Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_eYGiTRHvOfxKSTEwpHBTbmQwdM.roa
File: _eYGiTRHvOfxKSTEwpHBTbmQwdM.roa (raw, json)
Hash identifier: dg5VCV9tm3Pen7TCDIlcXdFFm5HlBOVw562ZOrzFhu0=
Subject key identifier: FD:E6:06:89:34:47:BC:E7:F1:29:24:C4:C2:91:C1:4D:B9:90:C1:D3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199DE10F8A3144B104DDE45DC3FD19D8F47
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_eYGiTRHvOfxKSTEwpHBTbmQwdM.roa
Signing time: Mon 13 Oct 2025 14:54:38 +0000
ROA not before: Mon 13 Oct 2025 14:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 212.134.180.0/22 maxlen: 22
212.134.184.0/22 maxlen: 22
212.134.192.0/22 maxlen: 22
212.134.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:10:f8:a3:14:4b:10:4d:de:45:dc:3f:d1:9d:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 14:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde606893447bce7f12924c4c291c14db990c1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:75:19:9e:a4:d0:7d:74:c6:9b:03:c5:1e:
32:7d:32:21:5b:b3:4c:ff:44:80:bf:34:39:da:ff:
97:63:35:7c:ab:e0:98:60:08:a8:75:1a:54:28:67:
ed:af:49:f4:58:72:36:99:c1:9b:44:6f:af:40:8e:
2b:e5:73:f6:03:f7:e5:02:26:89:f9:e8:02:57:66:
ab:4c:8d:a6:96:39:10:b5:4d:25:f3:33:86:77:fa:
b8:ac:76:76:73:a4:a7:d5:a8:76:85:53:11:e7:8b:
b5:cc:26:e8:e6:9e:e3:ce:ce:8a:92:c5:48:f9:e2:
93:4b:c1:5c:fb:bb:07:52:78:3c:b4:c7:64:71:85:
56:43:2b:92:5b:35:3f:b3:9c:c8:ac:07:e6:10:ac:
5d:23:7b:8c:99:c5:d1:89:c2:b4:a5:77:28:d6:a1:
2f:76:9f:85:73:a0:9d:25:53:4c:15:f6:15:c9:c9:
ee:74:9f:81:3f:95:26:72:5b:de:60:f9:cd:28:32:
f8:23:fb:06:cd:c8:26:c7:a5:40:e3:4a:14:0b:64:
90:a9:49:18:0f:fb:16:f1:ef:f9:b3:b9:67:9c:f5:
1e:1b:14:70:89:d5:e2:50:d9:38:77:03:3b:dc:55:
c0:1c:3a:81:a6:2e:31:56:db:47:be:84:b5:a7:5a:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:06:89:34:47:BC:E7:F1:29:24:C4:C2:91:C1:4D:B9:90:C1:D3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_eYGiTRHvOfxKSTEwpHBTbmQwdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.180.0-212.134.187.255
212.134.192.0/22
212.134.200.0/22
Signature Algorithm: sha256WithRSAEncryption
68:99:83:39:7d:76:8d:00:7b:9b:13:96:fd:86:08:23:91:9b:
e2:13:0f:4c:1e:7b:50:17:09:ef:2e:5b:49:1b:bc:7f:ea:69:
56:9f:36:61:f5:bc:f6:e5:0a:e8:bb:21:be:f6:78:78:c1:cd:
47:06:c3:99:05:f8:54:af:12:6c:01:d5:4a:96:02:07:80:5d:
50:3d:b7:41:40:ad:e2:b8:32:ad:0c:31:c2:81:88:4d:2c:6d:
35:77:41:87:fe:43:c6:fe:18:3d:e9:02:8c:ff:46:f6:f0:31:
bd:ca:28:5f:11:9e:36:2c:19:24:96:c3:9f:1e:65:3e:06:0b:
6c:f2:04:2e:8d:37:39:a4:4f:15:f0:e2:69:a0:e1:a3:c0:d5:
40:60:c0:87:8a:54:7b:c4:44:a4:b9:e2:c3:12:13:de:20:81:
74:3d:32:1e:ff:48:33:5d:08:ee:18:7d:3d:8b:76:e4:d4:8c:
84:aa:d5:cd:c1:34:f6:d5:59:95:11:11:67:03:4c:76:6c:86:
f7:c6:a2:28:a5:b3:d4:2e:f0:75:aa:87:bc:94:bd:12:ad:3f:
01:3a:0f:60:1a:cb:bd:15:b2:20:7d:09:8a:88:be:ba:96:b4:
36:ea:43:36:b8:16:9b:6b:b3:89:35:19:eb:60:be:3d:6c:72:
10:8e:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:52 2025 by rpki-client