Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/If2rWE9_qlahdcPos4c49m8nYdc.roa
File: If2rWE9_qlahdcPos4c49m8nYdc.roa (raw, json)
Hash identifier: h8+6ylMqcnNXIIKSSLZSqV1fRdo+DVjUSWDsblkMkZY=
Subject key identifier: 21:FD:AB:58:4F:7F:AA:56:A1:75:C3:E8:B3:87:38:F6:6F:27:61:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199DE2089509BBA1423CA7B983A34C89093
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/If2rWE9_qlahdcPos4c49m8nYdc.roa
Signing time: Mon 13 Oct 2025 15:11:38 +0000
ROA not before: Mon 13 Oct 2025 15:11:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 195.40.20.0/23 maxlen: 23
212.134.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:20:89:50:9b:ba:14:23:ca:7b:98:3a:34:c8:90:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 15:11:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21fdab584f7faa56a175c3e8b38738f66f2761d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:78:96:c4:53:38:5d:c8:d0:2e:1b:f9:10:
96:e4:43:a9:17:00:c0:b4:1b:20:9f:d8:dd:58:c5:
2b:a0:c7:05:17:d8:ac:82:f8:5a:ee:db:15:e1:1b:
82:69:64:83:1d:ef:95:19:d1:5c:20:6a:56:44:c0:
7b:15:5a:fd:4d:fa:a7:09:50:6e:ca:36:0d:3c:c5:
9d:f8:cc:86:cc:0f:f7:7c:c9:89:45:ee:94:22:c5:
7f:77:aa:e9:78:17:32:39:17:42:60:2c:36:75:d0:
0c:4f:98:26:d3:14:82:43:c8:21:2e:31:8c:f5:d4:
9a:b7:06:51:d9:23:52:48:25:6e:c2:71:88:2b:0f:
02:91:3c:a5:e5:e0:f2:09:af:79:5e:ef:3c:ef:42:
78:91:b4:40:dc:f7:dc:19:cd:ef:6b:15:c7:5c:57:
0a:e8:fa:78:c3:d6:72:a2:be:ee:90:e9:70:2c:0c:
ab:8a:58:b5:50:47:57:b4:4f:7b:94:bf:84:59:d1:
82:cd:5f:75:36:f7:f0:92:d4:08:a0:95:40:c0:33:
b0:a8:cb:f7:00:ba:90:80:73:c7:85:13:37:e2:5c:
b6:a1:57:72:b2:45:fb:ea:dd:ef:c0:38:30:ba:3e:
11:68:c3:f2:9a:61:69:0a:4a:3a:66:74:bd:dd:5a:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:AB:58:4F:7F:AA:56:A1:75:C3:E8:B3:87:38:F6:6F:27:61:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/If2rWE9_qlahdcPos4c49m8nYdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.20.0/23
212.134.75.0/24
Signature Algorithm: sha256WithRSAEncryption
67:33:12:f3:ed:e9:ec:a8:09:f7:91:8b:49:b1:70:33:36:79:
e6:57:f4:19:7a:15:e2:ba:c1:92:91:b0:c8:80:b3:fe:0c:03:
3b:be:18:f4:6c:bd:b0:5b:41:30:9b:9d:e4:3d:20:9c:2a:41:
6a:79:f0:c1:0a:ff:03:6d:e6:df:93:30:84:27:0e:64:62:64:
e5:17:66:b2:d0:6c:4c:cb:8a:82:c2:74:35:99:be:33:60:c0:
6b:69:f2:92:e4:29:60:b3:d8:e5:d4:b2:f4:4e:60:d3:bd:be:
7b:03:0c:58:c4:bd:bc:1c:7f:0a:f8:12:cc:d0:e9:41:70:3f:
0e:95:72:b5:1b:33:c6:9f:5c:f6:90:41:67:c3:07:06:27:79:
de:44:29:c0:0b:c5:7a:05:5e:62:b4:33:9d:df:f8:d7:19:ee:
13:70:40:a9:56:f5:1c:29:b0:3b:ec:d9:5b:35:f6:a0:2f:4b:
c2:4b:71:d3:2d:50:0e:74:f9:21:dc:69:08:76:60:b9:0a:6e:
6c:94:e8:68:c4:f3:3f:7b:5f:11:5a:fa:77:82:84:75:fb:f3:
e7:6d:8b:85:5f:03:9b:1b:5e:35:9c:5e:9d:aa:4c:98:e0:19:
3a:1b:50:83:99:30:1b:b1:36:f5:06:74:b7:24:02:8d:fb:d1:
6b:5e:1c:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZneIIlQm7oUI8p7mDo0yJCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMDEzMTUxMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZkYWI1ODRmN2ZhYTU2YTE3NWMzZThiMzg3MzhmNjZmMjc2MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhld4lsRTOF3I0C4b+RCW5EOpFwDA
tBsgn9jdWMUroMcFF9isgvha7tsV4RuCaWSDHe+VGdFcIGpWRMB7FVr9TfqnCVBu
yjYNPMWd+MyGzA/3fMmJRe6UIsV/d6rpeBcyORdCYCw2ddAMT5gm0xSCQ8ghLjGM
9dSatwZR2SNSSCVuwnGIKw8CkTyl5eDyCa95Xu8870J4kbRA3PfcGc3vaxXHXFcK
6Pp4w9Zyor7ukOlwLAyrili1UEdXtE97lL+EWdGCzV91NvfwktQIoJVAwDOwqMv3
ALqQgHPHhRM34ly2oVdyskX76t3vwDgwuj4RaMPymmFpCko6ZnS93VqZ6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCH9q1hPf6pWoXXD6LOHOPZvJ2HXMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvSWYycldFOV9xbGFoZGNQb3M0YzQ5bThuWWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwygUAwQA
1IZLMA0GCSqGSIb3DQEBCwUAA4IBAQBnMxLz7ensqAn3kYtJsXAzNnnmV/QZehXi
usGSkbDIgLP+DAM7vhj0bL2wW0Ewm53kPSCcKkFqefDBCv8DbebfkzCEJw5kYmTl
F2ay0GxMy4qCwnQ1mb4zYMBrafKS5Clgs9jl1LL0TmDTvb57AwxYxL28HH8K+BLM
0OlBcD8OlXK1GzPGn1z2kEFnwwcGJ3neRCnAC8V6BV5itDOd3/jXGe4TcECpVvUc
KbA77NlbNfagL0vCS3HTLVAOdPkh3GkIdmC5Cm5slOhoxPM/e18RWvp3goR1+/Pn
bYuFXwObG141nF6dqkyY4Bk6G1CDmTAbsTb1BnS3JAKN+9FrXhzf
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:54 2025 by rpki-client