Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/osRDkgPgJkInV_3vJvjsHm5dTcE.roa
File: osRDkgPgJkInV_3vJvjsHm5dTcE.roa (raw, json)
Hash identifier: O3CT732P3FbR7VHoQXjSlL8iXk6+Wn7IrkQsUPqd370=
Subject key identifier: A2:C4:43:92:03:E0:26:42:27:57:FD:EF:26:F8:EC:1E:6E:5D:4D:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E1AC8A3766B721CFA5FC79F35AF087748
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/osRDkgPgJkInV_3vJvjsHm5dTcE.roa
Signing time: Tue 12 May 2026 06:03:37 +0000
ROA not before: Tue 12 May 2026 06:03:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 212.134.37.0/24 maxlen: 24
212.134.50.0/24 maxlen: 24
212.135.23.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:c8:a3:76:6b:72:1c:fa:5f:c7:9f:35:af:08:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 12 06:03:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2c4439203e026422757fdef26f8ec1e6e5d4dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:6e:29:16:8a:5e:35:44:a1:94:86:bb:05:
34:db:c9:8c:59:e7:75:dd:03:3d:10:fa:8d:a0:6e:
af:a4:e1:22:72:30:2d:fc:7e:5f:aa:30:45:61:03:
92:6c:d6:39:a6:9b:42:86:02:b9:87:fa:f3:dd:43:
16:5f:93:57:98:9b:f7:6c:0d:df:10:ef:35:43:6e:
2b:d3:10:01:4f:6a:f6:17:aa:71:e3:4a:30:65:1f:
5f:ff:15:63:f9:b2:62:0f:d8:0a:63:d3:49:9a:54:
83:e2:f5:45:f5:31:e7:b1:13:0c:a3:ef:14:e1:7b:
b6:12:44:8b:1a:e6:28:98:2b:fd:95:3d:86:9c:20:
49:b6:01:60:39:3b:be:fa:5c:6e:1d:23:92:8d:17:
ff:6e:57:d0:23:08:ee:d5:48:44:49:fa:86:6b:29:
4e:d6:7c:c3:9c:3e:2e:21:80:54:8f:ed:28:17:25:
03:73:2e:5b:70:44:e2:5b:92:b4:db:a0:e9:5d:52:
c9:0a:b4:1c:cc:74:11:3f:4d:ea:6d:d8:5a:c3:54:
98:93:30:85:f1:37:2e:e6:a1:5c:b4:95:1e:c3:71:
47:b4:c0:87:77:be:fa:49:ee:e7:b3:6a:39:fa:77:
ec:95:8b:0c:45:6c:09:2f:bd:16:e2:b0:2b:26:d8:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:43:92:03:E0:26:42:27:57:FD:EF:26:F8:EC:1E:6E:5D:4D:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/osRDkgPgJkInV_3vJvjsHm5dTcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.37.0/24
212.134.50.0/24
212.135.23.0/24
212.135.171.0-212.135.172.255
Signature Algorithm: sha256WithRSAEncryption
78:b3:7b:e8:0d:5e:9c:95:d4:e8:39:f2:5f:6d:2b:9e:ce:2a:
ac:ba:7f:7b:d3:0c:d5:0d:b1:fb:c5:1c:20:51:2d:cb:24:84:
47:e3:5a:cd:5e:6d:6f:91:1d:b8:d9:f7:74:85:7c:b0:11:84:
d8:f6:a3:7c:d9:15:bd:9d:6d:0a:d1:a4:17:ef:17:b2:26:28:
e8:b2:76:0e:41:e8:cd:90:b5:0e:a3:25:4f:79:20:de:2c:38:
35:29:b4:6c:5b:84:e0:00:4b:58:3f:e1:49:fd:61:10:4e:7a:
18:01:5c:8d:b5:f1:04:dc:bd:fb:61:93:4b:6e:b1:59:07:8a:
b9:88:ea:30:e7:41:50:78:b7:2c:76:91:ea:c6:b7:a2:64:f4:
49:60:dd:77:f3:47:05:40:cb:a3:2d:7c:d2:79:21:ee:55:a7:
60:84:33:65:7c:6a:9a:b0:05:f2:3a:f3:39:d6:de:2a:c8:50:
83:fc:cb:b9:55:20:51:3a:67:3a:fc:4d:22:63:83:88:b1:13:
76:5a:a9:92:6e:cf:6f:31:ec:29:25:e7:ca:99:11:72:d2:50:
b4:de:1f:3a:95:25:f6:08:56:66:28:ca:59:a4:8a:97:7c:5a:
55:d2:02:68:b1:24:5d:6e:b4:a6:d7:bf:dc:fd:97:38:d8:d0:
03:2f:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:51 2026 by rpki-client