Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nTpeCvbvWPsY_utn2l978x0XM10.roa
File: nTpeCvbvWPsY_utn2l978x0XM10.roa (raw, json)
Hash identifier: iAXWvAtFP8N/YhxIFSopkCS7MA4B4K2OtrwLRJu0vls=
Subject key identifier: 9D:3A:5E:0A:F6:EF:58:FB:18:FE:EB:67:DA:5F:7B:F3:1D:17:33:5D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E07708E1EB3CAAAD57DBD4831C81D16CF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nTpeCvbvWPsY_utn2l978x0XM10.roa
Signing time: Fri 08 May 2026 11:54:37 +0000
ROA not before: Fri 08 May 2026 11:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 212.134.50.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.135.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:70:8e:1e:b3:ca:aa:d5:7d:bd:48:31:c8:1d:16:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 8 11:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d3a5e0af6ef58fb18feeb67da5f7bf31d17335d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:48:7b:f4:b6:91:c9:5a:7d:a6:59:c3:8e:
5a:02:69:80:3d:cb:54:20:a3:3b:42:83:4f:1d:9f:
2b:71:5b:da:8d:5b:65:8c:05:a9:83:c0:03:5c:f7:
bb:ca:9b:68:99:e4:92:97:70:02:39:84:69:0c:55:
b7:20:08:6e:21:e1:3c:ff:31:cd:d8:5e:31:7b:7e:
74:ec:4d:ea:48:cc:b7:00:38:13:62:77:f8:d3:30:
53:87:50:07:d3:ae:36:a4:1f:a7:f1:3d:23:a8:c9:
42:8d:38:1d:90:d6:02:df:76:86:68:6a:95:63:60:
19:8a:5c:c0:a9:6a:c1:84:7a:1b:d7:6b:3e:d2:99:
bc:3d:23:35:90:dc:cf:15:32:ec:b3:9f:24:13:c3:
21:2c:34:7f:f3:cf:cb:53:7c:af:98:c8:10:23:0b:
09:19:b7:21:6c:b5:b9:87:38:cf:eb:8a:19:80:61:
64:c2:d3:42:90:0d:43:26:04:f9:4d:37:09:9d:80:
82:81:2a:5c:98:5b:a5:e6:38:bc:ce:c4:17:5c:e6:
11:88:83:56:a5:12:b2:50:3a:0e:75:ac:34:f0:b0:
f0:7e:d6:17:72:1a:f2:50:44:77:7c:a1:a2:fa:91:
48:07:56:aa:2f:77:d7:19:d7:4c:c0:ee:0e:31:6c:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:5E:0A:F6:EF:58:FB:18:FE:EB:67:DA:5F:7B:F3:1D:17:33:5D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nTpeCvbvWPsY_utn2l978x0XM10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.50.0/24
212.134.155.0/24
212.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
03:51:71:41:ad:dc:df:9e:01:6f:56:85:73:2a:7d:7f:3d:61:
e5:19:42:7a:92:9a:7a:a6:cf:4e:d5:1f:b4:ad:e4:1b:ff:4d:
f6:5a:25:28:d7:bd:9e:f4:aa:86:c6:25:64:fb:7b:d1:5b:93:
a0:55:a3:1f:a4:11:61:23:0b:b1:42:b7:94:b2:08:7d:ed:13:
c2:6d:18:23:cf:c7:97:36:36:ef:2c:d0:4d:ca:fb:67:21:56:
4b:29:d5:07:f1:83:20:b0:7c:6b:ca:a3:8c:cb:2a:d8:c7:8c:
d5:18:63:4e:55:20:43:59:19:b1:31:a7:65:ce:84:01:9f:2f:
97:8d:8e:ab:d2:73:99:af:5e:1e:bf:68:51:bb:14:31:e5:69:
ba:66:a3:04:45:66:5c:e8:c9:4e:e6:19:fa:58:68:53:97:6d:
57:dc:1b:ab:51:56:cb:eb:cd:a2:58:5e:4a:8c:af:1b:8e:ba:
a4:3c:44:4d:7f:fb:7b:2d:b6:79:6f:c8:4a:d2:1c:9a:e3:8f:
de:a3:de:0f:07:5a:49:2c:c9:34:65:e7:4d:13:86:48:d8:d4:
6d:15:4c:af:a2:ee:f2:c1:67:2d:2d:1c:ac:ab:14:95:fc:3f:
9f:a4:ad:9f:9b:4d:51:09:9b:11:0a:68:01:25:64:03:97:95:
ba:60:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:59 2026 by rpki-client