Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/bvYdNflBCzwdJvWBj0MCgaIh8XI.roa
File: bvYdNflBCzwdJvWBj0MCgaIh8XI.roa (raw, json)
Hash identifier: v/8UbX5ZTKW2uSHzhvFRPIHTgMMsRDrW81HR26koEc0=
Subject key identifier: 6E:F6:1D:35:F9:41:0B:3C:1D:26:F5:81:8F:43:02:81:A2:21:F1:72
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B6299B18C205E60795CB8BF589609B
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/bvYdNflBCzwdJvWBj0MCgaIh8XI.roa
Signing time: Mon 14 Jul 2025 16:13:09 +0000
ROA not before: Mon 14 Jul 2025 16:13:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212936
IP address blocks: 82.115.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b6:29:9b:18:c2:05:e6:07:95:cb:8b:f5:89:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:13:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef61d35f9410b3c1d26f5818f430281a221f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:27:17:ba:c3:0b:a1:4d:32:1d:8f:c7:8c:
bb:de:ee:07:9d:3a:82:1a:61:cd:bc:fd:9f:e8:58:
d5:b2:7c:04:3b:a6:42:0a:5d:13:d8:90:d3:40:48:
73:96:3d:16:7d:f2:5a:e3:df:de:de:c0:00:b9:3e:
29:f0:d9:ba:d9:7c:c4:dd:48:83:8b:c2:46:e9:55:
61:9b:07:16:a1:b2:88:46:3c:b4:bd:b9:f1:ec:07:
33:61:aa:24:cb:51:4f:59:58:a0:80:4b:5e:a0:07:
01:1e:5a:af:bc:c4:31:a1:c0:2b:b6:8d:69:b8:54:
8d:de:d8:92:3e:46:e7:7c:82:f5:c8:41:71:89:d0:
8a:1e:0c:06:00:15:a9:c1:60:17:ed:3b:44:3b:b5:
a0:a2:f9:44:34:1c:b4:c1:74:1c:67:84:0d:d5:d5:
58:1c:63:b0:c3:10:b4:ac:7b:4f:c4:78:48:b8:d0:
5e:c6:f7:1d:ca:86:cb:ed:09:07:9e:46:61:e4:7a:
a3:33:9a:fc:e5:ec:13:bc:34:c3:d9:43:83:81:75:
8a:37:45:cd:13:a1:db:e0:13:57:11:e6:a6:a6:20:
dc:53:05:fe:f1:5a:32:0e:31:47:4e:d1:7b:e3:ae:
94:7c:b8:8d:6a:a8:62:97:8f:28:89:bf:a6:ce:0c:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F6:1D:35:F9:41:0B:3C:1D:26:F5:81:8F:43:02:81:A2:21:F1:72
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/bvYdNflBCzwdJvWBj0MCgaIh8XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ea:51:41:98:c4:a0:7b:2d:05:4c:9d:77:7f:ed:a8:0c:fe:
a2:b0:2d:5d:7f:15:b1:39:34:fe:78:5d:a0:6f:b8:bc:7e:1c:
b4:83:74:c4:f1:25:02:bf:fd:2f:89:15:a7:0d:34:bd:d1:a9:
67:a5:35:c2:b2:99:76:9b:c9:cd:bb:cc:28:34:24:b2:c8:53:
f7:69:d7:b5:57:c6:0b:f5:6a:42:83:89:06:97:d0:a2:77:9f:
c4:54:6d:91:d1:e4:f8:e5:61:66:4a:f2:64:df:6c:d6:b9:7a:
88:32:94:3c:9d:b7:e2:1c:4a:fe:1f:54:f5:9a:9d:0e:d8:61:
a0:54:5a:3d:51:0f:e2:d2:b8:7a:0d:ba:cd:a0:86:68:1f:ab:
fb:74:61:7e:7b:ed:49:ab:da:ab:84:b6:2e:8d:0f:4f:09:cd:
0b:db:75:78:8d:f7:71:21:b9:8d:fe:b4:97:a7:45:f1:15:0d:
e3:9f:2e:b2:fe:d5:59:45:e0:f3:aa:48:26:82:77:12:ba:32:
e1:1d:37:1b:2d:e3:ab:fd:d6:cf:e0:6a:59:e5:fb:45:05:86:
ca:08:bd:a8:11:6e:d0:7e:ba:75:51:e4:08:08:be:32:55:a7:
f9:89:f8:bc:84:07:ea:62:f9:c8:47:6b:18:36:cb:f2:e4:67:
9b:51:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:48 2025 by rpki-client