Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/au9TGCtIqldA_S0dr4hBEX9jF_w.roa
File: au9TGCtIqldA_S0dr4hBEX9jF_w.roa (raw, json)
Hash identifier: oFlHGAk0Wua51gTt84mvKLQuWLdqHG0NQw7paHS7Qio=
Subject key identifier: 6A:EF:53:18:2B:48:AA:57:40:FD:2D:1D:AF:88:41:11:7F:63:17:FC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A06059FB52D27BC2EB842762BA31B59E2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/au9TGCtIqldA_S0dr4hBEX9jF_w.roa
Signing time: Tue 21 Oct 2025 09:07:03 +0000
ROA not before: Tue 21 Oct 2025 09:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 212.135.32.0/20 maxlen: 24
212.135.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:05:9f:b5:2d:27:bc:2e:b8:42:76:2b:a3:1b:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 09:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aef53182b48aa5740fd2d1daf8841117f6317fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:20:46:c3:04:a1:e0:a4:1c:1c:fc:79:da:
9f:90:03:26:4f:d0:33:5d:a8:3c:79:bf:a9:15:ed:
87:96:db:51:69:84:d1:d7:00:06:21:8b:12:d9:f1:
2d:8a:d5:4f:68:4f:c6:5b:f6:84:af:41:55:99:12:
74:f0:b9:be:7d:6b:a0:2b:10:f0:42:39:1b:75:04:
be:f5:a0:45:d4:9b:77:25:e4:95:ab:8c:89:40:09:
19:2b:29:e6:25:fe:b5:94:97:af:67:0b:a1:02:f2:
be:8b:0c:17:3b:3b:01:b0:80:3b:d0:81:b6:41:38:
17:d7:65:dc:85:38:cf:51:36:a6:6b:c8:34:66:26:
99:91:48:57:40:ff:42:23:81:52:23:67:32:9c:48:
5a:ee:10:6e:81:81:fb:fd:fb:7f:87:dd:90:42:07:
39:33:d0:dd:b8:a7:52:a4:ce:e4:85:c3:f5:19:75:
c2:de:cb:66:de:c0:95:dd:3e:d4:62:07:a3:74:9c:
c7:17:f8:be:7b:3c:f6:41:11:43:0e:ab:9f:67:7a:
b2:dc:56:ad:17:89:3e:7c:64:76:51:51:c7:f9:c5:
16:c3:02:f0:75:96:4d:31:8b:66:d1:46:2c:3d:73:
c1:28:b2:47:3c:7f:57:19:02:3a:c5:c9:b7:3c:c8:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:53:18:2B:48:AA:57:40:FD:2D:1D:AF:88:41:11:7F:63:17:FC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/au9TGCtIqldA_S0dr4hBEX9jF_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
47:c3:c8:8c:f2:04:44:f4:fd:39:57:20:22:a7:b6:be:76:88:
9f:69:a2:7f:79:68:24:e6:83:ec:14:67:86:7f:26:68:26:36:
dd:bb:df:6f:fe:da:8f:4e:2b:45:d5:cc:b9:ca:3d:c7:59:14:
69:2e:d4:96:3e:1e:fa:2e:33:08:36:42:4f:cd:fb:da:c0:5d:
c3:e4:c9:e1:ff:98:6e:c8:26:a2:4e:a1:2d:12:f2:ac:85:50:
3a:c3:c9:5c:ee:c3:ce:af:fe:49:68:7f:01:bf:56:ca:bc:f5:
7f:05:ae:71:54:cc:1b:08:5a:a2:fe:31:74:9a:7f:f1:27:68:
36:3a:10:d1:c0:82:e3:5d:12:7b:2d:33:b2:a9:4a:83:0e:a4:
27:d2:07:83:5f:ce:1b:5a:e8:6e:00:a1:29:b3:de:f8:48:82:
05:e3:32:67:dd:e2:57:da:1b:da:4c:5c:55:cb:56:a0:f1:02:
91:79:18:aa:25:90:03:45:b9:84:a1:0e:1f:74:1e:5b:c9:57:
86:35:15:b6:27:f0:a6:ba:ec:f6:ae:34:7d:34:03:56:06:81:
4f:64:fa:d8:86:4a:42:cf:fb:b1:bc:ae:4f:d7:19:f5:a9:8b:
23:1d:c0:7d:54:af:76:9f:d6:ce:71:f5:de:d7:c8:6d:ab:e4:
c3:fd:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:57 2025 by rpki-client