Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/bofREyP65VU1BCmDb-5H8Q5QI1I.roa
File: bofREyP65VU1BCmDb-5H8Q5QI1I.roa (raw, json)
Hash identifier: TcBHBVESd8D5KK8DOiEDBM0FSRQptUm5x0m4xokkjJE=
Subject key identifier: 6E:87:D1:13:23:FA:E5:55:35:04:29:83:6F:EE:47:F1:0E:50:23:52
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01981EFBF5DC9D905E384343224C3D89CFDD
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/bofREyP65VU1BCmDb-5H8Q5QI1I.roa
Signing time: Fri 18 Jul 2025 19:21:25 +0000
ROA not before: Fri 18 Jul 2025 19:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:a807::/32 maxlen: 32
2a09:af81::/32 maxlen: 32
2a0a:b380::/32 maxlen: 32
2a0d:c101::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:fb:f5:dc:9d:90:5e:38:43:43:22:4c:3d:89:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 18 19:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e87d11323fae555350429836fee47f10e502352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:8f:7d:61:31:a6:e4:a7:2c:ba:cf:5b:57:
c6:77:9f:6b:c6:d7:86:42:79:81:85:63:b2:0c:f9:
b7:e1:19:2a:a2:64:13:5d:6e:90:44:64:ae:c6:e8:
a6:07:26:03:26:58:9b:74:fc:7c:77:9d:64:f1:9a:
1c:96:bc:84:02:84:9d:ad:4e:73:c8:4b:6a:20:b7:
91:56:31:4b:31:8c:b8:ec:89:58:5d:73:72:bc:4e:
c2:de:c7:8d:4f:49:a7:06:11:31:82:71:74:66:0e:
00:8e:8d:4e:cc:df:b9:34:ca:f5:2f:e0:c5:89:3a:
89:8a:60:8a:a3:09:b3:6b:4e:e7:94:50:d6:7b:be:
cf:19:ef:d3:0c:c0:c1:b0:0d:dc:ae:53:0e:3b:34:
0f:42:84:d0:26:47:0d:3e:c9:41:5b:56:ea:11:a0:
a8:b0:1c:d8:a1:d4:a0:ab:0c:e8:9d:de:ce:2c:0d:
26:b8:a0:f2:08:21:f5:be:e2:5a:d1:3c:78:88:a1:
b7:43:83:51:71:72:aa:97:5c:78:eb:0d:66:5d:d2:
bc:a7:34:ac:3d:ee:81:a8:9d:9b:57:7e:47:c7:e3:
24:4e:9a:68:f0:0b:9e:17:53:f7:30:90:52:8d:cc:
63:22:f2:bd:10:3c:e6:97:5d:7c:53:a3:b4:b8:3d:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:D1:13:23:FA:E5:55:35:04:29:83:6F:EE:47:F1:0E:50:23:52
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/bofREyP65VU1BCmDb-5H8Q5QI1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a807::/32
2a09:af81::/32
2a0a:b380::/32
2a0d:c101::/32
Signature Algorithm: sha256WithRSAEncryption
86:18:86:08:ca:37:63:88:98:2d:f8:19:44:3c:40:5f:e6:58:
76:9e:8c:6e:6f:00:a4:84:7c:e5:f9:f5:94:9a:5d:fa:69:7b:
47:ff:7d:b6:eb:1a:c4:06:a7:5e:a4:76:75:cd:48:d8:b7:70:
49:d9:06:a2:d0:60:d6:b1:7c:f1:a1:1e:af:d7:94:7f:40:8f:
ad:28:63:93:86:6c:a1:58:3e:40:73:99:db:aa:cd:c0:30:3d:
fc:8b:ba:79:7b:8b:37:b0:42:88:49:67:3f:bd:f6:a8:0b:ee:
3d:e9:51:3b:66:57:9d:84:db:80:d9:50:01:75:b4:c4:b3:60:
de:ca:03:85:9e:ff:fb:18:fb:0d:09:a5:61:9a:3d:39:91:2f:
64:e5:db:47:5a:3e:d1:76:24:fc:2e:6f:12:90:e5:36:09:77:
c3:dd:c0:6b:8c:26:48:c5:8b:ee:b2:be:1c:a7:f2:4a:97:08:
cc:cd:06:f8:5b:d4:1a:fd:61:ef:4d:20:56:33:61:d6:91:88:
5a:fd:70:09:67:29:84:a0:d7:32:ce:f1:ff:81:4d:45:0f:f1:
ee:8f:01:11:af:37:44:45:13:24:d9:44:02:ad:44:ef:85:40:
f7:08:e6:95:6f:54:35:50:cc:70:50:1b:f5:b5:2d:36:1c:53:
cb:54:ed:aa
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZge+/XcnZBeOENDIkw9ic/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjUwNzE4MTkyMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTg3ZDExMzIzZmFlNTU1MzUwNDI5ODM2ZmVlNDdmMTBlNTAyMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa6PfWExpuSnLLrPW1fGd59rxteG
QnmBhWOyDPm34RkqomQTXW6QRGSuxuimByYDJlibdPx8d51k8ZoclryEAoSdrU5z
yEtqILeRVjFLMYy47IlYXXNyvE7C3seNT0mnBhExgnF0Zg4Ajo1OzN+5NMr1L+DF
iTqJimCKowmza07nlFDWe77PGe/TDMDBsA3crlMOOzQPQoTQJkcNPslBW1bqEaCo
sBzYodSgqwzond7OLA0muKDyCCH1vuJa0Tx4iKG3Q4NRcXKql1x46w1mXdK8pzSs
Pe6BqJ2bV35Hx+MkTppo8AueF1P3MJBSjcxjIvK9EDzml118U6O0uD2wMwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFG6H0RMj+uVVNQQpg2/uR/EOUCNSMB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvYm9mUkV5UDY1VlUxQkNtRGItNUg4UTVRSTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKgmoBwMF
ACoJr4EDBQAqCrOAAwUAKg3BATANBgkqhkiG9w0BAQsFAAOCAQEAhhiGCMo3Y4iY
LfgZRDxAX+ZYdp6Mbm8ApIR85fn1lJpd+ml7R/99tusaxAanXqR2dc1I2LdwSdkG
otBg1rF88aEer9eUf0CPrShjk4ZsoVg+QHOZ26rNwDA9/Iu6eXuLN7BCiElnP732
qAvuPelRO2ZXnYTbgNlQAXW0xLNg3soDhZ7/+xj7DQmlYZo9OZEvZOXbR1o+0XYk
/C5vEpDlNgl3w93Aa4wmSMWL7rK+HKfySpcIzM0G+FvUGv1h700gVjNh1pGIWv1w
CWcphKDXMs7x/4FNRQ/x7o8BEa83REUTJNlEAq1E74VA9wjmlW9UNVDMcFAb9bUt
NhxTy1Ttqg==
-----END CERTIFICATE-----
Generated at Tue Jul 22 20:06:40 2025 by rpki-client