Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jRl2gCleVcjxLYKVH1AjCXfmGyg.roa
File: jRl2gCleVcjxLYKVH1AjCXfmGyg.roa (raw, json)
Hash identifier: 5mwlYQoJoSeLWhMnYsS8GsW3cWg01jweDL24JSwYOAo=
Subject key identifier: 8D:19:76:80:29:5E:55:C8:F1:2D:82:95:1F:50:23:09:77:E6:1B:28
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EBB4E9E1E3806F45DE58B8C36608E1C2D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jRl2gCleVcjxLYKVH1AjCXfmGyg.roa
Signing time: Fri 12 Jun 2026 10:09:12 +0000
ROA not before: Fri 12 Jun 2026 10:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 212.135.48.0/20 maxlen: 20
212.135.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:4e:9e:1e:38:06:f4:5d:e5:8b:8c:36:60:8e:1c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 12 10:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d197680295e55c8f12d82951f50230977e61b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:f9:d7:5a:13:87:12:97:4d:bb:ce:3a:5c:
b6:33:56:98:d6:87:c3:5e:8b:95:2f:82:32:ad:87:
a8:34:7a:e5:4b:e8:78:2e:a8:41:e9:7d:92:7e:40:
9b:35:5d:68:da:70:6b:f3:6a:b5:b5:bc:ef:43:0b:
0d:42:0f:e5:2f:67:d6:32:f4:25:f8:00:ad:34:d4:
f6:c0:d0:37:10:1d:6a:04:7e:ef:1c:48:3e:b8:36:
a8:a6:f9:fe:c8:f8:15:d6:2a:2b:9a:17:50:d7:8e:
6d:f0:97:8e:10:d2:e4:cd:3b:9f:72:f1:9e:86:aa:
4a:71:54:9b:8a:f7:05:83:a6:6e:fa:5c:d7:84:32:
d6:40:b4:02:69:01:29:c1:ef:0e:58:ff:b4:73:18:
79:b6:e8:b7:ea:22:51:a0:99:5f:d5:e4:17:67:f2:
d2:77:c6:df:62:b4:9c:2c:f1:81:e3:e8:75:9d:5d:
49:2e:4b:73:ef:20:6c:d6:e1:89:e5:9b:13:a0:06:
68:75:2a:04:f7:41:68:b3:2f:1f:44:80:54:d6:51:
13:c0:fd:8e:7f:a9:1e:2c:14:78:8d:bd:45:df:b1:
f6:e7:ab:4f:e7:d1:e2:73:38:66:4c:e1:7a:ba:4a:
47:d9:72:b6:01:2e:8f:b0:cc:94:dd:1d:20:ad:85:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:76:80:29:5E:55:C8:F1:2D:82:95:1F:50:23:09:77:E6:1B:28
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jRl2gCleVcjxLYKVH1AjCXfmGyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.48.0/20
212.135.80.0/20
Signature Algorithm: sha256WithRSAEncryption
56:cd:e2:22:70:96:3f:92:98:8e:2b:49:f9:11:41:ee:47:7b:
bb:64:8a:fe:72:44:2b:8f:fd:7d:ce:56:d4:59:76:d5:1b:5f:
bc:71:17:3c:77:ef:eb:98:51:57:a4:69:dc:d9:f6:bc:82:25:
55:45:58:5a:f6:4e:42:6f:76:96:a8:63:55:78:8e:24:95:0c:
64:72:33:41:89:91:11:51:ee:0e:2b:51:5e:14:1f:94:ff:00:
16:5a:ae:ba:55:e1:05:8a:b8:7b:2c:9e:c3:ef:2b:20:3e:b0:
b0:df:3b:9d:64:bb:c8:e7:2e:e4:9a:c1:0c:b7:76:49:a9:83:
8c:80:1f:11:e7:db:9a:90:14:c9:53:ce:da:9e:27:ec:ab:f3:
d8:0e:07:2c:1d:c2:22:35:b0:c3:0f:6a:32:0e:01:09:3d:64:
53:e2:7a:70:f7:69:98:df:61:96:b7:62:84:ef:43:e4:ac:15:
70:0b:49:4f:bb:01:41:5a:3f:79:32:99:07:11:a7:c6:a2:52:
27:7a:0e:7a:35:e0:e3:1d:1f:69:00:a2:f8:4a:32:91:31:25:
7e:b6:65:0d:9b:01:91:44:b1:69:0c:99:35:49:0f:e8:6e:3e:
bd:6b:52:1a:86:8e:08:55:95:30:af:0a:07:ff:54:59:68:e3:
be:a5:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:21:36 2026 by rpki-client