
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F5Gp3FsFGjMuoxbpnzuAmVBOxb4.roa
File: F5Gp3FsFGjMuoxbpnzuAmVBOxb4.roa (raw, json)
Hash identifier: BY6PotOZfLGZ71cMYcb0vupqoAJSLu1UH2qcW41zw7E=
Subject key identifier: 17:91:A9:DC:5B:05:1A:33:2E:A3:16:E9:9F:3B:80:99:50:4E:C5:BE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199DE100E8A99BE0FFB04F35A16652238DC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F5Gp3FsFGjMuoxbpnzuAmVBOxb4.roa
Signing time: Mon 13 Oct 2025 14:53:38 +0000
ROA not before: Mon 13 Oct 2025 14:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.134.55.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:10:0e:8a:99:be:0f:fb:04:f3:5a:16:65:22:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 14:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1791a9dc5b051a332ea316e99f3b8099504ec5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:d7:dd:8e:3c:25:dc:b5:8f:3a:72:62:f7:
b8:bf:98:0d:37:ed:b3:f0:b5:c0:02:a3:85:41:9f:
ec:a2:29:c1:8f:12:cf:94:10:21:df:dd:a1:9d:f0:
b6:11:f6:d9:19:90:a8:dc:03:32:63:bd:be:e1:4a:
8b:c2:66:99:24:fe:53:54:41:8e:5a:ba:12:f0:25:
9e:f9:17:3a:69:fa:f2:66:49:4e:32:50:c1:ca:e1:
17:74:93:70:27:3c:39:aa:56:a5:eb:fe:cf:8f:9c:
fc:64:70:e2:8d:d2:90:b8:5a:35:1d:3c:ed:9a:3c:
5c:9d:40:f3:02:d0:33:38:93:db:61:ba:64:75:b2:
13:04:6a:ee:7d:ba:77:ca:2a:95:60:da:22:27:dc:
dd:0c:7f:6c:7c:a4:7c:cd:a0:ab:87:28:b0:82:01:
72:6c:d5:85:0b:2d:08:ad:9a:c4:02:06:f6:bf:09:
b9:f0:e8:9f:bb:c2:11:87:a5:e1:16:5d:d7:ee:52:
1f:a5:71:b8:9d:b3:68:77:68:f9:fa:4e:60:af:8a:
18:0b:fe:2b:d4:2b:b1:56:81:81:d5:01:91:16:6e:
2e:f3:dd:01:32:cd:62:e8:b0:81:fa:df:01:98:0c:
da:2c:67:c8:f6:d4:17:77:a8:ac:79:9b:42:21:2c:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:A9:DC:5B:05:1A:33:2E:A3:16:E9:9F:3B:80:99:50:4E:C5:BE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F5Gp3FsFGjMuoxbpnzuAmVBOxb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.55.0/24
212.134.98.0/23
212.134.104.0/23
212.134.110.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:a4:21:78:15:11:72:a1:8b:35:ca:84:89:f3:9e:44:b2:8f:
49:17:1c:aa:37:c0:2e:b5:6f:db:1b:8d:65:18:d4:94:fa:2e:
85:07:5d:80:85:61:66:d2:c3:9d:fe:aa:e6:3c:84:3c:af:e4:
e5:24:4a:ea:7a:a4:0c:db:af:3e:8b:a4:f9:18:cf:5e:2c:39:
33:cd:ae:e9:8f:75:4e:4e:74:15:fe:b1:03:ab:b2:d7:90:2e:
f5:da:85:74:11:e2:28:d1:63:ae:fb:94:a9:cb:ca:fc:be:6a:
9c:7f:5a:2b:de:11:6b:6d:db:bf:23:d1:9c:80:45:f1:6b:69:
2a:f0:6d:bb:01:67:19:20:f7:55:0f:b6:14:8d:a0:d9:f3:42:
45:7e:71:c5:ec:0a:5c:ee:46:6f:21:2a:07:7b:0a:41:c4:e5:
96:ef:e6:f0:81:1b:12:c8:0b:e5:41:91:a6:a0:7a:42:6c:4b:
3a:20:d5:0f:3b:a5:80:f4:62:62:d4:6e:fc:a1:4a:5b:2e:cb:
24:0c:59:2b:51:04:0c:87:60:01:61:f6:99:72:c3:49:8a:6d:
14:61:2a:85:98:b9:1a:d9:a4:56:8b:02:f0:5b:68:d1:e0:6b:
70:10:93:a2:7f:01:ec:bc:cd:bc:aa:34:a8:31:c5:65:d6:8d:
60:7e:b3:6b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZneEA6Kmb4P+wTzWhZlIjjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMDEzMTQ1MzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzkxYTlkYzViMDUxYTMzMmVhMzE2ZTk5ZjNiODA5OTUwNGVjNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RfX3Y48Jdy1jzpyYve4v5gNN+2z
8LXAAqOFQZ/soinBjxLPlBAh392hnfC2EfbZGZCo3AMyY72+4UqLwmaZJP5TVEGO
WroS8CWe+Rc6afryZklOMlDByuEXdJNwJzw5qlal6/7Pj5z8ZHDijdKQuFo1HTzt
mjxcnUDzAtAzOJPbYbpkdbITBGrufbp3yiqVYNoiJ9zdDH9sfKR8zaCrhyiwggFy
bNWFCy0IrZrEAgb2vwm58Oifu8IRh6XhFl3X7lIfpXG4nbNod2j5+k5gr4oYC/4r
1CuxVoGB1QGRFm4u890BMs1i6LCB+t8BmAzaLGfI9tQXd6iseZtCISx34wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBeRqdxbBRozLqMW6Z87gJlQTsW+MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvRjVHcDNGc0ZHak11b3hicG56dUFtVkJPeGI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1IY3AwQB
1IZiAwQB1IZoAwQB1IZuMA0GCSqGSIb3DQEBCwUAA4IBAQDRpCF4FRFyoYs1yoSJ
855Eso9JFxyqN8AutW/bG41lGNSU+i6FB12AhWFm0sOd/qrmPIQ8r+TlJErqeqQM
268+i6T5GM9eLDkzza7pj3VOTnQV/rEDq7LXkC712oV0EeIo0WOu+5Spy8r8vmqc
f1or3hFrbdu/I9GcgEXxa2kq8G27AWcZIPdVD7YUjaDZ80JFfnHF7Apc7kZvISoH
ewpBxOWW7+bwgRsSyAvlQZGmoHpCbEs6INUPO6WA9GJi1G78oUpbLsskDFkrUQQM
h2ABYfaZcsNJim0UYSqFmLka2aRWiwLwW2jR4GtwEJOifwHsvM28qjSoMcVl1o1g
frNr
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:43 2025 by rpki-client