Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/caqmYV3s7qwrJJM-scHb1pjE5eA.roa
File: caqmYV3s7qwrJJM-scHb1pjE5eA.roa (raw, json)
Hash identifier: Hdpu81nQr3dmheOcGN7Dk5Vy9q2D4utDiUK7P4ZKptY=
Subject key identifier: 71:AA:A6:61:5D:EC:EE:AC:2B:24:93:3E:B1:C1:DB:D6:98:C4:E5:E0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199946BE4B01D4F697945F50A07E77C5A6F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/caqmYV3s7qwrJJM-scHb1pjE5eA.roa
Signing time: Mon 29 Sep 2025 07:42:02 +0000
ROA not before: Mon 29 Sep 2025 07:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 212.134.17.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.37.0/24 maxlen: 24
212.134.53.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:6b:e4:b0:1d:4f:69:79:45:f5:0a:07:e7:7c:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 29 07:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71aaa6615deceeac2b24933eb1c1dbd698c4e5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:43:71:c6:d7:ec:55:55:42:fc:74:74:1d:
ed:8e:59:11:01:bb:4e:f8:44:95:1e:31:07:29:06:
8d:89:ad:cd:e5:9b:50:57:19:30:01:0e:17:d0:5e:
97:28:2f:d3:eb:6e:00:60:b4:54:de:52:ea:9f:2d:
cf:e4:0d:97:80:8a:50:18:f7:03:1f:71:63:31:92:
15:51:dc:a4:05:f0:62:78:2a:59:41:75:d2:83:e7:
61:b1:8e:26:95:c0:6e:f2:b4:13:8e:dc:3e:85:7a:
4f:3a:a5:aa:36:74:4c:1c:e5:63:c4:c2:dd:7c:e5:
7b:dc:6b:af:16:38:01:6c:51:e5:ac:75:25:5b:0a:
82:e1:ef:39:6c:e8:64:03:c7:ab:e7:e3:1e:de:f9:
c1:dc:95:f6:07:15:08:26:2b:72:9b:62:e3:33:78:
48:1d:7b:f4:94:ac:4e:9b:8b:67:a4:f8:db:9f:61:
ad:80:a4:fe:64:ac:31:cf:a5:28:09:2b:bb:87:ff:
77:18:d6:f1:f8:cc:5d:eb:18:ee:a8:a0:97:05:bc:
e0:33:4f:c0:87:e3:45:1f:28:ba:90:d4:0d:30:fb:
b2:e5:1f:2d:dd:29:48:6a:18:cb:51:1d:29:a8:98:
51:5c:05:87:8e:8e:36:16:19:79:6d:ee:1a:1b:af:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:A6:61:5D:EC:EE:AC:2B:24:93:3E:B1:C1:DB:D6:98:C4:E5:E0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/caqmYV3s7qwrJJM-scHb1pjE5eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.17.0/24
212.134.36.0/23
212.134.53.0/24
212.134.58.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c3:11:aa:dd:41:37:ca:68:be:1e:6e:f0:3e:4c:c2:fd:fb:
77:8c:27:e1:76:c9:d9:0e:aa:83:d5:35:ab:f3:96:42:47:0a:
b0:be:f2:9f:2d:6a:89:70:6f:3c:f3:77:4a:92:db:85:1c:03:
b7:b8:b2:ef:ec:e2:48:1f:eb:b5:a4:c0:ed:19:44:a7:88:b6:
87:0a:2e:8d:c4:17:e6:50:88:fc:74:30:0c:40:1a:06:96:63:
38:eb:18:84:bc:3a:b9:b6:23:01:0f:f9:7b:0d:c5:dc:79:e6:
cc:df:ef:f0:0c:91:15:39:46:cd:ce:f0:d4:c3:26:38:b6:17:
ea:8a:f4:fc:5c:9e:4a:a4:f3:c9:11:64:0a:d4:44:ec:ff:ef:
ae:d4:64:f1:dd:57:3e:32:99:7f:22:1f:a0:c1:f2:ba:cc:a3:
b1:d4:11:82:b9:63:62:9b:4c:04:8e:ae:cc:ea:db:d7:c9:dc:
3e:46:55:72:d0:a2:46:0b:06:2b:d3:c6:c6:c8:5d:49:63:3f:
94:28:27:20:35:cc:30:da:7c:5c:ca:b4:f7:b4:b3:5a:02:2d:
09:4a:e7:3c:f9:8c:be:69:57:a4:0a:e4:ad:d6:9a:08:ff:a0:
7f:81:ce:b5:bc:db:40:c5:83:f0:da:c6:75:f2:6c:be:d7:19:
c9:19:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:18 2025 by rpki-client