Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VgWXUluKXdQe7ngWonk8vdRzvg8.roa
File: VgWXUluKXdQe7ngWonk8vdRzvg8.roa (raw, json)
Hash identifier: 8dgLcEGToeVRQMwz9ehvA+q6LD99m3OAquW5aAMTJCc=
Subject key identifier: 56:05:97:52:5B:8A:5D:D4:1E:EE:78:16:A2:79:3C:BD:D4:73:BE:0F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199CD937901C959BD0F70B65C71590F34AD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VgWXUluKXdQe7ngWonk8vdRzvg8.roa
Signing time: Fri 10 Oct 2025 10:03:38 +0000
ROA not before: Fri 10 Oct 2025 10:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 212.134.98.0/23 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.110.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.148.0/23 maxlen: 24
212.135.150.0/23 maxlen: 24
212.135.152.0/23 maxlen: 24
212.135.156.0/23 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.244.0/23 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:93:79:01:c9:59:bd:0f:70:b6:5c:71:59:0f:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 10 10:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=560597525b8a5dd41eee7816a2793cbdd473be0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:88:37:95:ea:ec:46:28:0c:cf:18:83:e3:
d2:08:92:e8:bc:6d:bf:06:52:0f:0f:45:69:f4:fd:
73:cf:e3:67:0e:9a:da:0d:07:b1:fe:88:11:b3:e5:
b2:82:39:88:d5:87:d1:df:b2:a7:89:e9:d4:73:e4:
f7:5b:9e:f4:f4:38:0b:38:43:19:42:87:71:b8:06:
64:96:20:f5:a1:02:43:2a:f2:66:56:02:d3:4c:ea:
10:61:82:33:71:e3:d7:dd:59:00:2c:49:03:b4:75:
ce:21:ef:a7:29:5a:6f:1d:e3:7f:fc:61:5d:48:e1:
af:c5:04:1a:f1:9a:21:ed:94:c0:7d:d0:6a:0e:41:
8e:c9:a2:28:c8:66:0e:8b:90:17:f6:e9:f6:96:58:
46:0e:ac:64:53:ae:c9:01:e3:c4:42:8d:49:f8:d4:
ec:c3:dd:1b:95:24:6f:b8:f2:c3:96:4b:1f:0c:c7:
10:e4:a1:61:f7:b4:07:8e:46:6a:d3:70:be:6b:b6:
f9:aa:27:24:26:ce:e6:be:c4:de:3c:58:58:52:05:
76:17:54:5c:c0:7e:26:9a:bc:34:21:1c:98:54:c4:
af:36:54:80:70:fb:77:dd:63:8d:a9:40:6d:f0:e9:
61:01:2d:e7:88:e7:d4:39:3a:4d:f6:cc:af:89:ac:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:97:52:5B:8A:5D:D4:1E:EE:78:16:A2:79:3C:BD:D4:73:BE:0F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VgWXUluKXdQe7ngWonk8vdRzvg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.98.0/23
212.134.104.0/23
212.134.110.0/23
212.135.24.0/23
212.135.28.0/23
212.135.148.0-212.135.153.255
212.135.156.0/23
212.135.240.0/23
212.135.244.0/23
212.135.248.0/23
212.135.252.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7a:1c:e2:b5:4e:d5:28:da:6b:40:c8:ee:4e:4a:57:97:46:
51:80:f8:2d:9d:cf:37:f1:28:ac:d8:c1:29:02:67:79:a0:bf:
8d:bb:67:39:62:7a:f7:a8:91:44:91:9a:32:a8:ea:39:77:80:
ed:b9:ec:24:8c:97:f1:e9:a3:21:38:09:d1:d2:da:54:e8:5f:
b2:03:35:28:8e:dd:26:ee:02:bd:68:15:c7:e8:6b:2a:b5:ab:
71:1c:e7:64:2a:85:76:b4:69:4f:60:5a:55:1a:0d:06:aa:19:
dc:37:30:4e:f4:a9:5f:1c:e3:f2:16:bb:ae:e4:61:3c:d9:5a:
fb:0f:ff:21:ec:11:a8:6d:d9:fd:4b:b4:05:32:71:24:c6:de:
54:86:10:56:46:9a:93:df:85:a3:57:6a:f9:d0:02:4a:0d:a4:
6e:26:60:e2:6f:87:3c:ae:af:0c:28:ba:d0:f0:ba:08:a2:d7:
de:fe:39:0d:df:15:55:75:09:a9:54:a9:3e:1e:95:77:8e:89:
04:2e:45:c9:c2:c1:d6:56:df:5b:1b:b3:18:b9:95:18:50:80:
5c:ee:3e:b8:28:14:70:84:d3:e6:f1:f1:af:18:f9:19:14:d5:
11:5e:3a:2e:b7:48:41:10:96:0e:d7:ab:87:e7:24:31:87:fb:
b0:3b:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:13 2025 by rpki-client