Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6bziJC7gV85HNOqlVZJlXQ_BtsE.roa
File: 6bziJC7gV85HNOqlVZJlXQ_BtsE.roa (raw, json)
Hash identifier: 1nyjTkOaVTsURDnJ2iFGJ+fEvpdatvJzMviAjLzztGw=
Subject key identifier: E9:BC:E2:24:2E:E0:57:CE:47:34:EA:A5:55:92:65:5D:0F:C1:B6:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A35C5BEBBCA04362E01794093E537389C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6bziJC7gV85HNOqlVZJlXQ_BtsE.roa
Signing time: Thu 30 Oct 2025 15:39:03 +0000
ROA not before: Thu 30 Oct 2025 15:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:c5:be:bb:ca:04:36:2e:01:79:40:93:e5:37:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 30 15:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9bce2242ee057ce4734eaa55592655d0fc1b6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:a8:a3:24:48:39:90:7b:f1:2c:a7:21:8c:
5d:12:cf:7e:d3:63:70:e6:58:85:22:96:22:ae:91:
0a:48:cc:c4:b6:89:bf:51:c5:35:25:1a:2b:2d:24:
4f:bc:be:3f:5d:34:b1:c7:f4:4a:20:b1:eb:0c:77:
ea:53:06:2c:4c:70:2f:5c:24:04:6c:2e:d9:f9:d6:
b9:1c:68:1c:97:82:bd:b5:f6:f9:c2:df:9e:52:8a:
d4:eb:5a:e0:9b:ff:48:84:62:b7:02:de:25:3b:48:
0a:0d:e4:21:2e:f1:08:66:5e:ee:00:66:ce:c4:c9:
94:40:b2:a1:0b:d2:f6:d2:a4:1b:54:e5:1a:90:46:
cd:8b:a3:27:62:fd:7b:f7:5a:8e:b6:6e:87:6d:d4:
e1:d1:83:99:27:80:a9:72:a6:3c:2f:3b:5b:bb:61:
16:7b:9f:fb:29:1b:b4:dd:cf:ee:db:cb:57:cb:e3:
d2:77:cb:b2:6c:79:a5:41:9a:f6:4e:e5:a5:7d:44:
cd:ce:55:8a:85:81:93:08:5a:69:e1:6b:bc:0e:d1:
ad:c6:89:ec:7c:b8:37:69:bf:4d:2d:d6:e8:ba:6e:
65:39:c9:4c:a1:73:cb:1f:23:80:f2:0f:95:3b:88:
af:c3:f7:f4:b1:c5:0b:7d:7d:fa:d0:25:6b:cd:3f:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:E2:24:2E:E0:57:CE:47:34:EA:A5:55:92:65:5D:0F:C1:B6:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6bziJC7gV85HNOqlVZJlXQ_BtsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:fc:48:e5:3b:b1:6d:c0:cd:f9:f1:5b:1a:b6:84:cf:4f:a0:
78:c1:b8:42:2d:e9:83:52:08:32:ed:0d:0b:5f:13:ac:b1:6b:
ed:e6:63:9e:a9:5c:78:67:2c:00:bc:e3:35:67:90:56:5c:ba:
d2:9f:f3:63:e2:2e:61:71:ad:b4:1f:27:2e:d6:c1:b3:23:b1:
04:65:18:ac:a7:68:e3:ab:dd:28:39:22:e5:9c:5f:69:81:89:
82:5d:ae:59:a9:06:0f:f5:48:31:e7:0a:29:ee:a0:83:b8:6b:
af:77:94:10:39:3b:d6:4f:a7:50:43:43:2d:ac:d1:59:c6:e6:
b3:89:73:ee:99:91:b2:fe:2b:e0:6b:fc:8a:c8:9b:09:78:e3:
ec:11:f5:1d:b6:7f:d4:56:e7:aa:ef:06:a6:f1:fc:6a:11:9d:
a2:74:7b:a6:71:51:3c:d7:85:26:83:b9:a0:74:50:a7:51:08:
bc:28:d7:e0:db:6a:a1:3f:2d:17:13:36:49:09:82:45:ac:42:
e3:70:ad:24:33:f8:2e:d2:42:4f:75:86:38:1f:b3:d3:40:b1:
5a:63:a5:98:7f:f5:85:01:65:d1:88:81:24:d5:f3:5d:55:77:
ad:d4:98:d4:a0:45:e0:de:6f:3b:5e:fe:7d:5e:b7:44:9c:4a:
a7:a4:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:40:13 2025 by rpki-client