Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rpeXJJj5RVry9mksWTJEL6bDkt0.roa
File: rpeXJJj5RVry9mksWTJEL6bDkt0.roa (raw, json)
Hash identifier: 314qZvY0Zc8FExx8HDElK3TP5NtdmJPSSBi8ubLSiPQ=
Subject key identifier: AE:97:97:24:98:F9:45:5A:F2:F6:69:2C:59:32:44:2F:A6:C3:92:DD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E01DD40BE05480009E21AC08026BE1428
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rpeXJJj5RVry9mksWTJEL6bDkt0.roa
Signing time: Thu 07 May 2026 09:55:37 +0000
ROA not before: Thu 07 May 2026 09:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 212.134.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:dd:40:be:05:48:00:09:e2:1a:c0:80:26:be:14:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 7 09:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae97972498f9455af2f6692c5932442fa6c392dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:f7:54:64:89:53:a3:27:c0:14:cc:b1:da:
c8:08:43:18:ee:92:18:65:f2:78:a4:36:09:7d:75:
47:74:50:11:a3:3f:c0:0d:78:d4:d6:7f:8a:78:8f:
62:b2:9b:d5:29:09:0a:b3:4e:63:f3:7b:e6:ec:b2:
89:08:dc:d0:48:a0:69:83:5d:b6:af:3d:ce:34:1d:
2d:8d:21:d3:77:82:c7:bf:4f:8e:cb:1b:1b:44:58:
81:10:2d:ca:03:ef:ae:31:85:41:df:30:e3:07:c0:
f5:bc:16:fd:9c:2f:b5:27:fd:51:75:12:3a:70:ba:
6c:eb:86:2d:36:e6:9d:79:db:1e:5a:5f:99:ac:43:
ad:30:98:7f:6d:c5:9b:34:9f:92:a0:60:0b:ee:84:
7e:72:92:35:82:e9:de:1f:24:7f:70:b3:30:df:53:
10:96:3d:12:fe:dd:b4:28:fe:6a:5e:df:63:77:17:
c9:4e:59:95:1b:fa:ad:72:f5:5b:e6:7b:76:a4:c6:
6f:ee:24:82:4f:6d:f8:78:57:32:fc:6d:1d:88:2f:
39:33:2b:fa:bd:f0:69:20:4f:59:b3:81:b2:85:3f:
2e:dc:a0:1a:20:e6:80:19:d2:33:fb:d8:f2:aa:9c:
8d:82:76:95:98:b0:c6:81:26:a1:bc:9a:e2:2f:3d:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:97:24:98:F9:45:5A:F2:F6:69:2C:59:32:44:2F:A6:C3:92:DD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rpeXJJj5RVry9mksWTJEL6bDkt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6a:c5:ea:7e:81:9d:47:e9:60:b6:50:2f:e7:e0:b5:91:41:
23:53:b0:80:f0:ba:20:8b:54:46:66:a6:20:49:71:e3:6e:c0:
c8:40:8f:7d:25:35:3f:f0:94:fc:e3:13:7c:ad:16:dd:d6:42:
9b:34:b8:9c:1a:d6:bc:9f:fb:9e:6d:7a:a4:82:7d:0b:89:5c:
4b:64:33:5b:5d:9a:46:c6:a6:f3:be:32:fb:fc:51:40:22:12:
3b:bd:e2:f1:6c:6c:d0:99:7b:d3:fc:27:9b:1c:71:84:4c:6b:
2b:9f:d6:64:a2:5f:78:5c:a9:97:36:d3:06:d6:c9:98:4e:7a:
1e:71:7d:1b:8c:9f:38:ed:0b:43:91:a7:9c:84:ec:2f:95:09:
39:bf:59:88:d7:68:0e:99:1f:be:60:15:7a:4d:8f:5d:53:48:
33:30:c1:1e:b3:ae:b6:e1:aa:f1:15:7b:58:22:ef:9e:64:18:
4e:b3:96:29:e6:c4:e8:22:04:ef:36:55:f7:5d:3c:6a:aa:13:
40:83:77:9c:ea:7b:25:ab:32:af:c1:3c:96:cd:5c:e0:c2:17:
e1:50:92:b5:98:b8:bb:5e:b7:d9:58:8a:21:77:ab:46:09:28:
97:ca:43:6f:ac:bb:bc:cb:2c:18:a7:2f:5f:22:56:df:1b:b9:
35:99:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:44 2026 by rpki-client