Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1abFeBn2qgMXcwArnDD_1Iurrj8.roa
File: 1abFeBn2qgMXcwArnDD_1Iurrj8.roa (raw, json)
Hash identifier: sARA1AJfW92+c5J2ZED4AZLGH/c8drIr116ijGAy6PA=
Subject key identifier: D5:A6:C5:78:19:F6:AA:03:17:73:00:2B:9C:30:FF:D4:8B:AB:AE:3F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C9989230CD59A1AB80F52D47771305915
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1abFeBn2qgMXcwArnDD_1Iurrj8.roa
Signing time: Thu 26 Feb 2026 10:40:27 +0000
ROA not before: Thu 26 Feb 2026 10:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216245
IP address blocks: 195.172.136.0/21 maxlen: 24
212.135.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:89:23:0c:d5:9a:1a:b8:0f:52:d4:77:71:30:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 26 10:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5a6c57819f6aa031773002b9c30ffd48babae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:5a:25:ba:79:58:58:a8:66:0f:be:67:5a:
9f:9a:eb:b8:82:06:fd:35:e1:8e:e6:b9:a0:a2:5d:
94:93:1c:24:19:f3:85:3b:1b:be:c5:ae:e2:a6:82:
b0:ff:78:7d:e8:2e:46:95:fa:16:9c:40:00:8e:6e:
df:5c:90:ca:4b:38:3a:c3:84:47:2d:21:c9:be:5f:
44:fa:3f:b9:b1:db:cf:f4:80:fd:fa:b7:b8:ca:ad:
1b:b1:7d:f4:ab:fc:0b:6b:04:eb:ae:48:95:bd:81:
08:41:d6:b7:26:b0:07:b6:58:4f:6e:1b:ad:5a:2b:
1f:d8:13:c5:b5:d7:c5:61:69:31:a5:bc:91:67:6c:
71:a6:70:c3:9e:cd:00:37:34:ba:32:5e:7c:44:8c:
d5:8e:b8:93:56:e7:5a:ff:02:33:7d:bb:8a:31:c9:
eb:b7:6f:2c:e2:c5:ee:58:9c:dc:01:22:4b:0e:6b:
07:5e:b9:89:63:a8:77:61:07:2e:ad:dc:eb:24:b1:
c0:7c:73:74:e1:21:7a:ca:5c:b8:b9:e4:24:39:f2:
90:f9:a0:27:fe:22:75:ed:f9:55:6c:c4:4f:6b:fa:
90:88:75:95:72:67:21:88:96:0a:22:26:c5:70:8a:
d9:f9:a1:cb:25:2f:7f:2b:b6:35:ab:74:18:9d:05:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:C5:78:19:F6:AA:03:17:73:00:2B:9C:30:FF:D4:8B:AB:AE:3F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1abFeBn2qgMXcwArnDD_1Iurrj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.172.136.0/21
212.135.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:4c:f3:07:47:e2:47:38:6d:f6:01:76:17:1a:3e:6a:90:a1:
e5:d3:38:8b:35:9d:d4:6d:84:8f:70:cd:bf:8f:38:f1:40:20:
41:b7:78:45:ee:4b:84:d3:92:8a:0b:5c:d3:02:3a:9d:a3:22:
a1:61:7a:94:f7:93:e6:94:17:11:28:b4:cb:7b:8d:cc:15:6d:
07:36:ac:16:de:0d:d0:1b:ff:86:50:36:56:c2:a7:32:f8:a5:
fc:5a:3d:18:87:4f:ea:5b:42:bf:dc:d6:33:f8:40:5e:6b:a5:
3a:e9:52:ad:64:46:e5:dc:da:56:4e:89:a6:ad:0a:0c:e0:c5:
29:e6:74:48:26:c8:f0:1d:2d:1f:c7:2a:4d:a7:d1:38:93:e9:
e0:c3:2b:f9:74:e1:87:db:d4:b9:93:c9:c3:21:3e:84:29:84:
6f:d1:38:92:bc:e3:e1:e4:ce:63:e1:74:a5:11:56:54:48:5c:
65:5b:4d:3e:55:b0:59:43:ce:80:af:81:99:ef:6e:1c:e4:68:
97:90:d1:90:fa:4b:e8:14:75:28:6b:57:62:75:eb:cb:75:63:
9e:45:a2:e0:51:2d:38:19:40:46:61:7d:7a:1f:97:6d:92:4f:
9a:1f:99:ef:39:70:ab:c0:f5:23:c1:71:a9:4e:73:9d:91:1d:
d8:bc:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:02 2026 by rpki-client