Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0M4sjDmdS6WIe_xU8LPIeE6ZnvE.roa
File: 0M4sjDmdS6WIe_xU8LPIeE6ZnvE.roa (raw, json)
Hash identifier: 5ddUdryRdetwqW782tREubGRlp3n4N17lsznXTGyyk4=
Subject key identifier: D0:CE:2C:8C:39:9D:4B:A5:88:7B:FC:54:F0:B3:C8:78:4E:99:9E:F1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199866272593F01FB0366158F45407306A3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0M4sjDmdS6WIe_xU8LPIeE6ZnvE.roa
Signing time: Fri 26 Sep 2025 14:17:02 +0000
ROA not before: Fri 26 Sep 2025 14:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 212.134.16.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:62:72:59:3f:01:fb:03:66:15:8f:45:40:73:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 26 14:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ce2c8c399d4ba5887bfc54f0b3c8784e999ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:8f:b1:cc:4e:8d:96:e1:ae:e1:36:49:c4:
2f:bd:ce:b4:f1:9b:c3:71:8c:d7:eb:00:d9:9b:ac:
93:f2:0d:06:83:97:d7:ea:5e:0c:d8:78:5c:f0:8c:
62:ce:ce:0a:55:29:2b:e3:71:af:26:4b:3f:a1:e0:
5f:85:9f:5b:1c:7a:3f:27:12:e7:70:ba:09:2a:84:
ea:35:9e:07:48:dd:a6:c7:38:29:d1:66:ca:e0:7f:
07:92:19:c9:fa:de:ea:87:5e:04:7d:58:78:60:ce:
a0:42:97:c9:ca:e7:63:8f:bd:7d:ab:6a:64:55:23:
42:86:ba:ae:13:3f:cb:a1:68:a4:24:49:f0:1e:b9:
2e:5f:fd:19:33:73:e3:3a:ea:87:8b:f3:ac:60:a0:
ba:a6:86:dd:5d:9e:e8:83:04:18:b2:66:2e:97:7b:
a9:89:a3:5c:17:81:bc:41:51:3b:9f:5b:dc:af:ca:
65:97:4e:2d:cb:f3:9d:e7:8c:cb:64:c4:11:8c:a7:
01:90:cc:72:50:ae:cd:1d:13:6d:56:c1:dc:c3:68:
f1:c3:43:97:ea:9c:4e:63:a2:ea:2c:7e:bd:62:f7:
25:6f:61:c3:01:8e:78:d4:7b:b9:a4:e3:d2:9b:96:
21:5e:d8:36:b6:24:a8:59:38:9a:0c:52:a7:02:54:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:2C:8C:39:9D:4B:A5:88:7B:FC:54:F0:B3:C8:78:4E:99:9E:F1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0M4sjDmdS6WIe_xU8LPIeE6ZnvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.16.0/24
212.134.90.0/24
212.135.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:99:8d:5c:14:59:c8:b4:a3:48:07:c8:fe:b9:b6:63:da:a3:
02:fb:97:d6:53:3f:b7:a7:6e:7c:94:42:75:b9:34:d6:e9:b0:
04:e1:b0:c9:c6:7a:bb:65:50:43:8c:fb:29:03:a7:d0:51:c3:
27:a2:b5:57:ff:45:20:58:ee:ae:ee:c3:4b:4d:62:76:52:9b:
13:4f:bf:02:d6:0c:bb:d2:16:10:5f:20:dd:70:3d:56:ff:08:
9c:1b:f2:f1:b2:e5:74:d2:50:18:14:30:f2:a7:c1:bc:4e:ca:
bd:12:ff:5f:18:e2:0a:e2:88:b8:af:d8:14:19:2f:74:95:6e:
d9:d8:b8:9b:19:50:5b:47:ae:73:dd:49:8e:f5:e1:ea:0e:2f:
0a:6a:1b:0e:0d:bf:4e:e5:fb:94:98:38:7d:f0:c8:31:87:e9:
1e:a3:c1:74:bc:d8:60:2c:1f:7f:87:ac:35:5c:7a:ad:47:b2:
d9:38:a6:bc:3c:5d:c1:08:cc:2b:1d:77:09:d6:e5:40:c9:70:
83:f3:16:ec:a6:8f:f7:23:c5:cb:60:8d:f1:d7:97:31:05:a7:
ce:78:8e:a3:5a:3a:9b:18:c7:01:c2:eb:a0:82:ed:57:40:46:
cd:37:76:26:76:4e:d4:11:7d:d5:e6:40:fd:ff:ae:9e:16:aa:
99:04:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:37 2025 by rpki-client