Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ppg7SaGaBRst2cMVEVvxCROcRFo.roa
File: ppg7SaGaBRst2cMVEVvxCROcRFo.roa (raw, json)
Hash identifier: yxJtz8A/IzUkMFahJeniVG6HPpu1aNwZ17oUn7KSryA=
Subject key identifier: A6:98:3B:49:A1:9A:05:1B:2D:D9:C3:15:11:5B:F1:09:13:9C:44:5A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A01D2CB0236C38C85258FE9B863D89DA5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ppg7SaGaBRst2cMVEVvxCROcRFo.roa
Signing time: Mon 20 Oct 2025 13:33:03 +0000
ROA not before: Mon 20 Oct 2025 13:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 93.152.28.0/24 maxlen: 24
93.152.33.0/24 maxlen: 24
93.152.34.0/24 maxlen: 24
93.152.37.0/24 maxlen: 24
212.135.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:d2:cb:02:36:c3:8c:85:25:8f:e9:b8:63:d8:9d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 20 13:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6983b49a19a051b2dd9c315115bf109139c445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:2b:ad:65:8b:82:96:8f:87:4f:4c:9c:bf:
64:b1:a6:e2:1e:58:b5:8a:0e:ae:9c:00:3c:fa:24:
29:04:f4:28:de:25:56:5b:fb:cf:96:5c:7e:dc:3f:
93:e1:63:fe:d2:ee:79:6f:ef:71:97:5f:79:39:8b:
f2:b6:c9:95:b6:a3:6b:e5:64:b6:c9:56:81:30:6a:
79:83:39:6a:21:93:59:9e:56:3b:d4:50:a0:cc:df:
95:52:0d:20:83:ec:86:61:42:a2:e0:86:b9:ca:5b:
25:da:40:77:93:4d:71:6f:16:4f:71:c1:73:1b:c9:
b7:3e:97:5d:b9:e2:67:41:57:0d:35:35:2f:79:75:
61:53:c6:b2:6d:f8:b4:64:77:25:56:e1:40:30:7b:
a9:5b:7b:b3:92:2f:8b:9c:59:0c:70:b2:46:df:d5:
f3:25:b6:99:e2:e0:e3:05:28:ab:96:cc:17:34:0b:
a1:64:d1:d8:87:52:8f:c6:1c:f0:84:86:3c:f9:b7:
db:6d:0b:83:52:e2:25:5d:28:15:65:37:d7:af:31:
65:2f:3f:e2:fd:09:bf:01:b9:af:af:64:bd:fc:3d:
07:7b:d7:32:63:78:7f:29:c9:2d:b0:83:4c:77:eb:
36:6c:dc:19:7b:1a:87:a6:ab:2e:8b:33:e4:71:29:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:3B:49:A1:9A:05:1B:2D:D9:C3:15:11:5B:F1:09:13:9C:44:5A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ppg7SaGaBRst2cMVEVvxCROcRFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.28.0/24
93.152.33.0-93.152.34.255
93.152.37.0/24
212.135.204.0/22
Signature Algorithm: sha256WithRSAEncryption
98:25:a5:a2:2c:28:da:1a:67:5a:16:5e:f2:35:9d:b7:8f:73:
35:68:95:4e:6c:c7:9d:d3:e3:95:57:9b:8a:8e:3e:99:0d:e1:
22:19:27:c2:3c:61:56:46:fb:f2:d9:38:72:bf:da:5e:4f:f5:
a6:f5:d5:92:ec:1c:54:0e:5d:2d:cb:df:c0:fd:d3:a9:38:de:
ee:04:01:17:29:c2:e2:08:02:37:d0:51:f6:10:15:cf:2a:c5:
c4:86:53:b0:1d:4f:ef:5e:90:5d:fe:98:c7:30:63:63:ac:3a:
5b:b0:a8:8a:a9:c4:69:58:2d:7c:b9:30:e8:71:bb:a6:cd:8b:
5f:cb:ca:6e:31:e5:71:3a:69:d7:a0:73:e5:7f:0f:99:98:c7:
4f:1e:e9:26:5e:1b:78:59:48:54:b8:f8:f9:3b:1b:36:8f:19:
7a:8f:af:d7:15:b6:2f:33:b7:5e:a8:ee:c7:89:1c:9b:c1:63:
7f:2f:44:24:f0:f1:93:54:f2:de:3c:26:4a:c1:7f:d3:6e:97:
7b:92:f0:de:c7:58:4d:d0:a2:ee:10:c2:4f:e6:67:e2:45:0f:
39:05:90:3f:72:9a:57:8b:17:83:85:bb:fe:d7:42:64:37:a1:
78:a0:75:69:c0:e3:29:46:fa:df:a8:2f:00:93:ef:b5:6c:c0:
8a:5c:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:55 2025 by rpki-client