Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GC0iCDPTL5VYWIEJG-5R2QDuOfI.roa
File: GC0iCDPTL5VYWIEJG-5R2QDuOfI.roa (raw, json)
Hash identifier: oq7DHRlXojA2BOGOq9lIza/Fd7HsbMuitM4CWfS43X8=
Subject key identifier: 18:2D:22:08:33:D3:2F:95:58:58:81:09:1B:EE:51:D9:00:EE:39:F2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CA1933E861893255B177C99F97811C588
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GC0iCDPTL5VYWIEJG-5R2QDuOfI.roa
Signing time: Sat 28 Feb 2026 00:08:27 +0000
ROA not before: Sat 28 Feb 2026 00:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 212.134.32.0/22 maxlen: 22
212.134.100.0/22 maxlen: 22
212.134.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a1:93:3e:86:18:93:25:5b:17:7c:99:f9:78:11:c5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 28 00:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=182d220833d32f95585881091bee51d900ee39f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:78:49:85:54:03:a1:77:7c:8b:0e:08:63:
16:c4:6e:7d:b2:93:11:e8:3e:f7:13:a8:76:54:97:
c6:55:7b:92:5f:85:1b:0e:46:c9:32:21:c1:ac:a1:
87:0f:3f:44:7d:37:43:1a:3f:74:dc:d8:43:f3:26:
c6:45:47:7e:db:79:9e:a8:c5:43:9c:dc:13:db:0e:
8f:2e:6c:b6:25:ad:ad:a8:d0:b0:b5:43:71:e3:6f:
24:f5:c3:99:10:57:48:78:12:e3:86:5a:f2:84:af:
9d:f4:dd:89:29:67:2f:2c:c5:b8:21:2a:fa:c9:2f:
f6:b4:35:30:62:65:19:80:1b:b7:81:fc:8f:b2:35:
36:99:1b:71:07:0d:49:01:f5:7a:c5:37:0f:56:96:
e7:a3:5c:ec:ed:09:cd:9a:ac:18:9c:d1:e2:31:e3:
43:dd:e8:75:5e:eb:f4:8f:89:a1:47:83:38:3d:b2:
80:7b:84:11:c7:d2:03:52:3f:8e:1e:06:97:97:5b:
69:62:e3:a5:69:38:29:17:11:3f:3a:59:4c:e8:ca:
bd:ff:c7:fe:82:cf:97:c9:98:1b:8e:0b:95:48:7c:
ef:3d:f4:49:f7:60:52:c0:3f:05:e7:6a:c7:fb:2e:
7e:f4:76:56:8a:55:57:78:08:34:55:3b:ed:ad:94:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2D:22:08:33:D3:2F:95:58:58:81:09:1B:EE:51:D9:00:EE:39:F2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GC0iCDPTL5VYWIEJG-5R2QDuOfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.32.0/22
212.134.100.0/22
212.134.120.0/22
Signature Algorithm: sha256WithRSAEncryption
35:9a:77:9c:18:8d:8b:9e:9c:fb:e7:47:48:6e:e9:4a:50:db:
ca:46:62:d9:a7:44:2a:87:1e:2c:1f:fc:a0:46:05:01:26:1b:
f3:c0:c5:f4:4e:05:64:b0:29:9b:47:48:e3:8e:71:1c:15:c7:
d9:89:52:ee:2f:a5:bc:62:99:15:d4:7a:82:90:e8:29:41:f1:
ab:d3:3c:ee:a4:d1:46:fa:c7:d0:fd:ba:8f:70:cc:0b:b8:32:
49:c3:34:cc:fd:a8:e7:b5:67:1b:b9:7e:2b:8e:25:63:cc:54:
ff:e8:1c:0e:f2:ca:e2:5c:9b:b1:71:bb:97:23:9c:75:ad:e6:
f3:78:94:f1:a0:53:bd:b5:bc:e3:09:17:9d:e5:a6:ab:f0:b8:
5c:86:1b:d9:0e:28:47:b1:a6:a7:eb:45:c3:c1:45:e8:71:dd:
81:f5:ed:74:cb:e6:2a:09:16:e3:48:9c:98:3c:1c:97:91:53:
4e:c8:b1:41:d3:5f:9d:ab:55:a6:64:7b:e7:18:0e:e1:e9:cb:
8c:2a:23:cc:3e:da:9d:db:cc:2a:08:23:93:0a:1c:1c:fd:c8:
a5:1f:fd:4c:9c:08:4b:69:a5:dc:df:70:3b:37:3c:2b:89:cc:
cf:13:41:f4:80:18:f6:91:f0:f3:dc:de:fe:4a:8a:7b:69:06:
5e:76:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:51:52 2026 by rpki-client