Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pEzgxsy9xXa0CI_RG__jm1dBQes.roa
File: pEzgxsy9xXa0CI_RG__jm1dBQes.roa (raw, json)
Hash identifier: ESiHv2x87a0r56YQsGW729lKD2FF8rkY26OMWcNlRZk=
Subject key identifier: A4:4C:E0:C6:CC:BD:C5:76:B4:08:8F:D1:1B:FF:E3:9B:57:41:41:EB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A20CFD655AC5D3D4433098AE02F1E99F0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pEzgxsy9xXa0CI_RG__jm1dBQes.roa
Signing time: Sun 26 Oct 2025 13:58:03 +0000
ROA not before: Sun 26 Oct 2025 13:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204044
IP address blocks: 212.134.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:cf:d6:55:ac:5d:3d:44:33:09:8a:e0:2f:1e:99:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 26 13:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a44ce0c6ccbdc576b4088fd11bffe39b574141eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:74:98:3a:46:3b:03:95:a1:41:5c:86:82:
4e:8c:6a:4b:5b:09:90:16:81:74:05:4b:8b:f2:c8:
b5:b3:29:29:e2:e1:c3:70:be:20:28:7a:e4:f3:61:
0e:50:27:f6:a6:c0:2d:7b:48:7d:64:82:e8:19:33:
df:60:6d:72:e6:00:05:b0:47:5e:56:69:eb:3b:a8:
05:d7:20:28:76:d3:d9:ac:e6:67:38:94:79:b0:bd:
c1:4a:d6:d4:af:e1:8e:cc:bc:d5:7d:f9:9b:3a:9f:
22:cf:22:54:7c:eb:0f:3f:8c:ff:a6:f7:90:c3:2e:
16:7e:6c:c1:ee:2c:08:01:f3:3b:6c:1e:e3:fc:24:
57:c6:6b:ab:b8:2c:50:b6:ce:7b:82:f8:2e:89:f4:
f0:fc:2b:b4:72:a5:c2:7c:5e:3e:cb:32:0a:c3:8e:
64:91:80:d5:b3:12:9e:89:5c:41:89:8e:ff:51:55:
85:2b:43:80:23:f6:3d:69:33:83:98:eb:43:7c:96:
c4:cd:42:99:1a:6e:13:63:c9:d6:e0:f5:27:7b:40:
e1:ae:6c:ab:eb:d9:57:83:29:f3:a4:01:ad:2f:3f:
9e:89:df:d0:f4:a1:d1:23:b4:85:7e:cc:e1:57:7e:
0e:39:fa:cf:23:19:2b:ac:14:e9:29:e3:b8:40:b8:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:E0:C6:CC:BD:C5:76:B4:08:8F:D1:1B:FF:E3:9B:57:41:41:EB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pEzgxsy9xXa0CI_RG__jm1dBQes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.175.0/24
Signature Algorithm: sha256WithRSAEncryption
25:19:0f:7d:a9:2f:7b:11:e8:ce:af:ed:f4:a2:8e:fc:d2:3d:
b3:26:cc:86:55:b3:f0:61:fa:2e:bb:7c:68:fa:dd:a3:25:20:
21:21:4e:6d:ee:1d:3f:5a:e6:d6:16:27:1f:a1:6d:e3:4d:2d:
6b:76:b5:44:1e:f9:ea:b4:bf:ff:06:0c:60:21:7f:ef:a0:a5:
b3:42:23:81:e0:69:79:29:d4:d5:2e:a1:e8:e4:d9:67:3c:9a:
7c:12:ae:ac:b4:cd:f5:eb:c5:7b:7b:69:91:63:b9:94:c9:d1:
ff:08:0a:ca:ca:c5:fc:b3:53:27:10:25:76:17:21:c1:43:36:
17:5e:35:e2:dc:b7:66:b1:a4:1d:ba:bc:cd:01:ef:8b:8d:ea:
96:9c:27:87:50:87:b4:78:e8:ec:84:61:83:d4:59:d5:67:a2:
d6:f1:db:d5:1c:ca:fb:7b:6f:a0:af:0a:7e:30:3a:52:a1:2f:
d4:ed:76:d5:63:82:8d:23:fd:ad:52:6c:1f:4c:a7:01:ef:06:
55:ab:e4:00:1d:c3:99:65:03:85:e6:ad:eb:9c:48:00:04:69:
9a:58:3d:5c:20:7c:8e:7c:74:8c:46:18:bf:e4:c4:d5:d0:00:
8c:66:fa:0d:5c:54:31:f0:99:d3:80:73:80:62:23:ef:d7:2e:
1b:9b:da:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZogz9ZVrF09RDMJiuAvHpnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMDI2MTM1ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDRjZTBjNmNjYmRjNTc2YjQwODhmZDExYmZmZTM5YjU3NDE0MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt10mDpGOwOVoUFchoJOjGpLWwmQ
FoF0BUuL8si1sykp4uHDcL4gKHrk82EOUCf2psAte0h9ZILoGTPfYG1y5gAFsEde
VmnrO6gF1yAodtPZrOZnOJR5sL3BStbUr+GOzLzVffmbOp8izyJUfOsPP4z/pveQ
wy4WfmzB7iwIAfM7bB7j/CRXxmuruCxQts57gvguifTw/Cu0cqXCfF4+yzIKw45k
kYDVsxKeiVxBiY7/UVWFK0OAI/Y9aTODmOtDfJbEzUKZGm4TY8nW4PUne0Dhrmyr
69lXgynzpAGtLz+eid/Q9KHRI7SFfszhV34OOfrPIxkrrBTpKeO4QLiVNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRM4MbMvcV2tAiP0Rv/45tXQUHrMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcEV6Z3hzeTl4WGEwQ0lfUkdfX2ptMWRCUWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IavMA0G
CSqGSIb3DQEBCwUAA4IBAQAlGQ99qS97EejOr+30oo780j2zJsyGVbPwYfouu3xo
+t2jJSAhIU5t7h0/WubWFicfoW3jTS1rdrVEHvnqtL//BgxgIX/voKWzQiOB4Gl5
KdTVLqHo5NlnPJp8Eq6stM3168V7e2mRY7mUydH/CArKysX8s1MnECV2FyHBQzYX
XjXi3LdmsaQdurzNAe+LjeqWnCeHUIe0eOjshGGD1FnVZ6LW8dvVHMr7e2+grwp+
MDpSoS/U7XbVY4KNI/2tUmwfTKcB7wZVq+QAHcOZZQOF5q3rnEgABGmaWD1cIHyO
fHSMRhi/5MTV0ACMZvoNXFQx8JnTgHOAYiPv1y4bm9on
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:40 2025 by rpki-client