Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PhCMTGOYaFZ1d7dR1jN5by-wvnI.roa
File: PhCMTGOYaFZ1d7dR1jN5by-wvnI.roa (raw, json)
Hash identifier: sOSoElW80lAphlv3zAqLuDo69Z8sNBMB/srkY9sJ0/0=
Subject key identifier: 3E:10:8C:4C:63:98:68:56:75:77:B7:51:D6:33:79:6F:2F:B0:BE:72
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199CDE988E12C96D6C40D202A64F6E78FC3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PhCMTGOYaFZ1d7dR1jN5by-wvnI.roa
Signing time: Fri 10 Oct 2025 11:37:38 +0000
ROA not before: Fri 10 Oct 2025 11:37:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 109.204.104.0/21 maxlen: 24
212.134.21.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.60.0/24 maxlen: 24
212.134.61.0/24 maxlen: 24
212.134.62.0/24 maxlen: 24
212.134.63.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.85.0/24 maxlen: 24
212.134.87.0/24 maxlen: 24
212.134.88.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.148.0/22 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.248.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.159.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:e9:88:e1:2c:96:d6:c4:0d:20:2a:64:f6:e7:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 10 11:37:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e108c4c639868567577b751d633796f2fb0be72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:0e:64:3c:6e:7d:7a:87:22:78:5d:47:05:
3e:73:ac:67:ae:67:47:e8:65:53:0c:d5:49:e1:3e:
0b:40:14:ce:27:34:30:bf:9f:4d:07:68:b8:51:58:
0a:9b:a5:cc:43:b3:f6:52:90:7e:f1:c0:2b:9e:39:
52:8d:3b:88:48:3f:bf:83:95:a3:9d:46:f9:cb:37:
d0:9c:36:a0:25:e3:18:db:8a:5e:c8:ef:b6:8a:df:
a5:04:1a:11:48:10:a5:31:67:60:56:e1:c0:38:3e:
6f:98:0c:b9:95:39:40:f4:11:8d:5e:fd:d9:4c:39:
42:ca:2d:f2:04:f9:02:75:a2:aa:51:49:84:80:3d:
8b:3b:92:12:b6:9a:0c:4d:d4:65:7d:30:c3:08:b0:
aa:56:b0:27:ca:66:68:4a:a6:06:f9:d8:dc:02:d9:
54:ed:60:6e:d5:38:d2:38:55:c9:02:3f:b8:38:0c:
17:ca:60:5b:1e:ac:88:77:b9:4a:fb:33:6c:7b:62:
84:a7:c6:cf:14:cf:c6:d5:db:5c:fd:40:bc:28:60:
74:94:57:0f:7d:0b:41:dc:01:d7:49:2e:1d:87:21:
36:57:4f:68:21:7f:c2:18:a7:ed:ac:7f:5f:3f:84:
d0:33:21:57:48:7e:ff:58:7a:95:d3:d4:ba:6b:55:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:8C:4C:63:98:68:56:75:77:B7:51:D6:33:79:6F:2F:B0:BE:72
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PhCMTGOYaFZ1d7dR1jN5by-wvnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.104.0/21
212.134.21.0-212.134.25.255
212.134.38.0/23
212.134.45.0/24
212.134.56.0/23
212.134.59.0-212.134.63.255
212.134.80.0/22
212.134.85.0/24
212.134.87.0-212.134.89.255
212.134.95.0/24
212.134.106.0/23
212.134.116.0/22
212.134.148.0/22
212.134.188.0/22
212.134.196.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.235.255
212.134.248.0/22
212.135.16.0/22
212.135.159.0/24
212.135.165.0-212.135.173.255
Signature Algorithm: sha256WithRSAEncryption
c4:2f:52:16:8b:1a:05:5d:d3:4c:60:8b:c1:0a:29:fa:88:14:
ca:7e:d2:79:d7:95:aa:cb:26:45:54:10:56:08:69:90:90:07:
45:24:5b:ee:6e:b3:e0:5d:59:ca:30:27:a8:5b:d0:ee:1b:79:
75:f1:0c:a8:70:1f:93:77:dc:b0:f0:5a:93:8f:88:52:19:a4:
d9:5e:19:f6:14:6e:1e:cd:89:5f:bf:98:61:39:52:e5:d5:39:
aa:d1:16:ef:ce:b7:5b:e0:3c:53:06:be:77:d0:fa:8d:58:06:
9b:f3:34:cf:f2:30:d8:b0:86:02:9e:01:d7:eb:8c:af:1b:0c:
da:25:6e:59:2e:4d:83:e8:3d:8a:e0:66:9e:45:33:c5:c7:3d:
50:6e:28:d5:79:91:86:95:4e:9f:42:3b:94:1b:4b:22:4c:51:
ee:96:53:4f:4e:4b:a0:48:ff:cb:25:75:01:e5:16:3a:2a:a6:
fa:44:c8:f9:7a:46:b4:19:f1:cb:6f:b9:e5:89:4f:8a:ab:55:
e6:4f:e3:6b:25:9d:56:18:47:df:b5:dc:39:c0:8c:ec:bb:7f:
c9:71:29:90:d2:86:b4:49:35:ed:6c:c5:cb:95:5d:44:57:23:
61:b1:e5:83:a5:06:65:e9:14:0d:76:e1:17:5f:db:e1:65:8c:
76:d5:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:28 2025 by rpki-client