Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EZ6GvQ5OJx9hJ9bye3YVuWnx4SA.roa
File: EZ6GvQ5OJx9hJ9bye3YVuWnx4SA.roa (raw, json)
Hash identifier: DLhGIqBbrMSXsmwMEMMTuhsVW574+yfjuG4Z26XUuqg=
Subject key identifier: 11:9E:86:BD:0E:4E:27:1F:61:27:D6:F2:7B:76:15:B9:69:F1:E1:20
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0198C0F11F17A2926201EDF8F6803E73DCAF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EZ6GvQ5OJx9hJ9bye3YVuWnx4SA.roa
Signing time: Tue 19 Aug 2025 06:08:04 +0000
ROA not before: Tue 19 Aug 2025 06:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:f1:1f:17:a2:92:62:01:ed:f8:f6:80:3e:73:dc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 19 06:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119e86bd0e4e271f6127d6f27b7615b969f1e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:8a:bc:60:fc:23:2f:0e:80:ad:fc:c2:97:
fe:15:73:34:42:cf:c3:8c:cb:d3:5f:32:6c:1f:44:
52:26:ab:f4:90:4f:37:4b:2a:ac:ef:93:76:fb:ab:
b8:71:57:cc:1b:4e:44:ad:65:2f:b1:de:eb:7c:c8:
3c:a8:cb:70:56:03:d0:5d:30:06:0d:d5:9d:45:79:
d4:fb:3e:32:7e:55:3d:b3:97:5a:62:ae:0c:d7:37:
7b:5c:46:10:64:7c:e1:45:99:4a:d2:a6:e1:7d:d1:
5e:a7:06:64:9d:02:da:b6:7c:07:71:2c:31:df:8f:
d3:58:69:1f:43:cd:67:1b:73:1e:56:03:d1:7f:e2:
24:c2:53:43:80:b6:2c:c5:25:56:1f:40:27:f5:5a:
84:1a:fa:55:9e:5c:34:f1:06:4e:c9:32:81:6b:ca:
b5:af:77:39:1b:52:e9:ee:81:b3:de:ae:66:f6:1a:
30:2b:66:c0:6b:e3:f9:6c:aa:01:16:c4:c2:82:10:
1a:3a:5c:90:c7:78:aa:e8:eb:d1:41:41:9f:dd:df:
bd:7c:ad:d8:f7:f6:0f:b7:da:7b:04:d8:24:8e:ec:
8b:a4:e3:d9:0b:5a:80:e9:b9:23:12:fd:d5:8a:53:
00:57:1c:5f:4e:31:33:4d:db:a2:fb:c5:50:26:48:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:86:BD:0E:4E:27:1F:61:27:D6:F2:7B:76:15:B9:69:F1:E1:20
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EZ6GvQ5OJx9hJ9bye3YVuWnx4SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:37:3b:47:18:36:e7:17:3d:8e:c9:87:02:fa:75:af:ce:73:
13:76:c1:0e:9d:ea:f2:92:61:1c:17:c0:03:c7:2e:fd:4b:b5:
e3:13:08:0f:c5:bd:ea:ad:a0:83:43:fb:e9:76:f1:1c:d9:3a:
be:38:35:cd:18:97:a3:01:da:3e:7f:7d:d3:a6:4c:23:24:2a:
a9:f4:66:19:c4:f7:c4:ca:f8:3a:e1:98:34:32:8a:a0:0b:0f:
75:ee:82:50:59:6f:88:0b:0c:7b:c5:ee:3d:62:74:e6:28:31:
31:9e:ca:1e:b2:17:e5:29:a9:8c:23:69:a4:50:08:0f:df:d3:
75:88:86:a2:15:af:dd:57:1e:3e:41:bc:5c:de:15:02:39:80:
52:a5:7a:48:80:11:fc:5c:02:81:4c:38:8d:3a:bb:4e:ee:5d:
83:01:35:1d:ec:2c:d0:ca:53:db:12:98:6c:6f:88:4f:9f:c5:
e3:d1:67:6f:e4:6e:2c:99:e1:85:0f:2b:53:59:6e:57:50:8d:
a6:6f:bb:d8:de:e4:7d:15:8c:78:cf:be:cb:08:8a:fb:32:82:
ad:68:3a:6d:15:02:dd:8c:73:6a:ba:36:b1:f8:50:3b:bc:32:
2f:a8:26:26:a6:4e:31:39:27:f7:6e:c3:4a:3d:f0:c0:44:38:
12:40:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:37 2025 by rpki-client