Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ejd-RRRgpDeKEHGeQXiBd9YP6IM.roa
File: Ejd-RRRgpDeKEHGeQXiBd9YP6IM.roa (raw, json)
Hash identifier: L3f7dZbBAH+CboeqkJoYQWGuhOhVTzDn+1DXJlfNEZI=
Subject key identifier: 12:37:7E:45:14:60:A4:37:8A:10:71:9E:41:78:81:77:D6:0F:E8:83
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C5FE1B4F9149A6EFB58EAF3E630942644
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ejd-RRRgpDeKEHGeQXiBd9YP6IM.roa
Signing time: Sun 15 Feb 2026 05:59:13 +0000
ROA not before: Sun 15 Feb 2026 05:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 212.134.42.0/24 maxlen: 24
212.134.43.0/24 maxlen: 24
212.134.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:e1:b4:f9:14:9a:6e:fb:58:ea:f3:e6:30:94:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 15 05:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12377e451460a4378a10719e41788177d60fe883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:5e:a1:fd:7c:b0:77:53:18:c1:dc:51:b1:
11:aa:eb:c2:e8:0f:cb:bd:f6:79:06:05:2d:0e:97:
4c:fb:d9:01:05:03:4c:46:80:c7:49:22:0c:86:ca:
92:89:1e:15:72:69:e4:38:73:6a:e0:af:f0:c0:7f:
08:db:59:4e:22:5b:7d:a2:77:32:ec:7e:9b:27:7c:
de:d3:3c:d5:db:73:1d:54:dd:0b:7d:1a:9c:98:3c:
e4:e1:64:41:a6:e3:b2:51:3b:e0:5e:50:6c:fc:8d:
22:32:04:e3:89:d0:be:65:1a:8c:fb:38:15:b9:4a:
6c:fe:28:37:57:b1:59:96:4e:32:65:86:35:21:3b:
55:ce:2e:f6:0c:d0:fb:2f:79:85:83:35:25:90:dd:
17:df:58:08:2d:d8:d9:a6:38:72:45:54:58:ee:fa:
c4:e8:ba:48:24:ea:3c:1c:68:57:f1:ef:81:a4:43:
4b:36:91:0f:06:0b:5a:15:fa:e8:17:82:35:7d:44:
6e:76:5f:ff:22:dc:bb:e9:39:63:90:b5:00:d1:05:
9c:74:d7:30:60:e6:a1:49:31:b0:58:7e:c8:81:f7:
e0:ec:35:8d:c9:8d:74:e8:23:a8:9d:a4:b9:97:ba:
ff:bb:8e:9f:9a:18:b9:86:74:68:92:19:ea:e2:50:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:7E:45:14:60:A4:37:8A:10:71:9E:41:78:81:77:D6:0F:E8:83
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ejd-RRRgpDeKEHGeQXiBd9YP6IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.42.0/23
212.134.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:65:1a:09:99:09:28:3f:2c:10:4a:9d:e7:93:60:63:97:cd:
14:35:e5:91:ad:e6:65:fc:ef:2c:8f:b4:1a:7f:9b:b5:3e:96:
58:52:21:0c:dc:4f:a8:77:84:97:3f:32:ab:55:07:cb:44:d8:
df:e2:30:7f:03:70:40:b3:19:dd:bf:3f:f8:6d:cf:be:c1:c7:
6c:b9:99:66:30:1b:f4:25:d5:0e:50:90:7b:45:6a:ba:4a:66:
be:02:65:ee:03:db:c3:33:f0:89:8d:b2:fe:98:71:3a:d8:74:
d6:b0:1c:fa:c8:9b:fe:70:2d:23:78:f1:a1:07:07:74:68:8f:
f2:5a:50:54:38:dc:f0:19:18:cb:fa:02:a2:a0:3b:42:75:4c:
c0:18:42:5f:93:d7:14:28:9b:9b:ba:11:1a:98:13:b5:21:bc:
28:fa:e4:05:3d:f7:37:a1:69:4f:d8:b3:49:57:f6:28:32:5f:
b0:01:60:5c:73:6f:33:83:66:38:c1:12:bb:84:0d:70:1a:e9:
f2:6c:d7:e2:37:a4:81:03:55:14:90:42:64:52:05:9d:1f:ed:
ab:f1:73:1d:38:5c:c3:c5:df:69:6b:70:09:d7:32:69:ee:8e:
5e:60:2f:57:69:9d:1c:24:82:04:45:18:88:c1:23:b4:7c:06:
42:17:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:41 2026 by rpki-client