Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KQw9HPzfGFs1x47dp4eFcC3VDp0.roa
File: KQw9HPzfGFs1x47dp4eFcC3VDp0.roa (raw, json)
Hash identifier: Y3rn318h+DtUTXoqHjKxzWizQzWTj9FAWwFq2XAVJos=
Subject key identifier: 29:0C:3D:1C:FC:DF:18:5B:35:C7:8E:DD:A7:87:85:70:2D:D5:0E:9D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D6C62B2274C799812A41838EEDE2C840E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KQw9HPzfGFs1x47dp4eFcC3VDp0.roa
Signing time: Wed 08 Apr 2026 09:18:20 +0000
ROA not before: Wed 08 Apr 2026 09:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 212.134.16.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:62:b2:27:4c:79:98:12:a4:18:38:ee:de:2c:84:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 8 09:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=290c3d1cfcdf185b35c78edda78785702dd50e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:43:10:47:4d:5d:3d:9e:da:49:1d:d7:06:
36:7d:09:33:4c:30:40:c8:2b:4a:55:4f:bb:fb:bc:
fb:04:55:3a:32:cf:32:e6:53:2e:4e:75:ae:92:40:
f4:17:1c:ca:d5:5f:16:df:8e:21:a2:b7:ff:69:39:
e7:6f:37:29:6f:b0:91:e8:8e:f9:5f:24:25:dc:e7:
ac:23:d4:3a:0e:51:95:6c:e1:2e:68:13:95:49:79:
fc:13:11:42:c9:ff:4a:51:ed:b4:fe:02:29:a5:77:
0f:9c:f2:18:43:29:5e:17:22:f5:59:9a:35:a1:d8:
67:62:40:b9:70:3e:ec:d0:29:5b:91:b8:65:a2:2d:
da:7e:45:47:e6:c9:d8:69:f5:61:10:3f:5e:f3:27:
9f:c1:6f:c5:25:5b:fd:9f:2f:8e:88:78:98:2d:a8:
ce:57:db:c9:62:df:ae:c5:5e:17:44:dc:63:7d:99:
8f:24:08:5d:6b:ae:bb:d0:10:4d:2d:96:00:fd:54:
53:0a:bc:ba:92:56:f8:d1:b8:cf:12:f6:74:81:94:
81:2c:a0:93:ce:cb:2e:71:09:f2:e9:e1:a7:30:25:
af:16:49:c2:38:f3:36:37:57:8c:56:ef:b3:35:71:
f7:62:75:3c:99:c2:4f:87:03:a9:23:88:17:30:0c:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:3D:1C:FC:DF:18:5B:35:C7:8E:DD:A7:87:85:70:2D:D5:0E:9D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KQw9HPzfGFs1x47dp4eFcC3VDp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.16.0/24
212.134.81.0/24
212.134.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:99:a2:33:96:10:50:4b:de:35:1e:1e:8a:23:f9:b9:43:74:
76:46:a0:b2:83:8a:96:cb:eb:90:76:aa:5e:94:62:9e:df:72:
50:db:03:1e:0a:d3:5c:a7:59:5c:ea:d7:b9:eb:dd:29:3e:e4:
05:54:5e:79:0d:f1:90:39:48:d7:26:db:90:8b:4f:20:65:66:
16:04:ca:51:cd:60:f9:9e:a8:89:6b:a6:40:2e:70:6e:14:49:
bc:eb:48:c2:21:d4:79:8a:ec:1b:74:5a:04:70:02:1b:9d:fd:
aa:e0:1e:2e:ca:3e:84:64:ff:31:b0:87:27:96:a1:3d:52:f2:
0b:ed:74:11:b7:2c:3f:c7:ed:84:27:17:a2:dc:c5:b3:88:8f:
35:41:7e:01:48:fe:74:36:69:7e:18:93:15:5f:25:4a:3b:47:
49:17:c4:c0:11:a4:07:59:5d:08:c6:bd:a7:7e:46:96:e4:83:
7a:56:40:88:c7:45:d9:51:0a:71:4b:0d:28:66:75:5c:ee:28:
c8:fc:95:3d:62:c8:13:01:d4:1d:a7:fd:f8:86:2d:12:01:47:
2e:c2:56:8a:7f:12:95:5c:3e:09:18:3f:b3:19:0a:ef:4a:2c:
04:73:77:e9:2f:6c:c3:b6:6d:06:5d:36:97:f5:4f:fb:8a:b1:
4d:2a:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:16 2026 by rpki-client