Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AFMe6XsoK7tPyP1wilfO8Rmgmhc.roa
File: AFMe6XsoK7tPyP1wilfO8Rmgmhc.roa (raw, json)
Hash identifier: JX79jnORokMOGy1atpPPVw60LUiAsnZ5pBS8wED8s7Y=
Subject key identifier: 00:53:1E:E9:7B:28:2B:BB:4F:C8:FD:70:8A:57:CE:F1:19:A0:9A:17
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C5FE1B5D40C6F101BE28F465E9DD97200
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AFMe6XsoK7tPyP1wilfO8Rmgmhc.roa
Signing time: Sun 15 Feb 2026 05:59:13 +0000
ROA not before: Sun 15 Feb 2026 05:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 212.134.42.0/24 maxlen: 24
212.134.43.0/24 maxlen: 24
212.134.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:e1:b5:d4:0c:6f:10:1b:e2:8f:46:5e:9d:d9:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 15 05:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00531ee97b282bbb4fc8fd708a57cef119a09a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:71:a4:de:a3:f8:f4:41:1d:e6:9f:03:22:
2e:b9:9c:bb:98:39:36:b5:07:e0:cc:de:e9:ed:8a:
89:7e:4d:61:d5:b7:b0:81:2e:36:0e:45:52:f2:70:
8d:7a:43:ca:28:81:01:2c:0d:eb:6b:70:6b:2b:af:
40:fa:a5:ad:64:d2:32:7c:a4:8e:9c:01:fd:9e:ff:
e9:85:b1:9d:47:e4:8c:c6:81:65:48:e8:4e:e3:62:
a6:fc:e2:1c:cf:6a:6d:9b:a7:6a:f4:6c:88:46:aa:
72:dc:05:6c:0f:dd:74:16:12:11:0d:6b:d5:e6:d0:
2d:2a:e9:c5:e6:f8:d8:9f:f1:d9:c4:bc:0d:17:c3:
95:54:d1:a4:73:46:bc:56:bf:0d:c6:13:8b:7c:85:
e1:aa:4c:ff:6c:8d:48:fb:77:98:62:00:f0:3f:95:
2c:25:93:f3:78:f6:93:31:1e:45:c8:1e:26:49:0e:
3a:3e:45:c3:5a:51:a8:2c:17:2e:b8:ed:87:70:79:
43:f3:22:08:43:30:fe:fa:04:3c:e5:b1:f2:92:0d:
c1:63:67:c5:53:f8:2c:36:0b:2e:a5:1d:75:02:b2:
fe:5b:c5:49:b5:87:6d:91:20:e1:18:7d:ea:4f:d3:
36:8e:ef:18:60:c7:77:8f:28:fb:7e:6e:e8:ff:f2:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:1E:E9:7B:28:2B:BB:4F:C8:FD:70:8A:57:CE:F1:19:A0:9A:17
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AFMe6XsoK7tPyP1wilfO8Rmgmhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.42.0/23
212.134.49.0/24
Signature Algorithm: sha256WithRSAEncryption
32:54:8c:c3:d9:ee:06:76:39:66:c9:00:ff:27:4e:a0:3d:16:
52:18:81:bf:df:85:fe:8b:7e:69:2d:b4:ca:70:c2:10:ce:5e:
95:ae:93:d1:85:5c:08:ad:ae:bf:91:41:50:62:cd:98:ee:a9:
93:cc:2c:c9:f2:8b:39:79:49:1a:99:bb:91:14:14:54:3c:7e:
4b:31:0d:81:d8:5e:8b:59:11:a2:d9:ff:40:50:f9:2c:04:33:
d7:16:d6:38:ce:e3:64:70:e4:c4:49:9b:ed:80:f1:c4:49:3f:
78:7f:86:5d:c4:eb:79:ee:66:14:1b:2c:1a:69:44:9d:99:c4:
15:16:03:e3:a2:b3:78:0e:3e:09:ec:e8:87:05:5a:f6:99:06:
1a:88:0a:5c:0d:75:d6:a3:48:3a:e2:ce:ad:47:b2:df:5d:02:
d0:af:69:c5:26:82:6b:70:18:e8:df:f8:8e:85:74:f7:05:f6:
57:62:c3:ac:28:60:d5:35:c0:43:41:cb:6f:bf:57:58:2a:53:
53:fe:a6:28:7e:54:fe:c8:59:cf:ec:9a:70:8f:14:e7:e6:96:
85:5b:ad:98:8a:41:4c:00:9d:cc:80:47:0f:a5:7c:d8:71:cd:
7e:1d:ef:fc:47:9b:95:62:d3:fa:ce:57:5c:70:94:65:22:25:
9f:5f:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:21 2026 by rpki-client