Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DITdIUdgyN0TFtAbpeJMIphFJhA.roa
File: DITdIUdgyN0TFtAbpeJMIphFJhA.roa (raw, json)
Hash identifier: R7CkmA39GYhRvP7QpVkzL08w8FaYyqTVaODnlHMpVfw=
Subject key identifier: 0C:84:DD:21:47:60:C8:DD:13:16:D0:1B:A5:E2:4C:22:98:45:26:10
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199F243338C662C7D33815BE8AF8BE45C5A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DITdIUdgyN0TFtAbpeJMIphFJhA.roa
Signing time: Fri 17 Oct 2025 13:01:54 +0000
ROA not before: Fri 17 Oct 2025 13:01:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.220.0/23 maxlen: 23
212.135.222.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:43:33:8c:66:2c:7d:33:81:5b:e8:af:8b:e4:5c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 17 13:01:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c84dd214760c8dd1316d01ba5e24c2298452610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:71:49:4e:da:3c:6b:38:60:c4:d0:a2:2a:
b4:c2:32:2b:ee:1b:7c:dd:b7:49:f6:1a:db:dc:67:
01:20:a4:77:8d:81:8c:6b:43:d2:38:9e:38:85:54:
75:5d:2a:5c:3f:45:eb:03:2f:0e:d7:4e:43:5b:bd:
ba:e9:85:f7:e5:06:bd:1f:d8:17:bb:36:5c:aa:b2:
ed:56:b6:35:fb:36:4d:99:68:61:18:17:65:e6:03:
ff:cd:03:13:f6:08:7d:01:5c:80:31:6f:10:41:08:
1a:8c:01:34:51:fc:34:3b:6e:5f:49:93:bc:cd:ee:
f4:28:5f:55:16:83:ad:6e:e6:e8:ff:69:13:a3:11:
bb:d9:4a:05:e5:41:bf:cb:13:a6:7d:99:bd:37:45:
69:4f:94:59:42:e7:6b:f6:74:66:cd:9c:e3:e6:37:
0b:51:6e:ff:1a:36:a5:38:43:4a:b3:a4:21:cd:9a:
15:df:c1:37:91:e5:68:1b:7b:4e:e6:5c:d1:de:25:
23:4c:82:1d:37:54:dc:52:83:8c:f7:71:1f:1f:cd:
e5:ee:57:66:5f:cf:72:f6:e3:37:cf:09:fd:a1:0c:
d8:5a:80:3b:58:7a:3a:a9:69:be:20:e4:36:c4:77:
21:71:21:68:60:06:4e:f7:05:f6:43:f8:33:93:30:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:DD:21:47:60:C8:DD:13:16:D0:1B:A5:E2:4C:22:98:45:26:10
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DITdIUdgyN0TFtAbpeJMIphFJhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.148.0/23
195.172.208.0/23
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.220.0-212.135.227.255
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:68:7b:71:e8:99:f4:54:bf:e9:b6:38:e7:32:d1:a9:35:5d:
86:af:ae:56:b1:f7:cc:46:3a:2a:f8:a5:a5:92:39:78:ab:e7:
79:d0:64:2c:4b:47:d1:ef:e0:a1:e4:65:9c:e5:13:b0:c3:d4:
d0:bb:da:2c:f6:c1:2a:a5:7c:91:98:b3:a7:a2:74:2f:b7:16:
40:0a:fb:a6:76:25:2a:38:af:f6:9c:b2:4d:ba:84:36:c0:13:
3e:1e:2b:bc:f9:88:12:1b:ba:08:5c:b8:2c:9e:e9:d5:ad:24:
58:fc:bd:e0:51:a9:4f:a3:8e:7a:48:e7:2f:80:c8:e1:60:6c:
4f:a2:07:47:86:36:2c:75:f5:81:b2:c9:ac:9d:95:9e:7d:10:
35:02:44:29:e1:ab:e3:a2:de:1b:3c:49:34:de:08:a1:ef:5d:
76:49:de:0f:0d:46:8a:e0:50:8d:13:3f:0a:42:8a:c7:09:6e:
06:d6:89:92:4f:1c:e0:1a:32:0a:b7:5d:a5:f5:5e:cf:14:50:
1e:d5:3d:b1:d0:29:f6:3a:90:eb:44:09:60:a3:ff:05:be:aa:
07:97:a2:e3:db:fd:e6:8d:d1:42:77:1a:41:d0:24:96:b7:ee:
2e:0d:c9:01:72:bc:d3:08:70:92:15:90:99:35:31:8d:43:9c:
5e:7a:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:22 2025 by rpki-client