Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xxvmPyMgwx8XMzynP4dootiYags.roa
File: xxvmPyMgwx8XMzynP4dootiYags.roa (raw, json)
Hash identifier: wvOZ5I3IZbSYkV3yxTG0ekr681eR54mJgQq4USNANsA=
Subject key identifier: C7:1B:E6:3F:23:20:C3:1F:17:33:3C:A7:3F:87:68:A2:D8:98:6A:0B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DE0E35C641BB67FFEC53F7D1A91044FD8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xxvmPyMgwx8XMzynP4dootiYags.roa
Signing time: Fri 01 May 2026 00:14:49 +0000
ROA not before: Fri 01 May 2026 00:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 212.134.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e0:e3:5c:64:1b:b6:7f:fe:c5:3f:7d:1a:91:04:4f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 1 00:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c71be63f2320c31f17333ca73f8768a2d8986a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:84:7a:55:d4:af:d5:2b:8f:e5:6e:23:5c:
ad:56:e3:c3:e8:e1:54:ee:39:bd:5a:d6:d9:4d:6e:
d8:24:fd:92:3a:36:ba:f2:17:3a:8b:e8:c9:c6:00:
f9:89:f8:ee:e5:d9:32:7a:47:4c:9d:5d:1b:62:2a:
5a:27:e2:b5:e3:44:8e:2c:92:3d:4e:52:f6:ed:b4:
ee:86:2d:24:3d:f0:73:2d:88:87:3e:cf:4c:b9:15:
95:59:7d:8f:bf:0b:58:e0:7c:65:7b:d8:54:45:84:
53:94:77:f6:ab:17:7b:18:40:78:ad:00:37:8b:0d:
eb:86:97:01:bc:ce:49:d8:bb:63:07:91:3d:a6:2e:
6f:2e:5e:1a:24:d6:5f:1b:73:e3:74:fb:7e:0e:6d:
c0:fd:cf:27:03:b7:c5:05:02:bf:0f:8e:34:d4:bc:
86:28:c1:87:9f:73:be:be:7f:9b:dd:00:68:0d:23:
b5:18:97:eb:5e:ee:b8:ce:83:ed:03:2a:79:45:f8:
8d:34:4b:3a:d7:63:1d:2c:e4:39:0a:c1:00:12:85:
24:b3:08:1a:88:90:4d:6c:6a:a8:3b:f7:87:72:0e:
f5:bf:6c:20:f2:72:a4:b1:b8:78:10:76:e7:19:ec:
a3:cb:fd:b9:4e:3e:11:ff:4e:3d:06:a0:f5:b2:47:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:E6:3F:23:20:C3:1F:17:33:3C:A7:3F:87:68:A2:D8:98:6A:0B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xxvmPyMgwx8XMzynP4dootiYags.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.178.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1c:bf:90:54:d9:08:d5:d4:8d:70:1c:74:25:d0:db:4f:f9:
24:5c:10:4b:80:7a:c5:cb:04:23:8c:bc:a8:be:4c:d8:d1:db:
79:a5:48:3a:f5:09:8e:aa:f1:b9:43:a1:44:dc:df:83:b5:0b:
c0:b5:d2:43:72:53:b7:06:24:52:64:e8:7a:d4:d3:4e:69:5a:
65:95:52:3f:7d:94:1c:f7:be:f2:5d:d6:a6:dc:8a:c8:0d:19:
c7:90:e1:e0:cd:34:9a:f3:b3:fa:63:72:29:7f:f1:81:b0:94:
92:30:b1:ff:ee:05:c5:a6:c8:62:9a:42:c3:a8:e7:db:cb:1a:
d1:a7:4f:27:22:0a:ab:e7:2b:17:5c:ff:c0:ad:e5:8a:08:31:
11:ba:57:b9:e1:79:4c:51:c3:cc:84:53:ee:7d:1d:c2:00:de:
6f:f4:79:a4:84:b8:0f:68:e2:e7:41:aa:8b:5e:9d:5a:29:4e:
d6:62:70:f9:89:9a:6b:0b:96:62:d9:e5:f1:a0:67:40:a1:64:
49:93:a7:48:9c:cc:8c:9c:1b:df:41:07:f4:eb:dc:5a:38:1a:
af:17:4f:79:f1:ec:d8:be:d3:a2:a4:7f:8f:12:cd:e7:6d:85:
49:62:f5:55:21:f3:0d:e2:74:82:63:46:c3:44:72:8d:21:9a:
21:51:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:25 2026 by rpki-client