Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/z8dk3mvVzRKsViQZp2NI5S6JVLI.roa
File: z8dk3mvVzRKsViQZp2NI5S6JVLI.roa (raw, json)
Hash identifier: Tglwh49PFI7A+kcbrcBBRB3wLV2UifKBrellRt9i5aI=
Subject key identifier: CF:C7:64:DE:6B:D5:CD:12:AC:56:24:19:A7:63:48:E5:2E:89:54:B2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A29433C05A6E9C6903824E1A0D8778C20
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/z8dk3mvVzRKsViQZp2NI5S6JVLI.roa
Signing time: Tue 28 Oct 2025 05:21:03 +0000
ROA not before: Tue 28 Oct 2025 05:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 212.134.17.0/24 maxlen: 24
212.134.37.0/24 maxlen: 24
212.134.53.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:43:3c:05:a6:e9:c6:90:38:24:e1:a0:d8:77:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 28 05:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc764de6bd5cd12ac562419a76348e52e8954b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:f7:71:6a:15:f5:69:1b:37:64:30:de:1f:
44:78:5d:03:74:bd:7c:a0:2a:1d:60:10:c6:bc:4a:
32:1f:36:99:f5:be:cb:57:2c:25:bd:07:3e:7b:e6:
45:d4:ee:6a:8f:f0:11:46:c3:15:f1:9b:a5:de:7b:
4d:fb:70:da:24:df:d0:81:8b:7b:76:1b:74:ec:70:
44:d6:c7:d0:db:93:9a:d6:bf:bf:cf:8c:12:ac:28:
f8:a4:b7:ce:71:00:6f:e3:a8:f8:17:f7:c3:4d:88:
1b:9d:ea:57:70:e0:d6:b4:c7:e3:20:33:0f:42:26:
f1:49:f5:74:a5:d9:19:b1:18:f9:7a:2d:49:46:11:
29:1d:47:df:08:33:b4:3c:e0:9f:73:8f:a2:0b:64:
b4:31:e4:23:1d:7d:12:af:f1:e6:10:5e:f3:22:03:
7c:0f:2f:fa:06:82:98:05:3e:a0:61:0e:10:bf:81:
1c:ea:ad:ff:c5:84:ee:0a:52:44:58:69:c6:cf:72:
dc:bc:8a:ec:64:e6:b8:04:61:82:99:30:15:6a:52:
44:87:d7:8c:db:66:2d:45:fd:07:49:3d:a3:bc:41:
bb:d4:ed:07:db:42:e6:7c:eb:1b:0f:b1:55:da:f0:
b9:c5:a1:19:24:e8:a4:32:0c:e5:e0:0f:9e:1f:52:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:64:DE:6B:D5:CD:12:AC:56:24:19:A7:63:48:E5:2E:89:54:B2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/z8dk3mvVzRKsViQZp2NI5S6JVLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.17.0/24
212.134.37.0/24
212.134.53.0/24
212.135.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:6c:35:22:7f:5e:80:26:3c:ce:8c:21:bc:8a:56:8d:aa:46:
66:c2:88:44:c5:c3:8d:c9:53:c1:09:70:74:26:c9:69:5a:10:
19:05:51:d2:2b:dc:56:99:d0:b4:84:81:d9:a4:a0:f5:97:08:
75:11:29:e4:d1:d9:fd:39:eb:d5:aa:2a:d4:90:0e:f7:90:b0:
e2:f9:d7:d6:1e:34:2e:97:97:cf:94:ce:34:9c:f1:87:3f:ee:
58:b8:b6:04:9a:34:a5:1d:c4:cf:af:c9:7d:56:ac:a4:47:b5:
4b:b2:df:0f:31:70:85:59:b1:42:be:5b:e8:8c:16:72:7b:c1:
28:89:62:de:ad:06:69:b3:54:c7:19:d7:b6:ef:93:7d:fe:84:
a4:06:ad:cd:d0:d7:ba:00:71:b0:e2:e3:2a:6c:f5:85:4e:ea:
3e:f2:65:49:d7:bd:33:37:4f:16:1a:12:a6:4a:43:c3:f8:7f:
c4:e4:43:2e:a5:08:b2:d1:7d:b7:fe:c0:b9:3d:e5:cf:32:ce:
9a:e7:c3:ab:78:9f:a6:0a:c7:32:cf:6e:9f:31:8c:d7:72:3e:
d6:bf:0d:73:11:94:96:2a:6b:b9:49:21:1a:25:c1:15:e8:55:
f5:01:90:4d:2c:0f:06:dd:e6:50:81:75:17:50:dc:a0:72:3d:
af:81:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:05:11 2025 by rpki-client