Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kobwh6JdE2wTjKWMQo7VKlP0Lnk.roa
File: kobwh6JdE2wTjKWMQo7VKlP0Lnk.roa (raw, json)
Hash identifier: 1E03pYClueibWSt6sRcohv6bDSlUej7mqC16IZzDb/0=
Subject key identifier: 92:86:F0:87:A2:5D:13:6C:13:8C:A5:8C:42:8E:D5:2A:53:F4:2E:79
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CA1933E4692817AF3D46358073B494D50
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kobwh6JdE2wTjKWMQo7VKlP0Lnk.roa
Signing time: Sat 28 Feb 2026 00:08:27 +0000
ROA not before: Sat 28 Feb 2026 00:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58325
IP address blocks: 212.134.220.0/22 maxlen: 22
212.135.130.0/23 maxlen: 24
212.135.132.0/23 maxlen: 24
212.135.136.0/23 maxlen: 24
212.135.138.0/23 maxlen: 24
212.135.140.0/23 maxlen: 24
212.135.142.0/23 maxlen: 24
212.135.144.0/23 maxlen: 24
212.135.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a1:93:3e:46:92:81:7a:f3:d4:63:58:07:3b:49:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 28 00:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9286f087a25d136c138ca58c428ed52a53f42e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:46:b9:4e:16:e2:af:94:d2:83:36:2f:4f:
9f:17:8d:c1:64:0e:7e:73:76:7c:25:b5:ba:6e:68:
fb:e0:79:15:2d:a0:cf:a5:71:2e:f7:e0:aa:d6:bc:
fc:da:68:21:1e:3b:b4:6c:e2:96:f0:4d:7b:de:5a:
e1:e8:6b:a0:ea:77:6d:30:8e:81:5c:26:15:d1:c4:
d6:18:7c:66:f1:b2:e1:d5:4f:67:54:eb:9d:a2:72:
91:e7:63:30:88:90:ca:77:73:36:43:d8:9f:64:db:
dd:f8:2d:1c:88:7c:cb:06:cf:13:a4:46:9c:74:02:
ad:0a:85:a2:55:77:2d:1b:fd:e2:f8:cf:62:0f:87:
ad:89:63:7d:bb:02:2e:f6:c2:2a:0c:68:1d:63:ce:
d3:f4:85:0a:ad:34:53:0d:12:43:a3:d7:5b:fc:5f:
33:2b:30:ca:e5:17:63:82:5a:3e:87:a5:b3:c6:bc:
8f:2a:04:79:7a:75:8b:44:4b:f8:24:5d:9e:37:97:
51:91:d5:30:8b:12:79:f6:0d:55:f7:29:60:b3:1c:
78:77:06:6c:e1:42:2d:7f:f9:39:61:3c:75:e4:a0:
c9:08:b3:da:0f:56:a0:e6:b9:8b:2d:32:36:fc:82:
6c:49:73:ea:4a:be:13:79:b2:0a:40:07:af:0c:cc:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:F0:87:A2:5D:13:6C:13:8C:A5:8C:42:8E:D5:2A:53:F4:2E:79
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kobwh6JdE2wTjKWMQo7VKlP0Lnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.220.0/22
212.135.130.0-212.135.133.255
212.135.136.0-212.135.147.255
Signature Algorithm: sha256WithRSAEncryption
04:1e:5e:40:f8:2d:22:42:77:cb:94:63:be:5e:c8:e8:e5:04:
3f:d1:5f:3d:f7:16:ac:98:17:8f:72:53:91:46:b2:1d:e7:d1:
ea:24:c5:67:b5:ed:3b:fb:70:d0:1c:46:63:4c:cc:e2:7f:d4:
89:34:96:e1:cb:03:72:89:7c:8e:68:c7:2d:84:5a:9e:a4:a4:
83:eb:21:47:07:59:58:19:26:40:26:70:d1:54:cb:cb:d7:4d:
09:c5:3d:73:04:f5:68:d2:69:a4:12:dc:e6:aa:9a:24:67:18:
46:24:42:57:3b:35:72:22:07:31:80:2d:d3:77:5c:ea:80:c6:
68:c4:41:5c:0a:03:d1:eb:01:a6:57:0b:11:16:a1:de:ef:68:
24:2a:c6:38:ba:f8:fb:52:5d:df:e1:3b:e4:4e:0b:1e:9c:13:
66:c5:91:df:96:bf:3e:df:e6:3d:b2:89:23:ff:16:f6:ca:9b:
2a:67:25:dd:04:43:fe:d2:88:5a:4b:14:5f:b2:eb:59:0a:9b:
f4:df:ed:46:96:a8:03:1d:cf:db:3c:87:b4:c5:71:fa:0c:14:
2f:c1:80:9e:a8:bf:65:e6:54:dd:9d:29:14:43:a3:99:33:28:
ae:af:38:60:f3:75:bc:22:ba:f7:a7:83:33:df:81:e7:57:eb:
d3:17:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:59 2026 by rpki-client