Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eRHRFoZN4yyw1_74-lL34cPkx1I.roa
File: eRHRFoZN4yyw1_74-lL34cPkx1I.roa (raw, json)
Hash identifier: lt4VN1ryWfngiIjVwhbv+aOPBkk6k/lnrFdHc5niyLA=
Subject key identifier: 79:11:D1:16:86:4D:E3:2C:B0:D7:FE:F8:FA:52:F7:E1:C3:E4:C7:52
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D8B1EBD3C8F022381C3847A2FDBF541DD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eRHRFoZN4yyw1_74-lL34cPkx1I.roa
Signing time: Tue 14 Apr 2026 08:32:20 +0000
ROA not before: Tue 14 Apr 2026 08:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 212.134.133.0/24 maxlen: 24
212.134.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:1e:bd:3c:8f:02:23:81:c3:84:7a:2f:db:f5:41:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 14 08:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7911d116864de32cb0d7fef8fa52f7e1c3e4c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:ca:8d:c5:bc:d5:10:2c:b0:5f:93:8d:fa:
d0:d8:3a:09:c1:3e:14:35:01:7e:43:3f:da:0e:32:
eb:6d:b0:c8:95:f9:4c:ec:45:a2:9c:3c:7d:04:94:
8f:30:7b:b2:d7:3b:1a:e7:24:62:6e:6d:6e:d9:b7:
f4:00:3f:9a:44:a9:60:ff:a8:9c:73:a3:b6:e4:d6:
92:0a:b0:c2:80:77:17:27:2d:38:35:23:7c:f6:94:
de:58:13:17:83:2f:8c:01:20:fe:9c:16:ad:2b:49:
4d:46:9e:88:39:eb:b6:e8:fe:b8:a9:5e:31:d6:2e:
1e:42:88:ee:99:ae:29:ac:34:6b:67:d3:71:4d:5d:
9f:4b:72:6c:43:bb:99:6b:e5:28:7b:2c:d2:bf:6f:
ba:b8:8f:82:f2:50:0e:89:00:69:a3:a0:de:7e:3e:
5b:e0:b3:ab:af:8d:c2:52:67:9f:ad:fd:b3:9e:b0:
7b:44:a2:76:e5:2e:b7:27:72:74:b7:33:fa:0d:69:
db:d2:b3:1f:ce:cc:19:51:6b:32:a6:12:2b:17:5b:
7d:6b:7f:4c:3b:a6:0f:21:a0:57:08:62:32:e8:74:
2f:4c:27:39:29:49:d7:8b:d7:87:2a:17:46:c0:94:
85:97:a4:10:d6:87:d0:b3:ec:9f:59:03:45:83:8b:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:D1:16:86:4D:E3:2C:B0:D7:FE:F8:FA:52:F7:E1:C3:E4:C7:52
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eRHRFoZN4yyw1_74-lL34cPkx1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.133.0/24
212.134.255.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:ed:d4:6b:3e:7a:a7:a2:10:d1:1a:00:b1:21:6b:87:10:
01:47:5d:c1:66:ba:ea:16:cf:34:d6:26:84:9d:da:5e:a2:76:
e6:71:e0:34:0c:39:e1:75:16:79:93:4d:fe:e6:b0:c5:bf:e5:
e2:54:a5:58:ce:1e:a3:a5:5b:a9:41:61:c4:4c:89:ce:1a:42:
4e:8b:bc:81:e5:79:d8:01:4e:77:75:63:4d:8e:fc:14:7e:c1:
c7:75:59:87:f5:ad:25:39:db:26:7a:ad:80:b2:92:cf:b1:e4:
cc:2c:10:a4:fc:1b:6b:10:3e:ec:c5:8f:28:87:d8:cd:01:dc:
3e:68:64:b3:4a:67:5b:1c:d2:66:0c:ae:d8:b9:84:1b:45:51:
61:a7:bc:85:7a:de:7e:c7:12:a7:be:cd:ba:7c:81:ce:ad:68:
c3:b5:86:34:73:9f:66:27:c2:12:00:f0:b7:a4:a0:0b:ce:e0:
61:47:c3:45:3f:21:29:d5:80:50:c0:10:10:5d:db:19:fd:08:
24:a2:f5:92:b8:26:b3:c6:69:91:38:77:22:c8:d0:6b:e0:ca:
a9:ad:d8:be:bc:ea:42:7c:41:03:42:0e:2e:82:3c:df:49:ae:
17:80:0b:e4:fb:ce:92:5b:e1:c5:aa:86:16:51:08:bf:70:ef:
ab:6d:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:39 2026 by rpki-client