Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mvbOmdzS0IIiijL_JGBm7WQnI98.roa
File: mvbOmdzS0IIiijL_JGBm7WQnI98.roa (raw, json)
Hash identifier: JrWN/u6xE4sXqtQW4DIRkSvHXum6nTFJYhdgu0buj3M=
Subject key identifier: 9A:F6:CE:99:DC:D2:D0:82:22:8A:32:FF:24:60:66:ED:64:27:23:DF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A05F7E4B350539E3B326FB63ECFB75F3B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mvbOmdzS0IIiijL_JGBm7WQnI98.roa
Signing time: Tue 21 Oct 2025 08:52:03 +0000
ROA not before: Tue 21 Oct 2025 08:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 212.134.16.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:f7:e4:b3:50:53:9e:3b:32:6f:b6:3e:cf:b7:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 08:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af6ce99dcd2d082228a32ff246066ed642723df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:1b:c6:76:19:c2:ba:ca:e6:6d:bf:79:8e:
48:b4:be:ed:18:40:ea:8b:8b:55:ac:b0:90:e1:4d:
2a:05:61:a8:5c:b8:4d:3a:c7:77:29:4e:9f:a0:03:
84:8f:7a:cb:cf:4a:77:0f:7c:72:9a:22:53:3b:f6:
30:0a:f8:68:7d:f5:80:b7:b2:ca:77:11:50:da:2a:
ec:d4:16:43:3d:d7:41:10:4d:0b:62:1a:84:b1:39:
a3:84:83:1f:50:ba:1a:71:83:59:46:22:23:70:77:
d5:07:8d:f7:fe:c6:37:c1:5b:72:32:9d:a3:6f:b3:
b6:5f:92:59:ea:c7:d2:ae:ad:78:1d:16:17:2c:bb:
2a:1b:68:a0:f4:e4:00:fa:cb:f5:29:2e:9d:47:53:
fc:ff:bc:a9:96:c5:1c:2a:eb:34:88:0e:58:e6:26:
09:62:72:dc:7e:5a:be:dd:f5:d6:f4:94:1c:a8:1b:
99:08:8a:43:d7:6a:32:92:25:82:35:b4:98:e0:af:
08:68:bb:34:04:99:52:14:39:57:47:f1:44:36:75:
5e:d7:e2:37:2e:69:c7:29:f9:9f:20:06:2e:93:92:
85:bc:80:6b:1d:8a:ff:28:b3:92:0a:d9:08:8d:38:
1e:80:7e:01:f0:54:c4:82:90:77:db:d8:02:42:ec:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:CE:99:DC:D2:D0:82:22:8A:32:FF:24:60:66:ED:64:27:23:DF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mvbOmdzS0IIiijL_JGBm7WQnI98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.16.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:61:25:04:26:48:9f:10:7e:61:32:36:6c:4f:fd:17:34:85:
33:c0:9e:7a:2f:40:9d:01:24:2e:77:ba:7f:0e:d8:6b:8a:9a:
50:13:8e:91:50:57:16:1c:53:ff:4e:62:d2:d2:32:64:50:39:
b4:b4:bb:ee:c1:8c:85:70:ad:cc:c3:52:6a:a0:90:40:47:e4:
7b:97:db:c7:9a:85:56:8f:14:ef:00:f8:86:6e:32:77:b0:a2:
53:04:b2:02:22:32:77:80:9f:51:ae:c1:8a:31:e0:7d:aa:08:
72:40:a9:3e:0d:42:25:5d:dc:f2:b5:61:28:9b:3a:f4:30:fa:
54:e0:21:d6:4f:5e:73:82:0a:ab:5a:e4:10:11:63:47:c0:9a:
3f:b0:f5:4c:d3:d2:3a:2c:64:7b:14:6d:7b:ac:39:33:18:0c:
62:8c:60:91:93:ea:79:67:a1:a5:14:28:e8:f7:72:d7:04:e4:
62:14:c0:ea:d9:c8:4b:42:af:ba:bd:9c:59:17:11:4c:f9:d5:
bc:c2:91:d4:93:20:cb:4c:13:d5:4c:d7:76:0d:e5:26:41:5e:
14:31:86:95:36:e9:a5:1b:39:92:ea:22:86:33:94:0c:8c:27:
2e:aa:19:13:49:0f:e2:a8:f2:34:c0:c1:7c:66:4d:59:fb:be:
30:30:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:21:59 2025 by rpki-client