Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/phgQOOHYtC4ZKQZOoPHXYfBYHO0.roa
File: phgQOOHYtC4ZKQZOoPHXYfBYHO0.roa (raw, json)
Hash identifier: 7G8yhFKzqKaOSeFrdNntssgk79qpfeR9HjJvZ6PlWuw=
Subject key identifier: A6:18:10:38:E1:D8:B4:2E:19:29:06:4E:A0:F1:D7:61:F0:58:1C:ED
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D1EDB43AB484BA079C3BF63EBA660AABC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/phgQOOHYtC4ZKQZOoPHXYfBYHO0.roa
Signing time: Tue 24 Mar 2026 07:59:39 +0000
ROA not before: Tue 24 Mar 2026 07:59:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 212.134.180.0/22 maxlen: 22
212.134.184.0/22 maxlen: 22
212.134.192.0/22 maxlen: 22
212.134.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:db:43:ab:48:4b:a0:79:c3:bf:63:eb:a6:60:aa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 24 07:59:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6181038e1d8b42e1929064ea0f1d761f0581ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:65:37:31:2c:38:03:a1:ea:29:08:2d:e0:
c3:a4:ad:c7:24:6e:7a:7f:09:61:f3:d5:be:07:84:
77:f3:33:4b:e4:28:48:01:f8:25:5f:fa:54:a7:45:
18:c1:4b:0b:94:e2:6a:28:2d:12:5c:32:33:7b:46:
0d:7e:ba:7e:b4:2a:40:12:a0:7f:6b:cc:8e:77:dc:
95:d8:22:c1:1a:59:f3:3c:88:5c:93:0e:8b:89:12:
b5:1e:bd:34:ad:16:70:e4:b1:8c:31:09:3f:6f:bb:
4a:25:07:d7:0e:88:21:92:4a:13:c9:a9:70:d1:18:
bd:79:6d:af:52:57:f2:48:63:f6:ce:77:0b:89:c2:
37:59:31:4a:20:f3:0a:4f:2b:4e:a1:dd:6a:b3:b2:
4d:88:55:1c:ac:fe:8d:8c:15:94:ac:c3:b0:5a:e6:
0c:e2:4a:f8:47:d5:e6:dd:6e:28:a6:13:2a:3e:f8:
1f:92:d3:f2:68:c9:87:55:10:47:6a:1a:1d:45:de:
79:e3:76:ea:d3:26:06:ab:8c:16:10:71:ba:d6:ac:
22:1a:4d:5a:da:94:10:fb:74:17:d4:6f:37:0d:83:
09:55:83:da:c4:8f:68:ec:85:18:56:bf:02:98:1a:
9b:13:18:ae:56:4c:ef:4e:c0:db:a1:e0:5a:57:6c:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:10:38:E1:D8:B4:2E:19:29:06:4E:A0:F1:D7:61:F0:58:1C:ED
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/phgQOOHYtC4ZKQZOoPHXYfBYHO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.180.0-212.134.187.255
212.134.192.0/22
212.134.200.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ca:39:e5:15:17:ff:c2:7d:eb:0e:1d:d2:69:df:87:dc:92:
a8:6e:c5:5e:77:2b:6b:14:ce:93:1a:bb:04:c5:54:d9:db:d5:
60:fd:f5:0d:57:0a:6f:a8:6a:37:62:10:45:82:5a:b1:76:0d:
48:57:09:e7:1f:db:2e:49:96:f5:ed:bd:38:9e:14:14:41:e9:
b2:07:19:7d:ee:89:56:ab:f0:36:8f:41:2f:4f:41:f1:51:11:
c6:22:5d:76:51:8b:2b:9f:53:f4:2c:91:01:8b:db:30:96:80:
e1:58:35:b7:62:7e:50:26:62:d9:4b:c9:82:42:6e:9a:d1:77:
f5:01:5c:d8:08:c4:ac:68:68:21:a1:33:4b:97:e9:c5:a8:09:
e1:f6:56:0d:53:61:74:69:3c:04:8c:bd:b1:a3:71:3e:29:15:
50:dc:0b:03:0f:e6:de:7f:1a:8b:5e:69:28:96:ed:23:f2:3c:
81:60:d6:8d:17:f9:74:8e:5f:d1:ae:e6:79:49:00:c1:2f:93:
f2:61:ff:b6:55:19:fa:88:24:3e:99:aa:ca:59:57:32:c0:b6:
60:53:f6:d9:f3:bd:83:86:7f:9c:64:2f:df:28:72:a5:49:d8:
04:b6:4f:4e:09:49:f7:09:8a:2a:de:ee:b4:fa:f7:30:2b:91:
c6:a2:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:07 2026 by rpki-client