Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zsE5vGkqQFZKDC97MfpqwLsOgrM.roa
File: zsE5vGkqQFZKDC97MfpqwLsOgrM.roa (raw, json)
Hash identifier: R/cpIlbCqn6yXsOHyasJan6NPnuCu9MjUbQ3Dk4EVU0=
Subject key identifier: CE:C1:39:BC:69:2A:40:56:4A:0C:2F:7B:31:FA:6A:C0:BB:0E:82:B3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D8AB65FBCA66298CF1A9B553C31C4DC68
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zsE5vGkqQFZKDC97MfpqwLsOgrM.roa
Signing time: Tue 14 Apr 2026 06:38:20 +0000
ROA not before: Tue 14 Apr 2026 06:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207550
IP address blocks: 212.134.217.0/24 maxlen: 24
212.134.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:b6:5f:bc:a6:62:98:cf:1a:9b:55:3c:31:c4:dc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 14 06:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cec139bc692a40564a0c2f7b31fa6ac0bb0e82b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:c9:2d:ee:41:90:ce:82:db:87:85:f6:cb:
d1:b0:ab:9f:76:3b:9e:55:4a:53:b5:8a:cb:41:11:
13:a7:b1:63:a3:f3:29:f5:cb:ba:83:40:c7:df:bf:
c7:8d:e1:3b:e0:3f:cf:4f:5e:86:7e:ab:3b:76:00:
b9:01:46:1a:b2:06:ca:6f:eb:84:b2:34:eb:82:ce:
4e:b1:1f:b7:d4:84:33:75:90:f8:c1:46:e7:de:d5:
f6:c6:fb:87:9a:1c:85:88:20:ac:d7:96:cf:fd:7b:
f9:0a:9b:9d:47:86:71:e4:e3:f8:20:90:54:9b:7b:
7e:ee:ce:22:b0:ba:e5:5d:cd:23:19:e2:b9:e0:4b:
ac:c5:4b:cc:ce:81:da:65:b9:74:9f:72:be:84:a5:
8c:62:5e:ed:66:a4:10:0b:67:05:9e:3a:22:f4:c0:
bc:ab:7d:f5:75:62:84:07:d8:ed:86:25:e3:aa:5b:
aa:70:69:6a:50:93:f3:95:23:d5:55:e2:25:fe:ec:
57:68:29:2b:4a:ac:bd:86:22:76:aa:f7:29:83:ec:
76:6c:74:5c:6a:72:ed:72:f1:91:f1:53:54:dd:48:
6d:d2:f2:9c:73:23:77:ef:87:5c:d1:e1:88:90:6a:
eb:ea:c5:10:c8:b4:c4:29:9b:31:b0:24:f7:f8:a1:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:39:BC:69:2A:40:56:4A:0C:2F:7B:31:FA:6A:C0:BB:0E:82:B3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zsE5vGkqQFZKDC97MfpqwLsOgrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.217.0-212.134.218.255
Signature Algorithm: sha256WithRSAEncryption
b1:26:8b:89:9e:5f:7d:c6:5b:28:9b:21:50:b4:05:ab:38:89:
d6:51:b3:94:52:6f:3b:ed:19:21:89:01:c1:3b:56:11:69:9f:
a0:22:60:dc:0a:fe:e4:d3:b6:43:a0:48:26:c4:5d:e4:cb:58:
3c:2b:8a:66:b1:0e:96:0c:f0:1a:52:51:d7:41:93:8b:bb:01:
fb:93:64:1f:3d:c8:8b:a9:03:2c:05:fb:93:5f:3f:82:c0:24:
bc:94:24:7d:2c:4a:7d:8d:77:d8:b3:a8:24:04:b3:0d:bf:33:
2c:23:8a:d9:43:0a:e3:b3:3d:3e:e9:1b:88:26:1c:32:a2:cc:
c1:1a:fa:85:25:a0:af:d4:6d:f2:bf:96:8d:00:f9:ef:95:a1:
0b:b6:aa:33:25:b9:a6:cd:87:31:d4:e7:4c:65:c3:d4:3c:75:
ce:80:f9:9c:3a:19:1f:56:64:cb:bc:6c:0b:1e:15:80:16:56:
f1:42:bf:9f:3c:73:dd:cd:3b:6f:78:e9:5a:0b:04:ae:d3:f1:
e3:3b:2a:8c:0a:0e:85:6b:c5:ff:bd:c8:6c:e1:c2:f4:bb:f7:
ff:5a:1b:87:4e:e4:79:a7:93:88:c0:f5:97:19:af:23:39:9f:
35:63:53:c5:b8:d1:b2:70:52:ea:91:81:2a:25:8c:47:da:20:
69:89:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:10 2026 by rpki-client