Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U8RgZX0qk8jiQIFy5CV-IVofqIs.roa
File: U8RgZX0qk8jiQIFy5CV-IVofqIs.roa (raw, json)
Hash identifier: FO+cyVHKtWKzobUZOTo1fjNaSerbCV/nO4ERaEuLYhQ=
Subject key identifier: 53:C4:60:65:7D:2A:93:C8:E2:40:81:72:E4:25:7E:21:5A:1F:A8:8B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A16D2C51310F8AEBC0361611EF6341049
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U8RgZX0qk8jiQIFy5CV-IVofqIs.roa
Signing time: Fri 24 Oct 2025 15:25:03 +0000
ROA not before: Fri 24 Oct 2025 15:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 212.134.94.0/24 maxlen: 24
212.134.172.0/23 maxlen: 24
212.135.76.0/23 maxlen: 24
212.135.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:d2:c5:13:10:f8:ae:bc:03:61:61:1e:f6:34:10:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 24 15:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c460657d2a93c8e2408172e4257e215a1fa88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:75:22:3f:c2:01:c3:51:69:d7:d7:2b:8a:
bd:1e:0b:c1:67:6f:3a:8b:21:08:b8:55:b2:50:79:
2f:22:92:20:1b:9c:c0:07:e5:05:5c:fe:ec:15:14:
56:bb:b1:9f:36:ac:18:d2:37:c1:f6:9d:ae:10:a6:
2e:1d:d1:6e:1a:ae:dc:3e:52:3f:a7:91:f7:f6:c3:
7a:2b:49:6c:d4:e9:a1:98:86:29:ab:0b:d1:4b:e0:
1e:f6:66:32:7d:a0:68:11:bd:cb:68:de:69:23:39:
11:90:36:8d:96:70:d7:d3:26:80:4e:1c:03:45:be:
6f:a4:15:be:4e:83:ac:09:c3:14:ca:50:51:99:de:
64:58:83:39:22:43:27:4f:d0:f7:8b:7e:24:b6:4f:
27:9a:7b:e5:f6:a1:ce:77:7e:d0:ce:cd:ed:72:62:
a7:29:af:93:51:2d:f5:3c:68:4f:1c:a7:b4:da:ab:
ef:18:77:72:84:eb:47:3a:d3:bd:12:61:1f:22:8e:
36:2f:ce:0f:a7:9b:d7:bc:f7:c5:61:72:aa:7d:b5:
67:f0:77:f9:ca:8e:16:69:75:9f:8c:e5:d6:f7:46:
79:ef:91:cb:25:03:09:57:0b:37:1f:79:55:39:59:
c1:1c:86:cf:7e:13:4d:4e:2e:85:5d:2f:7e:fd:aa:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:60:65:7D:2A:93:C8:E2:40:81:72:E4:25:7E:21:5A:1F:A8:8B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U8RgZX0qk8jiQIFy5CV-IVofqIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.94.0/24
212.134.172.0/23
212.135.76.0/23
212.135.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0e:6d:10:b7:ea:b4:63:15:99:11:fc:a2:1f:1a:8c:70:ed:
e5:d1:d1:89:19:96:87:9d:9f:2b:a2:f0:04:d6:90:e1:7a:8d:
cf:62:ea:d6:29:e8:08:d9:98:39:6a:6c:92:3a:92:d3:90:be:
de:d7:5a:14:38:5d:53:c4:48:7d:17:5e:32:87:54:f0:7a:1e:
d0:11:ab:4c:6f:4c:84:12:ea:b3:a4:f1:8e:cc:3a:0a:b7:46:
5f:2f:67:2d:34:83:72:0c:81:75:c0:b8:26:f3:78:4d:d2:19:
5b:e5:86:c8:8d:df:5d:88:36:5e:01:50:67:bc:4e:75:b2:15:
99:d1:66:84:64:ff:1d:f3:56:63:6c:60:10:08:e7:ff:09:35:
06:01:73:ad:fa:54:a0:e2:8c:e6:7f:6d:94:67:56:e6:4e:8b:
9e:13:ef:78:15:d0:a6:e9:c7:a9:68:d8:12:18:69:b5:5f:33:
e1:bd:b6:62:c8:84:6b:dd:b0:8f:00:38:7f:4d:e2:98:50:9f:
f6:2c:04:38:74:9d:5f:e9:d6:9d:18:c1:76:d8:2d:54:ba:83:
41:01:ef:34:5b:a1:af:85:c1:d7:45:94:1c:e1:64:6c:8a:78:
4c:a9:dc:a0:a7:63:b3:6b:ea:61:01:97:20:f2:4d:4a:a9:b6:
01:c7:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:05 2025 by rpki-client