Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jHyvORpApvLLAm_r6vtwDC9UQPA.roa
File: jHyvORpApvLLAm_r6vtwDC9UQPA.roa (raw, json)
Hash identifier: YSUvMiRi4Yu806s9spu1fbY2bKpvapY8EvzzMfiD7lk=
Subject key identifier: 8C:7C:AF:39:1A:40:A6:F2:CB:02:6F:EB:EA:FB:70:0C:2F:54:40:F0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EAAB77D1226EFD43BA1EDE52442E0EAD1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jHyvORpApvLLAm_r6vtwDC9UQPA.roa
Signing time: Tue 09 Jun 2026 04:50:12 +0000
ROA not before: Tue 09 Jun 2026 04:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134477
IP address blocks: 212.134.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:b7:7d:12:26:ef:d4:3b:a1:ed:e5:24:42:e0:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 9 04:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c7caf391a40a6f2cb026febeafb700c2f5440f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:a6:33:f8:35:35:83:8d:af:ee:7c:1f:f7:
b3:a0:78:49:eb:9d:c0:36:e0:fb:a6:39:a8:d1:3c:
8d:4f:40:d8:96:67:47:6b:ae:e4:db:8c:b3:de:81:
35:bf:0e:ed:87:50:e6:d3:d9:9e:4e:cb:95:11:b6:
6a:a6:3a:66:c0:a1:66:91:e9:ff:9d:ee:97:84:ef:
af:0a:a1:e2:7e:2e:64:0c:55:d3:c2:a2:61:05:67:
2c:c5:13:6c:39:3d:cd:4b:15:e2:6c:53:8c:73:0b:
8c:51:e4:e5:fc:89:87:36:38:57:87:f6:a1:9d:4c:
ce:10:e4:7e:7e:f5:77:a6:80:41:72:56:d0:a2:0e:
c4:45:b4:60:1e:07:12:99:0c:29:0e:73:86:62:0c:
4a:7b:cd:3f:a8:9b:bc:8b:7d:67:62:04:0e:84:1e:
ba:6d:11:67:31:13:32:cf:58:e7:92:8a:b6:40:bd:
4a:85:2f:1c:08:11:dc:2f:d8:11:86:6d:32:2c:df:
0c:f3:6e:97:e9:4d:8d:ca:64:9b:d4:bd:89:0e:14:
90:8d:50:df:0b:b8:2a:e4:15:fe:b9:a3:c9:dc:47:
0b:72:0c:f3:b6:e7:fe:b1:b1:17:f5:1e:23:45:53:
a4:68:1f:ba:e1:85:a8:c4:f9:b0:70:2b:e6:ac:4e:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:AF:39:1A:40:A6:F2:CB:02:6F:EB:EA:FB:70:0C:2F:54:40:F0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jHyvORpApvLLAm_r6vtwDC9UQPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:65:95:c9:7f:7c:6d:a7:c3:d1:82:f0:fd:d5:1c:04:60:f4:
68:fc:15:de:d8:be:54:1a:bb:c0:f4:aa:cc:8a:d8:18:f7:0c:
4c:d4:d3:74:f9:59:d3:15:39:27:e6:71:10:0b:6d:ec:80:b2:
57:60:4a:d0:fd:dc:fc:1c:15:13:41:31:16:4d:94:55:31:1f:
51:ee:35:95:e7:18:1c:f8:ab:b6:3d:99:5b:5d:52:5d:9f:0e:
8e:7d:8c:f1:75:3a:84:0c:99:7d:46:20:53:49:3b:8c:10:78:
cd:df:82:4e:e7:47:22:b0:26:d5:49:c5:b4:a7:22:47:54:bf:
3b:74:6c:f5:c7:16:58:69:01:df:6f:54:d5:e8:d1:71:b0:47:
0e:ed:01:09:f1:79:26:4f:fd:ff:33:eb:65:54:fc:58:55:36:
88:5e:c7:7a:b5:a6:a9:a6:54:68:89:b0:05:52:6f:cb:1d:57:
a9:fa:87:3e:da:0b:59:bd:75:84:eb:7a:98:d4:e9:8d:fd:b5:
3f:bf:92:fb:bb:f8:80:06:3b:79:09:75:ec:04:66:07:3c:bf:
82:b9:ab:26:18:ac:cd:af:82:04:29:d7:79:22:b3:5c:97:15:
19:fa:60:63:4f:2e:e7:6c:df:d2:98:03:d9:58:d8:0b:7c:cd:
30:33:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:10 2026 by rpki-client