Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Efu7W7ymCVkMFnSxFobAtH6rcks.roa
File: Efu7W7ymCVkMFnSxFobAtH6rcks.roa (raw, json)
Hash identifier: NwX73vNbaowMG9DfSLk1rZ0g5R19GmDzCqOAJqdwlL8=
Subject key identifier: 11:FB:BB:5B:BC:A6:09:59:0C:16:74:B1:16:86:C0:B4:7E:AB:72:4B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019A4A95335FFDBCB7A036E3A7C461F6FC47
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Efu7W7ymCVkMFnSxFobAtH6rcks.roa
Signing time: Mon 03 Nov 2025 16:38:03 +0000
ROA not before: Mon 03 Nov 2025 16:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:95:33:5f:fd:bc:b7:a0:36:e3:a7:c4:61:f6:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 3 16:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11fbbb5bbca609590c1674b11686c0b47eab724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:50:9f:6e:6d:f1:d5:e8:59:1c:c1:e7:b1:
8e:b6:45:7b:45:e1:67:ae:8d:83:54:97:68:36:e1:
b8:e7:91:53:4f:c9:a4:c2:1a:ad:c4:03:55:a2:a6:
ac:0a:68:aa:65:47:70:27:a2:d7:c8:25:cf:8e:5c:
7b:53:de:60:09:00:df:0c:0a:eb:05:ce:74:72:f3:
69:53:db:fb:d0:4a:7a:65:a9:f9:48:fa:4c:54:c1:
91:8d:2c:71:80:5d:95:69:65:7d:39:1f:89:10:e9:
ae:2d:43:11:53:a8:fa:c9:d3:31:4e:c4:a6:5d:cd:
09:10:e5:3f:74:8a:0b:b4:08:84:59:ae:28:55:03:
fb:73:51:9f:60:68:27:a3:30:7b:4c:64:5c:69:52:
39:18:dd:0f:af:06:4a:7f:3c:3c:a8:a5:1e:ac:41:
b5:2c:8b:cb:06:a7:68:2f:fe:df:17:c5:61:e0:67:
96:c0:11:07:b4:af:7e:ea:41:ac:68:93:eb:d4:c8:
89:2f:1c:bf:1d:9e:70:67:5b:e4:81:b2:53:b5:02:
c2:f0:f6:46:85:03:0d:b0:7c:a2:f7:6c:19:47:de:
28:84:cd:4a:a7:88:90:ac:01:a6:63:63:ab:c3:53:
8d:95:88:3b:60:9d:f0:55:84:62:bd:8f:f4:a6:6b:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:BB:5B:BC:A6:09:59:0C:16:74:B1:16:86:C0:B4:7E:AB:72:4B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Efu7W7ymCVkMFnSxFobAtH6rcks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.132.0/22
195.178.144.0/23
195.178.147.0/24
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b6:1b:b3:ba:77:8b:83:02:74:9b:1d:42:be:5d:f9:72:0e:
1d:0b:3c:32:04:f2:64:20:cd:e4:3f:a8:25:73:a3:cf:13:46:
3b:d6:2f:21:65:0b:57:ae:59:d5:d3:94:23:54:6b:5f:21:a6:
23:92:38:21:b0:f6:e8:72:a6:ca:76:bf:c9:fc:1d:7c:30:35:
c0:55:5e:6b:1c:84:ba:40:e9:1f:71:74:2d:30:b6:d4:b2:2a:
93:88:89:30:c1:ee:41:ea:a1:c9:59:65:f0:f2:c8:46:87:72:
26:5b:0f:06:3b:8d:e7:9a:4f:3c:d3:dc:1a:ac:1a:54:13:41:
01:9e:4a:e0:e3:19:4b:0f:e6:08:90:c8:a1:b9:ff:0e:98:14:
e4:23:42:c1:2d:a7:cc:34:63:4a:55:0c:81:83:a7:f5:d0:73:
6f:02:4f:ac:9f:3f:cc:42:48:5f:80:70:6c:b2:71:4e:bb:d6:
ca:cd:be:c4:39:59:a6:b4:7c:c7:80:43:60:a5:a1:5a:e2:db:
76:1d:e4:a2:d8:81:07:34:ff:65:5d:9b:7f:20:af:1c:36:ac:
32:13:43:12:77:30:1d:6a:c2:07:6d:5e:a0:4d:56:db:e0:f1:
d8:b1:7a:48:cb:b3:27:96:38:ff:cf:6e:64:ba:54:c8:1e:93:
6f:25:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:23 2025 by rpki-client