Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BMc6XYhm8QmNFsqKH1ODL5kAt2k.roa
File: BMc6XYhm8QmNFsqKH1ODL5kAt2k.roa (raw, json)
Hash identifier: QBM9tsfwchCFA+6j41z+fw6mrLOFVUNopizYnkIHLqo=
Subject key identifier: 04:C7:3A:5D:88:66:F1:09:8D:16:CA:8A:1F:53:83:2F:99:00:B7:69
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B62B257602E5C0D027517524EFC766
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BMc6XYhm8QmNFsqKH1ODL5kAt2k.roa
Signing time: Mon 14 Jul 2025 16:13:10 +0000
ROA not before: Mon 14 Jul 2025 16:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 82.115.223.0/24 maxlen: 24
185.106.92.0/24 maxlen: 24
193.124.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b6:2b:25:76:02:e5:c0:d0:27:51:75:24:ef:c7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c73a5d8866f1098d16ca8a1f53832f9900b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:6b:85:5e:64:47:7d:74:e6:c4:2d:74:9b:
3f:66:72:7c:aa:6c:ca:50:de:d1:18:95:35:f0:b6:
33:34:08:b5:a9:dc:89:ce:33:9c:69:25:a2:20:d8:
1b:c2:b6:f6:81:e8:9b:6f:21:d0:52:38:4e:91:a6:
12:82:2e:c8:5c:6f:a5:08:a9:10:96:6f:04:a7:43:
c1:a1:3b:8e:2b:92:c2:12:b1:da:0e:cf:3f:5c:bd:
d3:1e:1e:1e:bc:51:c4:fa:9a:8e:b6:15:f4:f2:0f:
8b:8e:df:9e:12:7a:74:6c:06:7d:16:df:c7:25:b1:
71:36:46:3b:a1:c5:f8:1f:17:5d:c9:a7:9b:39:03:
40:bb:3a:d5:56:a1:4c:26:94:49:6f:de:5d:0e:8b:
b0:3e:ed:c3:d3:a1:fc:c8:5e:a0:0d:0f:a9:46:18:
bf:1e:2a:ce:ec:fd:8d:ee:86:9d:ad:69:c7:49:e6:
09:d5:73:6a:bd:ab:8f:b9:97:ba:21:ec:70:11:bb:
47:2a:63:5d:59:25:7e:a7:e0:c2:ea:f2:60:b6:9b:
5c:62:ef:4f:7d:fa:e7:e5:74:64:16:4a:02:60:d7:
e3:83:61:26:51:d7:0b:a1:b7:a4:3b:d2:37:c2:b5:
9a:8c:01:0c:14:9d:38:5d:a9:90:11:db:9f:dc:8c:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:3A:5D:88:66:F1:09:8D:16:CA:8A:1F:53:83:2F:99:00:B7:69
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BMc6XYhm8QmNFsqKH1ODL5kAt2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
193.124.185.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c7:56:17:31:90:6b:d8:4a:13:90:1b:07:af:04:b2:4a:a4:
a2:27:d8:ca:f1:ab:dc:82:a8:5e:d8:f3:55:b3:f5:65:c3:99:
44:a2:b6:22:85:21:b9:a1:31:df:5e:28:cb:57:cb:4a:58:49:
6a:19:47:e5:d6:55:b0:8d:c1:23:f9:03:da:ce:f5:58:39:56:
3a:8a:b3:53:82:2e:f3:6d:53:ce:7e:93:f1:43:50:b3:74:81:
a4:47:ed:cf:32:1f:78:ac:05:62:9b:d1:84:04:b1:a3:84:c7:
a6:4a:47:e4:91:e6:8d:ca:10:f7:2d:5c:b4:49:e1:7d:d9:a2:
52:0e:55:4b:7b:f8:a4:41:73:03:5a:f0:78:be:bf:52:2d:0a:
e1:4f:35:08:ce:23:90:f4:45:7d:f2:48:9f:ab:98:67:71:97:
be:d0:3b:88:d0:2e:d4:96:42:3e:52:f0:77:1d:02:d4:d9:fe:
f7:1e:b1:6b:17:90:7a:f0:1a:9d:f6:58:78:de:8c:4e:45:1a:
5c:1a:cc:44:f6:57:f7:83:52:59:17:44:0b:57:a2:7f:cd:e9:
d1:e6:ba:81:e4:ea:93:60:14:e9:8a:fe:65:a6:de:e6:9c:e5:
46:57:76:56:dc:36:20:4a:70:17:eb:f1:dd:04:a7:e7:cf:4f:
c4:d8:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:30:04 2025 by rpki-client