Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BvtUlmBuofNBKnR__R6LjIDrcWs.roa
File: BvtUlmBuofNBKnR__R6LjIDrcWs.roa (raw, json)
Hash identifier: Qj9QjL59F7eVdiPIo7rMy56bmkKHAI1CmazPaslAigs=
Subject key identifier: 06:FB:54:96:60:6E:A1:F3:41:2A:74:7F:FD:1E:8B:8C:80:EB:71:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199A4274EEA9086955FACDB8C51F2CBB486
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BvtUlmBuofNBKnR__R6LjIDrcWs.roa
Signing time: Thu 02 Oct 2025 09:01:03 +0000
ROA not before: Thu 02 Oct 2025 09:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 82.152.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:27:4e:ea:90:86:95:5f:ac:db:8c:51:f2:cb:b4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 2 09:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06fb5496606ea1f3412a747ffd1e8b8c80eb716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:2b:77:b1:07:aa:34:74:61:21:f1:0e:be:
2f:a3:64:67:e4:93:78:38:73:3d:29:6a:1e:b2:da:
97:ed:1d:dd:fd:98:fe:ae:f7:6a:bc:97:09:c8:4c:
4a:c9:95:9d:00:48:7f:54:ec:c0:a5:d6:a4:a3:9c:
17:c8:21:33:5a:04:1d:4e:1b:40:b2:91:7d:38:a4:
8c:ee:89:28:b3:c9:5e:13:4c:5d:7c:0f:ec:de:3b:
0c:ef:a5:5f:ff:03:79:c2:ef:94:a4:17:1c:3c:a2:
e8:99:b3:07:37:38:a3:81:20:34:d5:39:8c:c7:c3:
3e:e8:0e:85:89:32:af:06:f1:96:dd:ec:5b:48:56:
56:d6:a9:0b:17:9f:48:b1:35:d6:d2:ab:fd:be:77:
f8:29:6b:88:9a:7a:ab:7c:1f:a1:97:ac:ac:e1:71:
a8:b7:4d:73:4c:6d:78:d3:2c:93:ea:77:4c:d8:de:
22:5d:7a:4f:96:74:ec:5c:8a:bf:d6:a6:4b:a9:ce:
ee:d2:4c:37:18:50:92:ee:f7:5e:1b:6e:dc:8c:a4:
1b:05:81:e1:f7:35:83:ff:f6:a1:20:91:fc:98:d4:
f9:e5:98:21:d1:20:e4:c0:63:e3:8c:b0:d6:4d:62:
7e:2a:70:05:b5:1b:b6:3b:9f:6c:93:92:1a:38:e0:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:54:96:60:6E:A1:F3:41:2A:74:7F:FD:1E:8B:8C:80:EB:71:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BvtUlmBuofNBKnR__R6LjIDrcWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:20:04:55:c5:c7:4b:43:6f:f5:f5:c3:cd:ea:af:57:98:ac:
8a:7b:18:54:7e:a8:28:86:09:e3:05:c6:d9:f9:ba:2e:ed:91:
1c:f4:86:3e:1a:6e:c0:98:de:ed:18:06:47:81:27:1a:e3:f2:
56:f3:00:68:7d:b0:18:13:9a:fb:8e:19:13:ea:3f:00:3b:c4:
8a:45:e2:be:71:c5:1e:e9:b8:71:19:e3:2f:7b:d7:92:ca:f7:
01:43:2c:ad:05:3d:3b:47:40:61:55:cb:56:c1:10:5a:73:2a:
1b:d6:d4:44:e1:f5:f8:bf:9b:98:d1:42:b7:22:00:9d:d5:7e:
88:8f:38:ef:cb:d2:a9:0a:ca:01:ed:fe:ae:65:75:9a:a2:65:
46:30:b0:46:38:3d:d8:11:85:6b:d0:25:2e:77:64:5d:7d:3b:
db:0e:a6:15:9d:59:a1:b9:79:03:66:ac:9e:9d:98:6b:58:72:
f3:0d:e3:54:09:df:29:7c:e1:7d:49:a5:5a:cc:b1:fd:a5:40:
2e:a7:df:da:e1:c7:80:99:3a:34:4b:59:db:62:2d:3d:8b:53:
a7:aa:3b:04:bf:ae:c9:d6:98:95:09:8a:b5:2f:5e:53:8e:5a:
75:3c:85:fc:7c:5c:a7:cf:23:f7:2f:1f:c6:02:96:87:45:bb:
44:af:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:02 2025 by rpki-client