Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EZp06QnRvlpNZpzUPQSYGSengUk.roa
File: EZp06QnRvlpNZpzUPQSYGSengUk.roa (raw, json)
Hash identifier: s/527ygyMaq37TVa9rbqDq5MjgHtiHHZ4oIG7QmcF2I=
Subject key identifier: 11:9A:74:E9:09:D1:BE:5A:4D:66:9C:D4:3D:04:98:19:27:A7:81:49
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199C3F688F3A30B8208917FFD066B5D7F6C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EZp06QnRvlpNZpzUPQSYGSengUk.roa
Signing time: Wed 08 Oct 2025 13:15:38 +0000
ROA not before: Wed 08 Oct 2025 13:15:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213495
IP address blocks: 212.134.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:f6:88:f3:a3:0b:82:08:91:7f:fd:06:6b:5d:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 8 13:15:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119a74e909d1be5a4d669cd43d04981927a78149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:41:e0:85:36:80:97:01:34:10:c9:b5:3d:
00:65:1b:5d:2c:b6:c4:32:11:16:1f:c2:2b:6c:82:
4c:85:4d:bb:02:cc:8f:cd:d5:ae:c4:9f:85:38:92:
4f:71:2c:ca:79:90:12:bd:0f:04:2a:f5:b8:53:d0:
36:ed:c8:f8:5b:e7:fe:a7:9d:2c:c3:83:c6:02:dd:
97:6f:d0:29:3e:82:15:f9:6a:f6:6b:da:71:e3:f5:
ec:27:73:d4:4c:0a:e4:15:2d:41:8b:7c:ad:38:b3:
79:f9:8a:85:e3:bc:8e:f5:60:22:37:0f:52:ca:6d:
26:89:62:78:0d:73:36:d1:57:cf:03:04:ef:9b:73:
45:ef:4d:e6:24:80:0f:b1:59:59:aa:74:22:27:92:
a2:df:e1:41:bf:97:28:5e:34:86:5b:9d:68:5a:90:
5f:14:48:59:70:35:8f:b0:d3:e0:46:9f:93:60:16:
3a:69:ee:a7:b8:a5:bf:dc:f9:81:fc:ee:18:e0:ab:
3f:c0:c5:25:b7:e6:e8:68:3a:fd:cf:56:16:f9:45:
3f:18:12:d9:23:b7:d0:5d:03:b6:6c:d9:96:48:a0:
26:87:0b:c2:ca:da:94:c2:58:55:9a:da:c6:b3:01:
51:17:f5:6d:24:29:b3:d7:09:04:ea:5b:eb:08:0e:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:74:E9:09:D1:BE:5A:4D:66:9C:D4:3D:04:98:19:27:A7:81:49
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EZp06QnRvlpNZpzUPQSYGSengUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.204.0/22
Signature Algorithm: sha256WithRSAEncryption
36:3c:18:ad:a9:78:91:4a:dd:39:2f:3f:08:1d:11:c2:a7:91:
0a:f3:a1:6d:68:42:02:07:66:0b:b4:c7:65:e9:83:5b:e3:41:
7d:d9:0b:ad:04:b7:fb:67:5f:33:8e:89:45:52:06:9a:f5:d0:
02:79:b5:4c:6a:e6:eb:5e:32:31:ad:92:76:5c:2e:22:41:c3:
79:bc:1e:e8:03:90:6f:9c:69:0c:9c:45:60:81:97:71:4f:b6:
16:a0:27:27:d0:84:ad:6c:5b:53:92:67:ad:57:d5:a0:bb:28:
a0:d9:a1:24:b4:97:f8:a3:95:31:73:ec:db:5d:b8:a4:08:0a:
0e:e4:a3:a7:d1:f4:72:d4:5a:c3:72:72:4e:6c:f8:d7:2c:9d:
d6:67:98:33:93:52:81:85:5f:4f:0a:62:50:a0:f5:55:b0:30:
04:53:aa:e1:ad:fe:4e:ac:9d:29:aa:26:ff:d6:ef:34:9f:15:
1e:3b:86:6a:a2:50:cd:9c:ea:80:e2:32:b1:cc:a8:1c:47:c6:
00:a5:59:a6:d4:10:e6:d2:3a:bf:90:ff:52:d9:41:b3:82:28:
f5:75:97:c2:33:7b:bd:a1:ee:10:c1:5c:b2:b5:37:2a:3c:2f:
60:c8:38:90:94:7b:ab:a2:3b:0c:18:f2:15:67:72:49:c1:8e:
ff:9d:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:02 2025 by rpki-client