Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ptORUDM9EYqX8fjKlmVEW-0wqQE.roa
File: ptORUDM9EYqX8fjKlmVEW-0wqQE.roa (raw, json)
Hash identifier: W+dd3AAoMahpVRPy41UZnORPKzqTecdR6mjuLGKhoUU=
Subject key identifier: A6:D3:91:50:33:3D:11:8A:97:F1:F8:CA:96:65:44:5B:ED:30:A9:01
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B43A339DFEA217886BCBED6EEE6A1F81
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ptORUDM9EYqX8fjKlmVEW-0wqQE.roa
Signing time: Fri 18 Sep 2026 11:15:08 +0000
ROA not before: Fri 18 Sep 2026 11:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218965
IP address blocks: 212.135.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:3a:33:9d:fe:a2:17:88:6b:cb:ed:6e:ee:6a:1f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 11:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6d39150333d118a97f1f8ca9665445bed30a901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:c6:a2:87:37:06:4a:0f:34:ed:85:a4:23:
82:be:ac:59:b9:23:17:5c:84:b5:9a:18:50:ed:cb:
0a:66:ff:ba:ab:56:ce:8f:53:5b:d3:1d:f8:f9:9a:
8c:c7:52:69:60:79:cf:42:e3:58:6e:ab:ce:d7:89:
12:69:26:f0:6b:ac:bb:10:2b:97:b6:a9:1a:dc:d9:
43:52:62:ed:b6:12:ba:31:94:ae:f0:51:a5:98:4c:
96:fb:6a:0d:67:19:19:ef:60:53:38:c3:96:77:da:
96:cb:a9:b2:4c:7b:93:b5:5e:cc:8b:f2:fa:bb:74:
a4:e4:3b:2e:50:a3:f6:27:1e:28:b5:a3:cf:d5:40:
10:3d:2a:a1:a7:79:44:a8:ae:b2:88:4c:ef:9d:76:
52:c8:79:5d:ab:88:16:4a:b1:8c:f3:0e:96:71:aa:
67:27:22:73:1d:b9:31:cd:d1:d0:0f:71:96:57:2c:
8d:f7:7c:aa:1f:cd:16:9b:ee:bd:02:20:04:ff:35:
18:72:ff:13:69:90:20:21:ad:c9:c8:a9:31:56:c8:
53:9e:7b:7c:8d:26:74:35:ef:9d:61:8b:f0:fc:3f:
c9:0f:c5:8f:97:98:41:e4:bc:f9:92:1d:4e:96:5a:
72:f0:3c:7a:fd:c7:7c:97:5f:cf:96:fb:42:f3:eb:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:91:50:33:3D:11:8A:97:F1:F8:CA:96:65:44:5B:ED:30:A9:01
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ptORUDM9EYqX8fjKlmVEW-0wqQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ba:92:61:51:21:90:63:8f:04:2b:64:2e:ec:62:3b:39:04:
54:2a:24:29:d7:60:88:5e:9c:d5:4a:b2:3e:5c:96:90:5b:2a:
15:19:5a:33:6b:34:32:0a:63:bf:32:03:bb:70:c9:4e:70:35:
9d:9e:9f:95:20:a5:5a:83:e3:20:d9:42:b5:0b:ae:4a:5a:a8:
e4:ea:e2:bf:a5:50:db:68:00:5e:91:36:96:1b:6a:50:a0:be:
5e:c6:3d:78:d4:53:18:d6:c5:38:b2:2d:76:05:91:dd:e6:64:
51:6b:7c:d2:39:6e:17:f0:f9:e1:19:ff:26:05:12:4a:7b:4c:
e9:99:2e:b1:62:9c:22:40:73:f4:65:af:a1:cf:73:2f:ea:ab:
0a:cc:74:9a:61:ac:bf:37:e4:fe:c2:74:f5:7f:f8:db:80:ae:
02:e5:2e:a1:50:3f:4b:13:39:21:e4:31:1d:9f:11:b5:25:77:
49:88:b0:f8:d7:69:0f:3e:35:b0:2b:90:b0:2b:a4:ac:c6:03:
2a:d8:60:e5:11:2e:9f:3f:e2:15:b6:5b:c7:83:b8:5d:46:c7:
86:9b:d6:ba:e5:e8:5a:99:5f:9b:55:7e:14:fb:79:59:96:c9:
8a:76:ec:a0:87:5a:9a:53:7b:18:5e:cc:53:20:1b:a0:f3:bf:
11:53:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:26 2026 by rpki-client