Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_qHc72RCp-U7a9NZuNwkSrdwdjQ.roa
File: _qHc72RCp-U7a9NZuNwkSrdwdjQ.roa (raw, json)
Hash identifier: dEqaNZX/8ioDz6bSyweodSXvdavDPyj5A5TLV7gQiaw=
Subject key identifier: FE:A1:DC:EF:64:42:A7:E5:3B:6B:D3:59:B8:DC:24:4A:B7:70:76:34
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199F69C8EE8E6AEEA1A932FFBB6B1CD3AB8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_qHc72RCp-U7a9NZuNwkSrdwdjQ.roa
Signing time: Sat 18 Oct 2025 09:17:59 +0000
ROA not before: Sat 18 Oct 2025 09:17:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f6:9c:8e:e8:e6:ae:ea:1a:93:2f:fb:b6:b1:cd:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 18 09:17:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fea1dcef6442a7e53b6bd359b8dc244ab7707634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:31:e0:70:04:b5:81:cc:5e:c7:32:6b:ee:
0f:9e:90:96:a4:bb:e3:12:ec:db:3d:82:2e:34:1f:
fa:36:ce:2d:f4:2f:9a:b1:80:63:db:44:79:f2:f6:
8c:c9:fd:d6:09:ad:a6:32:05:76:d4:97:f7:3f:d6:
96:4e:a9:ce:24:0e:62:8b:c0:d4:9b:30:e6:25:a4:
6c:a9:05:2b:d2:a8:80:f1:42:e3:b8:84:50:22:52:
3d:29:88:08:1b:73:7e:75:13:66:58:48:9a:b5:48:
df:a9:3d:b6:41:97:6f:81:d6:ac:6a:f0:77:ec:77:
f9:f0:ef:72:21:19:b1:8f:fc:aa:64:1b:79:ba:70:
b0:0f:25:25:a9:d3:89:75:a7:80:fb:af:32:8d:8a:
c3:7d:15:44:34:e3:d1:cb:b4:6b:af:12:df:2f:02:
2b:98:69:e6:3b:85:3d:7a:ba:83:cb:4f:aa:f5:a6:
5b:08:73:e6:67:21:20:58:82:9c:96:95:f4:e5:17:
13:23:78:12:a3:16:35:a6:ff:27:a7:1d:ae:ef:8b:
76:46:ee:96:67:89:70:b4:f6:40:fe:62:4b:da:a0:
99:91:b5:97:78:1d:0b:11:a7:33:b5:45:3f:72:1b:
be:46:4f:6d:6d:a8:3c:76:6b:39:f5:09:f0:84:a0:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A1:DC:EF:64:42:A7:E5:3B:6B:D3:59:B8:DC:24:4A:B7:70:76:34
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_qHc72RCp-U7a9NZuNwkSrdwdjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/24
212.134.36.0/24
212.134.47.0/24
212.134.58.0/24
212.134.109.0/24
212.134.156.0/24
212.134.179.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
Signature Algorithm: sha256WithRSAEncryption
bc:bc:7c:d8:a1:7c:c9:19:60:da:d8:f3:2a:a0:8b:75:94:03:
ed:76:1d:59:d8:91:69:12:7f:ad:41:45:17:04:11:1b:74:9f:
15:4d:13:2e:c1:d6:a5:3e:f4:96:73:1c:65:2b:d6:1b:f4:e2:
cf:9a:8b:51:1b:ce:6e:dc:eb:23:c8:89:04:87:9b:f9:81:a2:
0b:f9:cb:d7:a1:2c:a6:a3:c9:a4:8b:22:03:b5:1d:a2:3b:e5:
a0:47:78:86:cb:b3:c8:9c:b9:10:25:cf:43:7c:37:a2:1d:5c:
a7:c8:22:64:e9:ef:01:4c:6b:00:65:93:10:a3:b9:ca:d9:a0:
1d:76:12:76:73:27:2b:38:4e:2e:5d:30:2c:bf:7e:3b:76:cd:
8a:af:b9:36:98:1f:e4:39:04:35:b2:30:ce:33:17:b3:92:75:
2c:10:3f:d1:d6:13:08:fe:98:2b:92:8b:6c:9e:c2:92:c5:13:
fa:e1:43:77:19:fa:cc:d9:11:2d:27:86:ed:b5:dc:f4:d8:51:
82:08:b1:4a:54:86:ad:6d:54:e6:6a:50:74:60:8e:17:bf:d1:
44:31:7b:b7:92:b1:36:c5:9e:e5:31:3e:2b:f9:ed:15:da:41:
3c:ca:72:48:33:d1:8e:a5:d3:70:64:67:42:ea:08:ae:00:e8:
24:f4:c3:7b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZn2nI7o5q7qGpMv+7axzTq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMDE4MDkxNzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWExZGNlZjY0NDJhN2U1M2I2YmQzNTliOGRjMjQ0YWI3NzA3NjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Mx4HAEtYHMXscya+4PnpCWpLvj
EuzbPYIuNB/6Ns4t9C+asYBj20R58vaMyf3WCa2mMgV21Jf3P9aWTqnOJA5ii8DU
mzDmJaRsqQUr0qiA8ULjuIRQIlI9KYgIG3N+dRNmWEiatUjfqT22QZdvgdasavB3
7Hf58O9yIRmxj/yqZBt5unCwDyUlqdOJdaeA+68yjYrDfRVENOPRy7RrrxLfLwIr
mGnmO4U9erqDy0+q9aZbCHPmZyEgWIKclpX05RcTI3gSoxY1pv8npx2u74t2Ru6W
Z4lwtPZA/mJL2qCZkbWXeB0LEacztUU/chu+Rk9tbag8dms59QnwhKC4gQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFP6h3O9kQqflO2vTWbjcJEq3cHY0MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvX3FIYzcyUkNwLVU3YTlOWnVOd2tTcmR3ZGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQA1IYSAwQA
1IYkAwQA1IYvAwQA1IY6AwQA1IZtAwQA1IacAwQA1IazAwQA1IeeMAwDBADUh6ED
BADUh6IwDQYJKoZIhvcNAQELBQADggEBALy8fNihfMkZYNrY8yqgi3WUA+12HVnY
kWkSf61BRRcEERt0nxVNEy7B1qU+9JZzHGUr1hv04s+ai1Ebzm7c6yPIiQSHm/mB
ogv5y9ehLKajyaSLIgO1HaI75aBHeIbLs8icuRAlz0N8N6IdXKfIImTp7wFMawBl
kxCjucrZoB12EnZzJys4Ti5dMCy/fjt2zYqvuTaYH+Q5BDWyMM4zF7OSdSwQP9HW
Ewj+mCuSi2yewpLFE/rhQ3cZ+szZES0nhu213PTYUYIIsUpUhq1tVOZqUHRgjhe/
0UQxe7eSsTbFnuUxPiv57RXaQTzKckgz0Y6l03BkZ0LqCK4A6CT0w3s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:09 2025 by rpki-client