Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rljMtZlKLddO8ezaBHP5Vf4knME.roa
File: rljMtZlKLddO8ezaBHP5Vf4knME.roa (raw, json)
Hash identifier: 4qkpCH34HHpoCjHtWfdmV4qPhM0v2Br6QTgiWwMciUw=
Subject key identifier: AE:58:CC:B5:99:4A:2D:D7:4E:F1:EC:DA:04:73:F9:55:FE:24:9C:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E0BF13348D7E4DBF3F00F8B1B5E5647D6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rljMtZlKLddO8ezaBHP5Vf4knME.roa
Signing time: Sat 09 May 2026 08:53:37 +0000
ROA not before: Sat 09 May 2026 08:53:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0b:f1:33:48:d7:e4:db:f3:f0:0f:8b:1b:5e:56:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 9 08:53:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae58ccb5994a2dd74ef1ecda0473f955fe249cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:b9:95:8c:ca:8f:07:84:c3:24:bb:69:01:
08:20:66:f1:38:fc:c9:7f:68:cc:ad:47:e9:ee:65:
4f:cb:f9:2d:2b:58:ad:cb:f9:37:2f:ea:4c:f8:41:
8e:29:f2:a0:51:f8:41:cf:80:7c:56:79:ff:78:e6:
5f:c9:f0:b2:23:24:95:13:1c:ac:cb:f2:9c:f0:b4:
c7:f5:e6:16:0e:66:7a:c5:a0:89:17:a0:6e:d2:11:
ab:df:21:1b:e4:14:91:19:6a:8e:56:96:23:c5:8c:
73:6a:4a:61:f3:ac:54:53:38:c7:53:1f:3c:19:87:
63:c2:03:e0:ae:e5:b1:6a:0e:6e:6d:4c:78:ee:94:
08:81:34:9e:e4:93:8d:e7:ac:be:33:f3:5e:fa:5e:
3d:9d:a8:42:e6:e8:e5:69:ff:02:f2:b6:f2:56:cb:
6f:d1:14:ad:b0:85:29:21:4d:9a:16:f0:dc:ba:1a:
58:c6:4b:85:82:f7:ee:dd:c6:bc:7b:9e:ee:b4:3d:
3a:82:6b:fc:07:c3:61:6c:b1:a1:d9:db:57:d0:96:
4a:44:63:17:74:a1:12:db:9e:d0:a2:37:64:d2:5d:
06:69:d0:a3:e0:d9:0f:d7:f4:0d:dd:0d:d7:c2:c0:
e3:6a:b1:d7:f9:74:50:ef:ef:c7:59:61:d9:3f:84:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:CC:B5:99:4A:2D:D7:4E:F1:EC:DA:04:73:F9:55:FE:24:9C:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rljMtZlKLddO8ezaBHP5Vf4knME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.104.0/21
212.134.38.0/24
212.134.59.0/24
212.134.116.0/22
212.134.158.0/24
212.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
01:91:24:8e:ff:0b:16:65:d1:a8:e8:73:9c:2b:a6:9c:0a:fc:
e8:7c:65:c6:ab:d7:bb:7f:34:e1:b7:f1:bd:d3:31:21:25:21:
a6:55:90:6e:23:31:0a:9f:85:bf:6d:70:3c:01:1b:2f:a7:07:
6c:65:21:25:fd:c7:78:d9:3f:1a:a5:09:06:24:3c:0b:00:b1:
41:34:73:83:b0:be:26:1b:44:cd:04:2d:da:ff:c4:83:2a:f7:
9d:ec:25:ca:eb:84:5c:50:26:83:9c:ab:96:8e:c3:89:08:13:
4c:b6:f4:dc:3f:24:81:71:6e:78:96:c2:ca:0f:de:74:1d:96:
c1:fe:b3:fb:d3:3f:47:17:a0:b1:fd:5a:43:bb:10:2f:3d:cc:
dd:29:a7:21:da:2a:b3:ae:bd:a2:38:ca:63:8d:60:1e:10:2f:
86:41:3d:3d:9a:cf:a4:b9:b6:de:f2:f0:1a:00:43:69:6d:e6:
7a:14:58:ad:fd:a7:db:d7:03:73:76:a7:5f:c0:a1:b1:e6:9d:
31:c5:eb:ab:2a:dd:2d:73:fe:f5:88:f1:15:45:04:6f:be:62:
48:07:2c:39:55:7a:96:26:d2:d4:ea:28:11:ef:73:fa:9f:3e:
51:6b:b5:97:3f:b6:e1:3a:b0:1e:c1:e9:b3:28:82:2e:96:d0:
59:fa:17:fb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ4L8TNI1+Tb8/APixteVkfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTA5MDg1MzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTU4Y2NiNTk5NGEyZGQ3NGVmMWVjZGEwNDczZjk1NWZlMjQ5Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XW5lYzKjweEwyS7aQEIIGbxOPzJ
f2jMrUfp7mVPy/ktK1ity/k3L+pM+EGOKfKgUfhBz4B8Vnn/eOZfyfCyIySVExys
y/Kc8LTH9eYWDmZ6xaCJF6Bu0hGr3yEb5BSRGWqOVpYjxYxzakph86xUUzjHUx88
GYdjwgPgruWxag5ubUx47pQIgTSe5JON56y+M/Ne+l49nahC5ujlaf8C8rbyVstv
0RStsIUpIU2aFvDcuhpYxkuFgvfu3ca8e57utD06gmv8B8NhbLGh2dtX0JZKRGMX
dKES257Qojdk0l0GadCj4NkP1/QN3Q3XwsDjarHX+XRQ7+/HWWHZP4RTWwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFK5YzLWZSi3XTvHs2gRz+VX+JJzBMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcmxqTXRabEtMZGRPOGV6YUJIUDVWZjRrbk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDbcxoAwQA
1IYmAwQA1IY7AwQC1IZ0AwQA1IaeAwQA1IefMA0GCSqGSIb3DQEBCwUAA4IBAQAB
kSSO/wsWZdGo6HOcK6acCvzofGXGq9e7fzTht/G90zEhJSGmVZBuIzEKn4W/bXA8
ARsvpwdsZSEl/cd42T8apQkGJDwLALFBNHODsL4mG0TNBC3a/8SDKved7CXK64Rc
UCaDnKuWjsOJCBNMtvTcPySBcW54lsLKD950HZbB/rP70z9HF6Cx/VpDuxAvPczd
Kach2iqzrr2iOMpjjWAeEC+GQT09ms+kubbe8vAaAENpbeZ6FFit/afb1wNzdqdf
wKGx5p0xxeurKt0tc/71iPEVRQRvvmJIByw5VXqWJtLU6igR73P6nz5Ra7WXP7bh
OrAewemzKIIultBZ+hf7
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:14 2026 by rpki-client