Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h2AQVjiin4Znx5jlL4zIhIBwiCw.roa
File: h2AQVjiin4Znx5jlL4zIhIBwiCw.roa (raw, json)
Hash identifier: F+LSOnjo6auDW3mTanNrWKgy0CU8YGXu3OXMcVF3qTc=
Subject key identifier: 87:60:10:56:38:A2:9F:86:67:C7:98:E5:2F:8C:C8:84:80:70:88:2C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EA73295E51B89A4D4FB8D949EBA8940B9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h2AQVjiin4Znx5jlL4zIhIBwiCw.roa
Signing time: Mon 08 Jun 2026 12:26:10 +0000
ROA not before: Mon 08 Jun 2026 12:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41171
IP address blocks: 212.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:32:95:e5:1b:89:a4:d4:fb:8d:94:9e:ba:89:40:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 8 12:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8760105638a29f8667c798e52f8cc8848070882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:21:63:a7:5c:15:e1:26:28:b8:72:16:16:
bb:6c:78:e8:93:87:81:c3:96:51:cd:6f:1d:48:e6:
95:12:58:16:54:5c:e5:37:5c:d8:6b:ff:dc:73:b0:
66:39:db:b0:32:58:8b:72:60:f1:0e:cd:96:3f:ab:
66:ee:cd:8e:cd:b2:46:b9:9b:06:d3:e4:d0:d2:c4:
f9:45:43:d3:d9:3d:20:72:33:10:0b:88:82:c7:f8:
7a:c4:2d:ed:e7:70:92:e8:4a:e7:cb:6d:8f:8c:2f:
cf:44:cf:2f:4d:d9:32:8c:76:50:7a:46:de:98:8a:
68:e1:2c:bf:51:01:25:11:25:53:8e:a1:c6:c5:90:
60:d8:7c:82:33:66:f7:78:09:a2:b7:a0:ea:4c:fb:
ee:95:58:a9:40:1c:9c:32:ed:95:24:76:f1:d6:ae:
b6:38:26:98:20:ff:21:4f:cf:ea:c3:65:3a:bd:88:
3a:28:e7:b7:95:64:4c:9b:41:5c:5d:20:09:95:ca:
72:95:de:d3:43:49:49:24:69:26:4d:a1:d4:8e:f4:
f2:83:6f:fd:25:9a:f7:60:89:89:f3:cd:0e:12:56:
6b:c5:23:e5:25:ee:25:4c:55:3e:7a:10:30:e9:70:
63:f1:72:6f:39:01:a5:c1:b2:ce:cc:df:d0:c1:99:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:60:10:56:38:A2:9F:86:67:C7:98:E5:2F:8C:C8:84:80:70:88:2C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h2AQVjiin4Znx5jlL4zIhIBwiCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7b:2c:d2:9d:a5:aa:41:67:83:3e:74:16:c4:ad:e7:67:7f:
3c:69:dc:06:11:a0:42:da:96:f4:ff:98:25:f3:eb:ec:11:aa:
04:44:77:86:2e:54:26:cc:74:15:8c:e6:45:98:ca:2c:45:04:
8c:e4:ed:80:89:32:16:ac:f0:b3:29:b2:08:32:2f:f2:9f:7e:
cb:5e:65:a0:08:f8:6a:9d:cf:8d:eb:f7:24:97:0c:84:d2:5d:
f1:f4:a1:0e:89:3d:1e:bd:57:e3:2d:2a:ce:bb:0b:9e:4c:32:
f8:2b:e6:1d:a5:03:f3:3c:23:26:7b:cc:49:ff:d5:5c:26:40:
9b:70:ae:4f:e1:c4:95:ec:d0:ab:07:95:f2:05:16:0d:8a:6a:
9e:83:40:51:ef:87:c8:a1:73:22:be:e8:d7:05:3d:39:5a:99:
d2:7d:1f:f1:b0:aa:7a:38:87:55:d4:d9:46:7a:63:bc:c0:b3:
b6:78:23:c7:8e:27:af:5a:76:81:f3:31:aa:ce:da:ae:ce:58:
ce:6b:62:ef:91:86:24:33:68:0d:f6:82:1d:3e:98:aa:0d:72:
27:f3:e9:ad:b6:4c:d8:43:32:61:a0:fa:27:60:3a:fb:00:92:
14:bf:30:dd:33:48:74:04:ea:f5:a0:81:e9:2d:8c:3f:ab:56:
0a:14:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:10 2026 by rpki-client