Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/txmMmNjT0kwlAnV8Rq-bujJC8J4.roa
File: txmMmNjT0kwlAnV8Rq-bujJC8J4.roa (raw, json)
Hash identifier: MI7JzHHChb0EpjVD0pbxTAHe+rVAsIQYGcF29UUw5G0=
Subject key identifier: B7:19:8C:98:D8:D3:D2:4C:25:02:75:7C:46:AF:9B:BA:32:42:F0:9E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019995A3DFFAE2B742FFC2DA14C0337C6CE3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/txmMmNjT0kwlAnV8Rq-bujJC8J4.roa
Signing time: Mon 29 Sep 2025 13:22:48 +0000
ROA not before: Mon 29 Sep 2025 13:22:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51809
IP address blocks: 195.40.32.0/24 maxlen: 24
195.40.33.0/24 maxlen: 24
195.40.34.0/24 maxlen: 24
195.40.35.0/24 maxlen: 24
195.40.36.0/24 maxlen: 24
195.40.37.0/24 maxlen: 24
195.40.38.0/24 maxlen: 24
195.40.39.0/24 maxlen: 24
195.40.40.0/24 maxlen: 24
195.40.41.0/24 maxlen: 24
195.40.42.0/24 maxlen: 24
195.40.43.0/24 maxlen: 24
195.40.44.0/24 maxlen: 24
195.40.45.0/24 maxlen: 24
195.40.46.0/24 maxlen: 24
195.40.47.0/24 maxlen: 24
195.40.48.0/24 maxlen: 24
195.40.49.0/24 maxlen: 24
195.40.50.0/24 maxlen: 24
195.40.51.0/24 maxlen: 24
195.40.52.0/24 maxlen: 24
195.40.53.0/24 maxlen: 24
195.40.54.0/24 maxlen: 24
195.40.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:a3:df:fa:e2:b7:42:ff:c2:da:14:c0:33:7c:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 29 13:22:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7198c98d8d3d24c2502757c46af9bba3242f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:47:58:dd:80:03:8a:e3:30:4a:42:be:18:
ce:95:ba:2d:ff:bd:bd:a5:1e:d6:12:1e:43:55:1e:
5e:0c:74:f7:7c:a8:8a:5c:d0:88:fc:86:16:19:51:
9f:95:a1:45:a8:64:bb:03:b3:70:38:28:27:02:5b:
e1:74:e5:7b:78:95:61:13:57:7e:fc:34:88:50:da:
7d:b8:08:86:4e:b1:9b:f4:e4:2a:37:a5:cb:26:58:
2c:62:50:28:2e:25:05:54:f7:2e:de:14:eb:13:3e:
ba:b0:8e:c3:f6:85:3e:a7:c6:14:90:2a:e2:9e:01:
81:f5:37:1f:22:73:9b:13:6a:0c:83:f6:35:b9:9e:
a8:74:0b:1a:dd:b9:75:7e:2c:b8:07:12:1c:13:fd:
ad:d8:23:09:02:6e:f7:44:4f:0c:22:93:71:f1:62:
f9:4d:5b:b3:d3:82:99:8b:67:41:30:a8:31:53:ff:
ae:35:18:60:80:67:6f:40:5b:c6:0f:35:11:93:64:
b0:84:9f:a1:99:92:4e:ba:78:4b:40:e0:2b:89:6a:
c6:d2:ed:bf:67:77:07:5e:07:dd:4a:a8:55:4e:44:
6f:c8:d9:15:fb:91:8d:49:0d:0e:e3:99:de:12:a3:
c3:74:ed:01:51:ce:19:b0:a4:39:b4:dd:0d:51:86:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:8C:98:D8:D3:D2:4C:25:02:75:7C:46:AF:9B:BA:32:42:F0:9E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/txmMmNjT0kwlAnV8Rq-bujJC8J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.32.0-195.40.55.255
Signature Algorithm: sha256WithRSAEncryption
b1:36:fd:50:b8:76:0d:c5:c6:ab:06:b4:be:c4:70:e0:b4:b3:
01:08:d4:18:6e:e3:0a:75:21:00:48:e3:7e:1a:e1:cc:35:7d:
10:18:2f:1f:18:9a:88:6c:7c:e1:51:93:e5:f4:2c:2f:c8:28:
31:5b:cc:9c:1b:65:76:1f:f6:73:46:56:7f:0a:50:fd:31:d9:
66:2e:35:73:80:7f:23:47:48:6c:25:4b:ea:33:da:2f:c7:73:
c4:75:df:f4:e5:b9:3e:1e:fd:75:37:5b:0b:ca:f0:5d:81:5b:
db:e2:8d:9d:87:a6:ee:58:3a:ad:fb:0c:50:bb:98:bf:7a:a7:
9b:b4:9f:5e:63:be:f4:51:b3:11:42:b6:31:c1:5d:3b:07:4a:
63:a3:42:d7:fb:88:58:d4:50:a1:1b:29:4f:cc:36:2f:75:22:
09:c1:3c:7c:98:2b:93:86:60:60:a7:a7:9d:d0:a0:3f:81:ca:
9d:fb:55:40:d2:4e:11:f0:b3:5e:e2:54:4b:91:da:a5:69:c3:
08:b5:08:d6:88:1d:4e:fb:c4:ec:29:f6:97:f9:e6:b8:8a:16:
70:c0:d5:9c:25:8c:1d:b4:72:87:8f:b1:cd:46:31:13:69:ad:
83:33:a6:dd:dd:3e:f0:00:37:b6:9a:51:86:cc:b7:80:99:f9:
19:b0:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:57 2025 by rpki-client