Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_NiLjS6AHvu_oFy84gl0GWo6gSM.roa
File: _NiLjS6AHvu_oFy84gl0GWo6gSM.roa (raw, json)
Hash identifier: 3LzZmGz38ZOIXMjuIYvQGN+Db4Bwvi5aZyfRJKHNCjM=
Subject key identifier: FC:D8:8B:8D:2E:80:1E:FB:BF:A0:5C:BC:E2:09:74:19:6A:3A:81:23
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019980BBE9BAA04C65FDE4671B2DD71B608A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_NiLjS6AHvu_oFy84gl0GWo6gSM.roa
Signing time: Thu 25 Sep 2025 11:57:02 +0000
ROA not before: Thu 25 Sep 2025 11:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 212.134.20.0/24 maxlen: 24
212.134.27.0/24 maxlen: 24
213.177.252.0/24 maxlen: 24
213.177.253.0/24 maxlen: 24
213.177.254.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:bb:e9:ba:a0:4c:65:fd:e4:67:1b:2d:d7:1b:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 25 11:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcd88b8d2e801efbbfa05cbce20974196a3a8123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:0a:ec:74:65:2f:c5:3e:c0:78:2c:bd:83:
a9:b7:03:b4:ff:d8:c8:4f:1b:f3:32:fb:9e:ee:a1:
6a:a1:04:c9:a8:78:59:66:07:02:ce:3b:52:c8:52:
62:46:9e:8c:77:2a:c2:8e:7e:96:d0:0e:3c:94:e4:
b0:1c:5e:f0:a8:83:b3:8e:d0:a0:2c:b1:f0:ef:64:
07:e7:c0:7e:20:9f:5b:c2:25:0d:48:17:eb:39:0a:
ca:fe:ec:c5:d1:30:d4:b0:e9:dd:31:e3:20:c8:6c:
0d:03:7d:0f:1c:39:79:91:b1:d3:a4:46:ec:cd:fa:
a6:18:52:37:0e:c6:a7:93:6a:90:93:09:c4:c0:9b:
c1:b3:4f:3a:7a:af:f5:e7:2e:9d:86:98:6e:d2:7d:
fc:f0:9c:8c:7b:34:11:44:a2:b6:25:ab:75:19:97:
dd:9c:f7:04:b7:9c:34:92:50:7c:f1:f5:84:87:8e:
55:34:e0:a9:09:03:b8:27:e4:9e:a0:a3:44:91:0f:
c6:3e:e0:1a:cf:44:0d:3d:01:4c:a7:b9:dd:24:2f:
b4:6d:22:04:22:3d:b7:a1:75:60:40:2e:b5:2c:80:
72:46:e7:20:57:2b:22:a3:af:f9:6b:b4:86:14:d9:
6e:52:0d:64:26:ed:ba:98:27:2e:36:42:4b:7c:ef:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:8B:8D:2E:80:1E:FB:BF:A0:5C:BC:E2:09:74:19:6A:3A:81:23
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_NiLjS6AHvu_oFy84gl0GWo6gSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.20.0/24
212.134.27.0/24
213.177.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:51:3d:ab:4b:d5:d6:f8:96:55:34:1d:0c:85:bf:25:fc:2f:
9f:81:15:39:9c:6d:d2:e3:e4:20:34:2e:62:88:82:b9:11:f0:
d5:e5:33:98:53:4b:4e:34:c3:88:82:42:ae:3b:1a:c8:e8:5b:
be:53:07:cb:71:f9:7f:9c:f1:de:9a:b0:4b:9e:d4:7f:5a:61:
d0:e9:db:a5:36:20:a1:d2:31:db:31:d1:64:1f:5f:24:fe:3b:
d9:55:dd:3b:e9:c6:23:12:55:73:1a:4e:1b:f9:f1:25:e5:b8:
63:eb:82:72:63:4c:8a:8d:9a:85:a0:94:cf:6b:de:aa:a0:62:
e9:78:8c:62:5f:f4:75:94:27:ea:38:f2:b7:16:dd:8b:20:c1:
6e:a5:41:6d:23:93:54:62:89:1d:5c:5b:ee:8f:47:ba:5c:6b:
32:1d:33:d2:a3:84:50:3f:0d:8a:35:be:09:91:9d:23:7d:77:
3c:27:83:b8:68:5c:e5:23:93:81:de:d7:dc:49:ab:80:87:fb:
4c:f8:52:2c:ba:7b:f2:d4:21:ff:2b:62:ce:78:a1:d3:fb:d3:
d1:f5:c4:a1:87:9d:ea:07:74:e6:be:fc:60:50:d4:f9:1b:47:
89:93:5a:b7:fa:38:c6:10:c8:75:38:7f:02:69:b9:57:b6:ab:
fe:32:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:48:12 2025 by rpki-client