Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EJDKPQmASbB2H4LYm8j8u6v7mmI.roa
File: EJDKPQmASbB2H4LYm8j8u6v7mmI.roa (raw, json)
Hash identifier: D/6bMlTZQ7YI/Z6KOy26Anl/o+mwO1Ipkq5uVP6Gb2U=
Subject key identifier: 10:90:CA:3D:09:80:49:B0:76:1F:82:D8:9B:C8:FC:BB:AB:FB:9A:62
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019993D5BEDA6EBB511617656DEB1B5544F4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EJDKPQmASbB2H4LYm8j8u6v7mmI.roa
Signing time: Mon 29 Sep 2025 04:58:02 +0000
ROA not before: Mon 29 Sep 2025 04:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 92.244.161.0/24 maxlen: 24
92.244.178.0/23 maxlen: 24
92.244.186.0/23 maxlen: 24
92.244.188.0/23 maxlen: 24
109.204.102.0/24 maxlen: 24
109.204.114.0/24 maxlen: 24
109.204.127.0/24 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.104.0/23 maxlen: 24
195.40.112.0/23 maxlen: 24
195.40.116.0/23 maxlen: 24
195.40.188.0/23 maxlen: 24
195.172.98.0/23 maxlen: 24
195.172.106.0/23 maxlen: 24
195.172.194.0/23 maxlen: 24
195.172.212.0/23 maxlen: 24
212.134.72.0/23 maxlen: 24
212.134.76.0/23 maxlen: 24
212.135.5.0/24 maxlen: 24
212.135.218.0/24 maxlen: 24
212.135.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:93:d5:be:da:6e:bb:51:16:17:65:6d:eb:1b:55:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 29 04:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1090ca3d098049b0761f82d89bc8fcbbabfb9a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:6d:46:79:f0:ca:86:1f:c3:0c:76:b0:2a:
68:c4:c4:85:01:37:bc:ee:87:e7:36:cb:18:cc:2e:
06:44:63:d1:f6:f7:ec:ff:a8:de:1b:9b:a1:41:04:
89:0c:f4:35:91:45:da:da:0c:fa:41:e2:2f:88:65:
23:4e:74:9f:63:0a:ed:f6:35:43:5a:90:76:fc:a2:
8d:0d:f8:bf:10:94:01:d1:55:9a:aa:e1:76:f4:b9:
60:9e:75:90:a0:d9:b1:02:5b:64:a1:fa:6d:84:d6:
fe:78:2a:bf:d6:2d:ed:cc:fe:54:74:86:ed:ab:79:
56:44:5c:05:5b:98:68:10:5d:fc:c3:b7:bf:b6:02:
38:27:b3:28:a1:64:19:60:15:4d:68:78:b4:89:d9:
3a:e8:1c:c9:33:8e:39:46:61:ad:ae:14:d9:b0:ae:
37:18:a7:80:0e:a0:3f:0c:0f:91:17:98:e4:1d:94:
90:78:44:df:07:03:aa:e9:8b:8c:d4:c8:9e:f6:26:
40:97:dc:8d:cc:82:27:9e:69:a0:f7:58:36:b4:21:
f7:a4:0d:fd:92:2f:8f:65:c2:d0:60:db:f9:19:28:
e1:69:ef:1c:e3:96:72:b0:c7:f3:37:c1:dc:a5:30:
39:c5:c3:d4:01:af:c4:d1:86:23:c0:bf:99:83:0b:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:CA:3D:09:80:49:B0:76:1F:82:D8:9B:C8:FC:BB:AB:FB:9A:62
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EJDKPQmASbB2H4LYm8j8u6v7mmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.244.161.0/24
92.244.178.0/23
92.244.186.0-92.244.189.255
109.204.102.0/24
109.204.114.0/24
109.204.127.0/24
195.40.86.0/24
195.40.104.0/23
195.40.112.0/23
195.40.116.0/23
195.40.188.0/23
195.172.98.0/23
195.172.106.0/23
195.172.194.0/23
195.172.212.0/23
212.134.72.0/23
212.134.76.0/23
212.135.5.0/24
212.135.218.0/24
212.135.234.0/23
Signature Algorithm: sha256WithRSAEncryption
13:29:00:83:bf:3b:e9:ff:b4:3b:24:94:1e:50:d0:aa:ae:1d:
cd:54:0b:07:1b:1d:48:17:0a:1e:37:c9:36:21:a6:0c:a3:42:
b7:1c:82:ce:24:6d:0b:2f:f5:4f:36:30:50:d2:1e:9f:54:58:
fc:c8:f7:90:3c:2a:ac:4d:70:4e:65:4b:29:93:1e:27:7a:23:
24:a9:89:69:6a:dc:66:07:43:6e:0b:f5:89:68:45:2b:f2:04:
2c:e6:bf:87:f4:c5:b9:1e:83:45:e0:00:c7:fc:2e:5c:b2:3b:
c0:d8:06:20:b2:c0:b8:6c:54:95:51:51:91:09:a1:a2:60:b0:
c6:d9:1c:38:18:6a:02:7d:33:9c:3b:eb:58:07:c4:89:00:48:
9d:35:d9:f3:d8:42:e7:97:22:25:38:b5:68:7b:a8:d1:24:c1:
ae:92:2d:a9:8f:68:ee:6b:96:65:ec:61:89:f9:7d:7a:a8:d6:
00:39:97:70:89:ca:87:7a:4c:38:08:98:e6:1c:b5:29:b4:01:
93:1a:31:0f:34:8f:8a:58:6a:63:18:14:28:9d:47:1f:8d:06:
46:ed:47:ee:8a:b6:6c:96:0f:f4:b3:6c:d1:32:36:ba:0b:ad:
56:d1:da:0e:f5:f8:9b:80:30:31:cb:b8:71:a6:e0:c3:19:93:
56:28:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:07 2025 by rpki-client