Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8GmwO9acrbIRjSXQz7HENUiyhRs.roa
File: 8GmwO9acrbIRjSXQz7HENUiyhRs.roa (raw, json)
Hash identifier: BYAyTI4VcCQxTYRrt1QffqFw+Ye6McwgBARBxe5UdkE=
Subject key identifier: F0:69:B0:3B:D6:9C:AD:B2:11:8D:25:D0:CF:B1:C4:35:48:B2:85:1B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199F0DA8E30708C2C18CE49CDFA7C64FA15
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8GmwO9acrbIRjSXQz7HENUiyhRs.roa
Signing time: Fri 17 Oct 2025 06:27:58 +0000
ROA not before: Fri 17 Oct 2025 06:27:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 212.135.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:da:8e:30:70:8c:2c:18:ce:49:cd:fa:7c:64:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 17 06:27:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f069b03bd69cadb2118d25d0cfb1c43548b2851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:d4:e5:f5:f1:b8:e3:50:27:86:e0:5c:d2:
97:38:d5:2d:34:5e:88:ca:99:fb:17:5d:17:62:0c:
e5:3f:5b:31:7b:5b:01:00:5a:2a:30:88:dd:1a:ef:
e8:06:cd:c1:fd:a3:8f:f7:f4:b9:68:8a:9e:ed:7c:
00:bf:69:a6:44:32:f9:d6:52:44:6c:ba:3c:6d:45:
e9:20:9d:4a:7a:a7:b2:83:23:c9:0b:64:e0:40:fb:
aa:a2:e5:c7:d7:04:bc:db:8a:11:66:cd:3f:8f:16:
1a:4c:9a:b7:9f:3a:65:46:25:c3:92:67:75:52:5d:
41:1d:ca:3a:7d:ac:06:8d:10:4f:4c:d6:49:1a:2b:
3e:9e:07:d3:9e:20:7b:e8:b7:9c:43:9c:06:12:0c:
1a:0a:ca:33:b0:fa:fa:11:df:cb:7a:4b:57:67:ab:
a9:29:1a:c6:25:42:73:e4:10:64:c6:ef:95:7b:62:
60:8e:65:67:59:7a:7f:83:cf:ed:f0:fb:41:92:3c:
df:94:60:de:95:7b:e4:f2:c1:ee:61:86:b3:4e:20:
1c:cb:a7:bc:c7:af:d7:6f:89:a2:48:a7:fe:eb:f9:
6c:67:a0:f6:ae:d3:d2:4b:08:cb:c2:25:6a:ee:58:
73:b5:5d:e4:fb:7e:12:82:54:79:84:12:81:c8:1c:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:B0:3B:D6:9C:AD:B2:11:8D:25:D0:CF:B1:C4:35:48:B2:85:1B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8GmwO9acrbIRjSXQz7HENUiyhRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.32.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:8c:da:31:db:45:af:e5:ca:87:d4:78:a2:8a:30:7a:bc:f5:
ed:dc:dd:bb:2b:2c:54:84:1b:9f:07:53:17:fa:c5:dd:dc:c7:
f3:d5:03:ac:cd:8b:f8:d5:89:8e:c4:92:c7:82:10:77:9f:ad:
f8:4d:a4:df:4a:80:fc:5a:44:b6:29:66:fb:e3:3e:84:2c:ee:
00:6d:39:fa:81:de:d5:0f:57:b6:b1:62:30:23:a3:e7:63:0d:
f8:93:11:8a:76:f1:b3:22:05:d8:6d:b1:7b:3d:7f:b6:d9:bf:
3e:fd:10:58:09:53:25:81:70:12:47:e1:11:4b:80:9b:97:e7:
d7:14:e3:f7:1a:c9:58:3a:ff:59:c0:0f:d1:05:0c:a3:7b:a0:
e9:0e:4c:57:a2:b8:7d:b7:86:5e:c4:24:8b:5b:19:20:7d:02:
61:32:43:7b:31:7f:34:6f:b8:fe:71:cc:4a:8a:a3:a9:02:2f:
7e:67:68:52:6d:ce:0f:6d:43:5a:d2:e3:ea:e0:cf:1d:bd:51:
da:07:b6:ca:80:cf:62:c2:c4:be:68:cd:7e:91:72:0c:c1:18:
16:df:cf:2b:8e:6f:4f:39:e4:fe:46:5f:1c:94:74:29:92:1d:
55:30:5f:65:f6:5e:7d:ba:5c:69:49:66:81:5f:f3:5b:16:cf:
f1:4f:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:33 2025 by rpki-client