:86:80:5e:3f:3d:2d:75:b5:01:c9:80:d6:11:
f6:e9:1c:a0:07:23:5e:66:14:ce:82:7f:4c:32:6d:
9b:ba:a8:f5:44:56:ab:08:71:30:bd:ae:c6:00:de:
be:a8:a0:b9:a0:dc:c3:2d:87:98:03:ee:36:43:bb:
36:ee:f0:e8:63:08:68:67:36:54:ec:46:01:9b:25:
fd:21:6a:8d:e1:21:73:0b:34:b2:cf:d2:9b:46:58:
65:89:ad:91:54:5c:76:07:3e:9c:6b:7e:8c:4c:03:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:D4:D2:68:9A:12:F7:09:6C:45:04:AD:15:8B:5F:66:C0:AD:A0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kprU0miaEvcJbEUErRWLX2bAraA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c8:0d:45:d8:62:85:e4:b7:cc:ef:ef:91:ed:88:77:70:f5:
85:5c:6e:56:e6:0c:85:ea:ea:f4:e0:a5:19:4d:34:2c:11:55:
ff:46:bb:d9:32:de:4d:e9:0e:1c:3f:fa:38:2e:32:2c:23:5e:
37:0a:3a:9b:7e:7d:47:4b:e5:b0:3e:7a:2a:c5:b2:00:30:e3:
1b:db:ef:03:b0:bd:2b:d4:cf:a8:2e:d5:b1:2f:1d:9a:7e:ee:
20:b9:a2:a1:15:19:62:ba:54:40:89:db:7f:b5:01:46:44:6c:
a7:5b:ea:a6:68:5b:07:b2:80:f1:7d:51:54:ea:84:a2:93:30:
ef:2a:9d:ae:2d:e3:f0:a1:81:6d:ef:9e:90:0d:f1:f9:50:47:
65:c6:6c:57:35:d4:87:f7:49:5b:8b:4d:87:c5:82:44:6f:73:
9a:81:40:16:a6:ab:80:6e:96:37:da:55:ea:88:7e:07:b3:32:
43:b8:68:8d:70:27:a0:7b:6d:1c:0c:63:c2:5f:ca:d2:48:f8:
43:5f:fb:ac:89:2a:2c:2a:47:b7:da:dd:8f:13:42:04:f3:aa:
63:c2:83:6b:69:6f:df:e3:1a:60:ea:6f:b8:77:80:08:26:02:
a4:f7:22:a8:bb:46:49:e3:f0:09:f0:3f:38:b7:ec:a1:d7:c7:
02:85:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:21 2026 by rpki-client