Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BgkoGRmKIJGbB38rOUluB-Vy9Vs.roa
File: BgkoGRmKIJGbB38rOUluB-Vy9Vs.roa (raw, json)
Hash identifier: YMt+keDauEBaSO0VfBd6gbH4nyKu3YER8N1JuBIi0TE=
Subject key identifier: 06:09:28:19:19:8A:20:91:9B:07:7F:2B:39:49:6E:07:E5:72:F5:5B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019952EB4D13F0C9D59E6FCD0E0C67800698
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BgkoGRmKIJGbB38rOUluB-Vy9Vs.roa
Signing time: Tue 16 Sep 2025 14:26:16 +0000
ROA not before: Tue 16 Sep 2025 14:26:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 77.93.150.0/23 maxlen: 24
81.5.189.0/24 maxlen: 24
82.153.32.0/24 maxlen: 24
89.213.124.0/23 maxlen: 23
109.176.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:eb:4d:13:f0:c9:d5:9e:6f:cd:0e:0c:67:80:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 16 14:26:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06092819198a20919b077f2b39496e07e572f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:4b:6b:66:6b:bc:19:7c:a9:9b:ca:05:5f:
d1:8e:22:b3:42:0c:72:f4:c9:c0:fd:d1:f2:e4:d8:
59:96:5f:db:d5:a4:22:63:18:ce:01:16:49:e4:8a:
40:09:35:e6:e1:fb:f7:1b:3f:ad:8b:16:be:e4:48:
fe:4f:01:9f:e4:ce:b4:9f:08:7a:cf:28:3c:9a:e3:
97:c8:45:5f:a4:77:ce:9b:70:9a:7a:de:30:92:d5:
7e:31:33:b1:ae:8c:2e:15:6a:0f:e5:44:8d:73:f3:
da:23:1e:fa:52:4e:34:2f:a8:c2:a0:91:4c:8e:31:
4f:6c:44:2e:54:66:2c:44:00:a7:3b:64:fc:e2:23:
5f:bc:b5:18:02:58:e7:3b:93:04:b4:2d:1d:92:40:
19:e1:60:ce:98:0a:2a:e4:b8:d9:bb:63:06:7f:dd:
67:34:a8:bd:bc:68:4f:9a:b2:a5:55:d4:f3:d8:60:
70:3f:7d:be:97:4a:ef:ee:3f:e8:d1:38:05:16:f6:
63:ec:d1:98:ab:e9:75:11:bb:ad:46:1b:fa:b4:78:
c9:05:8d:18:e9:b4:ec:03:a7:dc:7f:aa:0b:72:e3:
bf:29:df:81:23:87:4c:c4:eb:ac:18:4c:42:ef:7f:
e0:95:40:25:8d:f6:f1:28:bc:ec:ea:c1:01:fe:d3:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:28:19:19:8A:20:91:9B:07:7F:2B:39:49:6E:07:E5:72:F5:5B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BgkoGRmKIJGbB38rOUluB-Vy9Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.150.0/23
81.5.189.0/24
82.153.32.0/24
89.213.124.0/23
109.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
19:16:d9:06:77:13:b4:74:c3:1a:2f:08:16:5a:42:fb:b8:c1:
f0:c9:89:4b:ee:c0:fa:ac:b7:20:bf:e4:86:12:e7:08:1e:6f:
d0:fe:3e:8d:fa:cd:2e:cc:c6:d3:54:87:87:68:06:74:b9:e0:
39:19:be:c8:66:8c:01:b7:b2:44:46:05:a9:ed:4c:92:74:30:
0f:ab:b7:38:62:2b:90:01:b5:85:65:6c:b7:a7:34:08:f3:a1:
47:94:c6:6e:32:a0:ba:0a:27:f9:c9:4e:39:23:93:67:3c:8a:
92:7d:72:14:39:7e:10:9d:87:0d:e5:c6:3a:c3:7a:fc:72:12:
51:ba:cc:f7:37:8e:f3:72:54:25:fd:c3:2f:06:73:1e:58:37:
5c:c2:39:a3:d7:f6:01:91:fb:b9:b1:8b:56:e2:b3:22:2e:92:
83:cf:77:c2:32:f7:67:44:91:c1:02:c9:8e:ea:4c:a0:40:65:
18:4a:09:f6:14:24:10:92:d8:e8:a8:ba:7f:08:a1:bc:33:53:
9c:43:0a:e6:d5:75:27:5a:93:1c:0a:dc:90:c6:d0:11:79:4f:
43:8f:7a:30:0a:8d:dd:63:56:3d:83:5f:1a:8f:ba:20:f3:cf:
c2:4d:01:64:48:3c:0e:90:e5:70:c6:9e:5a:0d:b3:af:b6:11:
27:bc:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:03 2025 by rpki-client