Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2lsRASxsa9Ris7L9OKlu2AGW-zY.roa
File: 2lsRASxsa9Ris7L9OKlu2AGW-zY.roa (raw, json)
Hash identifier: uJ7E0wrpcoVtxAJF8W0rT/exyNX0ccKUYWgzfecxLcg=
Subject key identifier: DA:5B:11:01:2C:6C:6B:D4:62:B3:B2:FD:38:A9:6E:D8:01:96:FB:36
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A4F7B7917ADC29FB6B96E50CA9B789040
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2lsRASxsa9Ris7L9OKlu2AGW-zY.roa
Signing time: Tue 04 Nov 2025 15:28:03 +0000
ROA not before: Tue 04 Nov 2025 15:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 212.134.83.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:7b:79:17:ad:c2:9f:b6:b9:6e:50:ca:9b:78:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 4 15:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da5b11012c6c6bd462b3b2fd38a96ed80196fb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:33:18:62:3b:5b:3f:05:f1:d4:17:b9:ac:
16:f0:73:30:79:6c:c4:08:33:c9:24:f1:8d:a7:59:
f7:1f:46:bd:99:c6:75:58:35:1e:ad:23:fe:49:3a:
05:5c:0b:d1:e1:8d:8a:03:57:92:56:2b:2d:97:77:
e9:08:ac:19:35:2d:42:29:86:1a:05:29:f4:c5:69:
28:a9:9c:cd:d8:59:4c:e6:3b:da:83:fc:b3:c2:1f:
01:88:62:28:a3:3d:e6:3c:11:48:af:f5:5a:aa:24:
8c:c9:a0:10:bb:99:a7:c8:89:d8:5e:1f:b4:6a:71:
a5:a8:fb:37:37:f2:fe:8b:33:43:e3:45:e5:c3:97:
4f:e4:5b:95:79:82:76:85:47:17:3d:e0:de:49:8c:
00:2a:32:60:a7:1a:a3:0a:2b:11:31:32:cd:fe:4f:
f5:48:c8:d7:9c:80:c8:62:29:a2:73:d7:4b:01:ba:
2e:84:52:5e:9c:3e:3f:37:64:0f:a2:76:41:0d:6f:
54:e8:3f:f4:29:ba:dd:8a:85:90:9a:cd:47:9c:2e:
7e:d5:00:e3:66:a6:d4:60:34:a9:06:33:d6:dd:22:
82:42:7d:2e:5d:b2:a1:c1:ab:c0:cb:3d:6b:aa:c3:
5b:f0:a5:31:0f:27:5a:e4:47:36:c0:b5:81:98:c6:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:11:01:2C:6C:6B:D4:62:B3:B2:FD:38:A9:6E:D8:01:96:FB:36
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2lsRASxsa9Ris7L9OKlu2AGW-zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.83.0/24
212.134.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:80:d0:93:aa:b3:ac:73:d2:71:4a:13:9b:b1:cf:d6:75:8b:
4d:27:dd:5b:48:91:01:1e:59:10:ad:e8:35:de:e8:a4:76:46:
dc:80:e9:67:07:3c:16:0f:3e:6f:6e:25:dd:00:55:9e:37:33:
5b:9b:84:57:35:06:25:63:0e:b8:2c:7e:1b:b9:9f:9d:ae:0f:
9e:4c:64:cd:4d:0e:9f:02:52:13:7f:8b:0b:4f:7d:e1:a6:c7:
69:4f:f8:48:00:45:41:5f:3d:31:c0:dc:d7:41:71:fe:b0:2a:
41:79:8e:74:73:27:24:bb:f7:56:c6:51:69:be:51:10:a9:6f:
6f:60:c5:c5:21:10:c9:8f:d3:ec:2f:8b:0f:8f:03:6f:6a:84:
f5:cd:c8:90:94:4a:7c:09:b7:a8:64:e4:7a:6b:2e:b2:8b:78:
42:d1:8c:28:6a:46:32:5e:f1:e2:39:cf:a3:e2:63:f6:04:7a:
b5:f4:8c:a7:7a:b7:6e:ad:0a:d6:40:6c:35:f9:fb:d2:cd:49:
23:11:84:d7:ea:09:62:ba:39:17:df:3d:d6:3a:e8:4a:47:72:
db:e5:e4:42:d4:33:b5:42:01:68:56:89:66:2a:2d:ba:80:89:
cd:b3:71:e3:0a:66:8c:50:54:11:13:6c:db:f3:cc:69:c4:bf:
b7:4c:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:10 2025 by rpki-client