Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/BlNGY838HiZOVUmX9DwZ_dz9Tw0.roa
File: BlNGY838HiZOVUmX9DwZ_dz9Tw0.roa (raw, json)
Hash identifier: d//48f+0TBRfiuqov/kBGy9dN7D95d59nbOwDuWnUaY=
Subject key identifier: 06:53:46:63:CD:FC:1E:26:4E:55:49:97:F4:3C:19:FD:DC:FD:4F:0D
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019809B4511DB917C457A4E3D27845C6FD67
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/BlNGY838HiZOVUmX9DwZ_dz9Tw0.roa
Signing time: Mon 14 Jul 2025 16:11:08 +0000
ROA not before: Mon 14 Jul 2025 16:11:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 91.197.55.0/24 maxlen: 24
2a06:8ac0::/44 maxlen: 44
2a06:8ac0::/46 maxlen: 46
2a06:8ac0:4::/46 maxlen: 46
2a06:8ac0:8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b4:51:1d:b9:17:c4:57:a4:e3:d2:78:45:c6:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jul 14 16:11:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06534663cdfc1e264e554997f43c19fddcfd4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:13:93:75:fd:36:7e:cf:87:96:fe:be:3c:
4a:0a:ea:50:c1:e5:b2:2f:78:17:cb:49:f2:09:90:
cd:4f:69:b9:6c:c7:98:ea:7c:e9:14:09:d5:fd:1a:
2a:98:29:ad:0a:5b:40:2e:d5:05:74:d6:5e:c8:48:
24:9f:15:a3:42:c3:b7:2c:81:27:12:df:19:71:36:
44:5f:58:96:19:39:47:fb:66:56:0b:1f:64:1d:df:
de:53:da:bb:9b:bb:e3:c9:e1:7d:7c:19:d2:49:79:
7b:5a:25:db:1a:8c:82:ac:45:89:04:ac:fc:8d:23:
c6:f5:4f:db:10:77:b0:6c:00:4f:32:69:d5:16:51:
04:0e:f0:d7:d6:b1:53:cc:f5:02:4b:11:e4:dd:8c:
f4:e8:2c:3d:d2:16:e7:ca:0b:41:d2:47:36:52:e0:
f3:f0:3c:80:79:e2:aa:b4:08:28:35:fe:ca:c4:c0:
14:56:80:7f:76:ee:64:16:44:b3:95:16:51:b9:bc:
02:82:7c:93:ae:6d:ba:16:84:61:8f:82:18:cb:22:
cc:a8:10:2d:88:46:74:49:99:a3:c1:03:8f:ba:0a:
3a:74:a0:14:22:32:cd:db:65:c0:e4:fd:56:a6:4c:
5d:ac:92:57:4b:97:1b:fa:ba:8f:5c:11:15:00:33:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:46:63:CD:FC:1E:26:4E:55:49:97:F4:3C:19:FD:DC:FD:4F:0D
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/BlNGY838HiZOVUmX9DwZ_dz9Tw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.55.0/24
IPv6:
2a06:8ac0::/44
Signature Algorithm: sha256WithRSAEncryption
73:ae:78:bc:20:ef:b6:28:19:94:e3:91:07:13:26:17:59:ac:
ec:2b:76:8c:ec:48:22:c3:d2:b1:d6:e7:57:13:5d:02:d7:1b:
84:fb:b3:7b:bf:f7:e0:4f:70:7f:31:1f:88:5c:f7:db:93:8f:
c0:96:7d:44:04:ff:7b:e5:a1:7d:b7:44:11:09:dd:90:66:97:
43:7d:6c:2d:d0:ad:61:68:e4:c9:d2:12:3d:06:f2:ce:7d:a9:
5d:42:11:c6:96:da:24:4a:96:44:ac:5a:c7:74:78:6e:6e:d5:
80:52:21:c4:12:4d:53:48:27:b9:8c:a4:18:fd:91:0e:77:e6:
f0:e3:de:6b:1a:01:96:57:ef:03:4c:28:d2:9a:76:8a:e6:19:
5b:5f:32:8b:02:66:6c:23:71:c8:a0:e1:07:a4:5f:50:a7:07:
84:65:b2:ce:73:94:17:8c:cb:db:f0:0b:20:03:bb:bb:69:87:
17:76:99:82:4e:1d:42:d5:31:78:5f:ac:6b:7e:a3:80:6b:86:
62:f3:3f:fb:80:31:52:b8:8c:1f:53:c7:a2:79:c5:c9:a3:ef:
53:b1:43:09:b8:35:27:5d:2a:f6:2d:26:49:59:66:5c:0a:c0:
b3:c6:75:0a:27:41:df:b8:38:af:1e:d9:82:de:bf:4b:d0:91:
4a:5d:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:27:05 2025 by rpki-client