Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EGM2bctqlbOCUhZZXRHze62iRLU.roa
File: EGM2bctqlbOCUhZZXRHze62iRLU.roa (raw, json)
Hash identifier: yVHhvdLNNHgv9WROxPBm4+tqYQiNjteAjwMSVYv2eWs=
Subject key identifier: 10:63:36:6D:CB:6A:95:B3:82:52:16:59:5D:11:F3:7B:AD:A2:44:B5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199CE1665D20566B920BB2F7E016C8E8FB9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EGM2bctqlbOCUhZZXRHze62iRLU.roa
Signing time: Fri 10 Oct 2025 12:26:38 +0000
ROA not before: Fri 10 Oct 2025 12:26:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 212.134.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:16:65:d2:05:66:b9:20:bb:2f:7e:01:6c:8e:8f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 10 12:26:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1063366dcb6a95b3825216595d11f37bada244b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:79:bc:24:2a:3f:5c:68:35:09:c5:1e:24:
a6:07:40:ba:d2:82:df:03:ba:cd:9d:72:d6:b5:42:
d8:6c:ba:66:7a:1f:6b:1c:7b:72:35:5f:c2:f7:55:
27:03:e9:19:d9:d0:34:45:40:6c:47:00:dc:7d:89:
82:05:c1:02:f3:6e:6f:1d:7a:d7:d8:e8:94:9d:9e:
ba:78:f1:d1:70:52:44:ef:41:5d:da:30:32:75:55:
a1:7a:3d:af:c8:f1:56:0d:a8:90:96:ba:3a:7f:a8:
77:54:8c:a4:c1:1c:6e:9a:f6:62:3c:bc:f4:f5:f5:
e4:fb:20:43:b9:08:ad:82:7e:7b:61:21:7b:e7:50:
c7:0a:fb:73:10:2b:b4:fa:45:e7:2e:f7:5f:12:3d:
52:24:d4:28:e1:f7:4c:78:37:1e:b4:01:6c:40:94:
af:04:06:77:08:de:43:09:0b:df:8b:ea:1b:e6:82:
ac:b2:e9:5d:b7:b7:f2:45:8d:23:20:ca:0b:12:15:
15:18:8c:69:4a:6f:65:1c:bf:91:fc:7d:2c:90:e2:
f6:0e:65:40:cc:8d:ce:e0:10:e7:bf:5e:b3:5c:29:
81:f9:ea:54:58:47:ab:8a:4e:b7:30:1e:b7:95:f5:
db:e2:63:1f:5f:a7:5d:41:28:48:2b:37:46:a7:d6:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:63:36:6D:CB:6A:95:B3:82:52:16:59:5D:11:F3:7B:AD:A2:44:B5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EGM2bctqlbOCUhZZXRHze62iRLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.26.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f4:e7:d9:02:68:94:db:c0:e0:80:50:6a:a1:2d:57:d3:87:
1a:0e:e0:b2:07:d0:08:91:4c:a3:09:35:0e:c0:8e:4e:8b:9f:
df:dc:1d:e7:c5:5d:20:90:37:1d:fe:c5:7d:5e:f4:91:02:4d:
89:01:30:12:e2:10:29:bc:30:be:61:6a:a4:79:b9:32:63:9a:
17:78:65:05:03:62:30:3c:f7:cc:58:9b:71:94:5a:b5:81:d3:
0b:b6:b2:12:46:5e:41:f3:ae:0e:95:c5:c2:29:59:98:36:4f:
5c:64:f2:3c:2d:d9:c9:f7:92:6a:d0:3a:fa:f1:2d:ae:5f:2d:
98:2b:58:fd:61:0c:a4:14:95:5b:31:27:1c:26:ff:12:ee:4d:
f6:78:03:4c:31:08:58:ab:a6:56:a9:e4:ff:c4:dc:09:f7:6f:
7c:d8:b7:b8:14:e2:40:b9:9e:8a:93:06:6c:17:cf:89:6d:72:
61:a9:23:78:1f:e3:66:20:70:ec:0d:91:41:2e:76:69:f0:56:
93:35:3c:dc:a4:15:04:69:f8:3f:75:71:10:b8:75:5e:b0:94:
18:4e:72:c8:96:60:b8:69:18:68:2f:aa:4e:78:54:d9:0a:92:
1a:13:d3:b7:7c:cd:51:4e:19:0a:15:1c:60:03:ca:6c:59:9e:
cb:71:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:35 2025 by rpki-client