Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aILMQ2_NSOJwmdTtv70cyOBsbIo.roa
File: aILMQ2_NSOJwmdTtv70cyOBsbIo.roa (raw, json)
Hash identifier: ZKMjfbuewwKJMbKeuOFgAHH8QkWys7x852+aRCm5GRw=
Subject key identifier: 68:82:CC:43:6F:CD:48:E2:70:99:D4:ED:BF:BD:1C:C8:E0:6C:6C:8A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01997588CEDB4EE3A0154539F67400964461
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aILMQ2_NSOJwmdTtv70cyOBsbIo.roa
Signing time: Tue 23 Sep 2025 07:45:24 +0000
ROA not before: Tue 23 Sep 2025 07:45:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272659
IP address blocks: 212.134.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:88:ce:db:4e:e3:a0:15:45:39:f6:74:00:96:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 07:45:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6882cc436fcd48e27099d4edbfbd1cc8e06c6c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:83:5f:b2:26:33:ae:bc:1d:52:40:c9:f5:
b9:cb:0f:c6:7e:21:96:e3:25:c2:d3:23:d2:c1:80:
83:11:b9:3a:92:c2:ad:b5:8b:f9:21:54:b8:b8:2d:
c2:80:72:75:cb:af:a9:f0:14:27:ab:66:76:ae:d3:
cb:1f:55:67:35:9a:31:02:5d:65:da:df:6f:71:e8:
2d:c2:ff:3f:b9:2b:6d:bf:f7:6c:b0:c5:fb:11:d2:
d8:d5:49:21:9f:d6:c5:5a:01:ad:0c:e8:15:54:67:
f4:7e:27:26:b8:de:63:59:a6:be:b2:b3:4d:3e:7e:
a6:d3:12:a4:0a:27:b8:00:86:43:47:29:f1:51:96:
db:ce:e5:1a:13:74:61:51:d0:60:67:25:ed:67:27:
b7:e7:40:3b:e2:d4:44:0e:6a:33:29:9c:54:96:40:
af:c7:cf:60:b9:ac:e8:24:65:04:8e:9d:ca:01:2d:
7c:5e:33:1f:7b:ff:f5:9c:e3:55:7e:0a:fc:06:17:
2e:94:b1:b7:52:2a:d1:df:bd:05:61:72:63:68:ca:
e1:e6:6a:5b:3d:f0:59:33:41:20:19:dd:ec:af:bd:
b1:67:95:60:7e:3d:21:b2:ab:32:7e:8b:ed:b0:83:
f0:f3:b6:61:f9:39:89:01:94:25:74:e4:6f:3c:08:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:CC:43:6F:CD:48:E2:70:99:D4:ED:BF:BD:1C:C8:E0:6C:6C:8A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aILMQ2_NSOJwmdTtv70cyOBsbIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.92.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:cc:ed:7a:b5:fc:61:6d:64:a2:82:c2:fa:0c:77:66:78:
fd:a8:1a:b9:96:b8:36:dc:0d:42:33:c3:3b:e0:da:ac:85:c2:
2c:fe:27:bc:d9:c1:33:18:57:c2:64:43:da:d6:06:e1:d2:93:
07:70:6b:3d:be:54:3c:fa:95:0d:f9:1f:c2:68:ed:e7:84:79:
18:c4:83:8a:a3:bd:b4:c6:64:b4:fb:b2:44:5b:01:22:10:f8:
b6:7c:09:d6:16:2d:5b:01:7a:92:08:f3:46:f0:8a:a2:49:48:
be:72:c4:e2:62:57:7c:6a:47:f4:a0:76:3f:3b:fb:39:fc:8f:
c5:f2:44:00:4d:c5:0d:f7:24:44:d2:6f:8d:70:35:13:95:69:
1b:e5:c2:47:ed:b1:4c:6e:ab:29:ce:80:c0:5a:01:40:2b:c0:
50:a8:dd:33:7b:49:17:5a:95:b0:01:8f:ae:5d:e7:6f:88:40:
8a:cd:c1:bb:e7:d4:43:0e:83:f7:9c:bb:78:c2:00:82:02:e3:
71:e1:e2:33:a7:28:6e:f2:86:4e:9d:fd:a3:23:70:21:4e:57:
f7:25:e1:24:68:4d:67:64:0c:0d:52:8c:19:44:99:2a:9f:10:
be:27:85:ac:1e:75:29:d8:2b:1e:b5:3a:eb:c6:29:11:86:2a:
08:6d:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:14 2025 by rpki-client