Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Bh3p9PN7bX04MpOdCZhqiYpBGpM.roa
File: Bh3p9PN7bX04MpOdCZhqiYpBGpM.roa (raw, json)
Hash identifier: OEsd+BIuux/Amz7SUuNcWCDDcAkpS5Z2bjzH6KdhO94=
Subject key identifier: 06:1D:E9:F4:F3:7B:6D:7D:38:32:93:9D:09:98:6A:89:8A:41:1A:93
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01980A4E1EB9A16CC7479BFD4E0EE1871458
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Bh3p9PN7bX04MpOdCZhqiYpBGpM.roa
Signing time: Mon 14 Jul 2025 18:59:08 +0000
ROA not before: Mon 14 Jul 2025 18:59:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 109.122.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:4e:1e:b9:a1:6c:c7:47:9b:fd:4e:0e:e1:87:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 14 18:59:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=061de9f4f37b6d7d3832939d09986a898a411a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:73:d8:80:c3:76:12:5f:52:01:d9:a7:31:
c8:64:80:3b:8f:d5:43:f6:d1:56:7d:04:28:86:27:
80:87:07:4d:b4:f2:34:07:61:6c:03:58:ed:1c:84:
4d:3d:93:22:10:b1:67:a1:f7:2d:6f:82:8f:5d:c1:
d8:9d:ae:87:0a:39:7d:d2:47:8b:9f:90:c4:65:db:
80:23:9e:a8:6c:e1:89:f4:d6:9e:99:5d:6f:23:2b:
32:9c:11:c8:02:c8:7d:0d:10:56:4d:96:75:16:72:
ea:f7:f7:f1:85:9e:9b:a8:c6:1b:08:2c:ba:95:78:
de:bd:6f:17:0d:53:23:8e:07:43:15:cb:b3:6c:1f:
c8:1e:3e:5f:d4:dd:0a:af:d6:b6:ab:4f:f8:b5:3d:
68:3f:17:98:c6:d8:b1:3f:36:fd:2b:fe:de:33:59:
29:0b:93:cc:68:cd:c0:d1:76:fe:1e:c6:34:80:f9:
21:07:bb:a6:10:5e:66:9f:2d:e1:7e:69:98:54:27:
79:3b:58:14:cd:cd:5f:6c:71:e8:6c:e6:74:b6:f3:
50:7b:4e:f8:a2:7a:14:c8:3e:e1:8a:c4:96:31:5c:
75:43:00:57:4e:1d:68:77:1e:78:3b:e6:66:e6:e7:
49:e1:27:b0:2b:1e:99:6e:4e:d7:3e:8f:2e:36:49:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:E9:F4:F3:7B:6D:7D:38:32:93:9D:09:98:6A:89:8A:41:1A:93
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Bh3p9PN7bX04MpOdCZhqiYpBGpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a7:0c:67:ef:86:2e:44:3f:95:1b:e3:86:e5:95:dd:74:81:
d2:c5:ee:78:a5:a8:0d:33:7d:9d:a3:b6:6b:3d:58:f5:93:c5:
11:85:99:e2:e7:1a:6d:c5:61:85:1e:19:2b:39:9a:88:9e:94:
11:81:bc:6b:49:63:14:e8:b3:cd:12:4d:f0:25:b9:1e:e4:68:
fe:92:44:a9:35:77:81:f9:38:78:e4:41:16:9f:b5:25:39:7f:
61:51:c5:17:8d:73:6c:e7:eb:bc:37:6e:c5:c9:03:b9:1b:2c:
6e:26:cd:1e:a2:57:86:df:0c:8a:8a:f7:bf:6d:93:1d:63:8e:
5d:98:cb:1f:1f:11:6f:fb:81:28:db:45:48:50:3d:ee:06:a7:
3a:b7:05:57:80:93:6b:a4:57:d2:3a:8f:cc:81:af:aa:6f:47:
b4:c6:b1:53:2d:4b:33:a2:09:41:b2:d8:0d:ad:95:a2:5c:71:
e0:e6:95:c0:05:83:42:c8:c0:64:7f:da:b2:cd:61:6e:3b:ce:
0a:4f:d2:82:ff:77:35:a9:30:cc:44:8c:c9:21:37:8a:0d:4c:
53:c8:9c:a1:5b:2c:a6:06:14:22:7d:e3:ea:f9:9c:8f:67:82:
7b:fa:75:a5:d8:c7:0e:5a:f9:c2:4f:53:f8:f9:61:87:92:80:
6c:49:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:05:58 2025 by rpki-client