Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/bbrVRJCo_Kq0jG62YGVKV5kqDnQ.roa
File: bbrVRJCo_Kq0jG62YGVKV5kqDnQ.roa (raw, json)
Hash identifier: 0LSMM83OGpO+BicY5IpwKPs75GhmmsY9wivMtlBMixg=
Subject key identifier: 6D:BA:D5:44:90:A8:FC:AA:B4:8C:6E:B6:60:65:4A:57:99:2A:0E:74
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019811C5BFD6A43DC0622CEA36CF02BC5FF2
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/bbrVRJCo_Kq0jG62YGVKV5kqDnQ.roa
Signing time: Wed 16 Jul 2025 05:47:08 +0000
ROA not before: Wed 16 Jul 2025 05:47:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:c5:bf:d6:a4:3d:c0:62:2c:ea:36:cf:02:bc:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 16 05:47:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dbad54490a8fcaab48c6eb660654a57992a0e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:67:9c:51:51:5a:cc:8c:d9:8a:b1:77:01:
f1:fb:56:a7:50:82:6c:d5:2d:9a:6a:b1:f1:43:ae:
d8:11:99:7f:17:86:68:cb:49:a2:2a:c1:b0:c7:af:
a2:bb:f8:c0:ee:4c:eb:aa:7c:be:03:b3:5a:3d:8b:
8a:74:e7:d7:ce:70:a3:8a:b9:18:c7:11:a6:a6:db:
98:53:b8:5d:95:de:6f:a4:b4:8b:11:bf:c4:1f:61:
46:c1:d1:03:85:3a:4d:af:b4:f5:67:71:ef:e6:28:
7b:d9:42:f8:8a:da:0c:b5:31:c0:72:96:be:6a:7c:
84:db:2d:96:36:b0:92:18:0e:4d:9f:0d:ea:86:93:
c4:00:ed:a7:d3:fe:28:e7:17:2b:1d:c2:16:29:b2:
e6:fe:d4:d8:05:36:b2:5d:dc:9a:c7:f1:2e:d8:f6:
71:47:dc:47:a0:34:ab:a5:ed:79:fb:c6:cd:9b:09:
3b:d2:ea:d9:c8:d6:0e:39:18:36:1e:c3:f3:c8:c7:
4a:91:9e:96:5f:7f:70:28:bc:3e:88:72:67:ac:52:
be:4c:c5:be:1b:d1:5d:89:a6:53:29:51:cb:00:28:
97:f2:88:e5:35:93:3e:93:ba:a8:fe:de:cc:aa:dd:
cb:f6:25:90:86:21:c0:35:d3:fa:2f:8b:9e:5b:b7:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BA:D5:44:90:A8:FC:AA:B4:8C:6E:B6:60:65:4A:57:99:2A:0E:74
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/bbrVRJCo_Kq0jG62YGVKV5kqDnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d9:f3:b8:c2:49:a7:c4:96:bd:a5:0a:d8:50:de:1a:5a:aa:
a0:05:b1:ec:b3:23:bb:e5:39:62:6c:1a:57:c9:20:83:0b:8f:
fe:f1:1d:bf:0a:a4:a7:36:63:90:2b:ea:de:d2:8e:e9:9a:8e:
c8:88:22:ce:58:f5:11:60:a3:62:81:ea:62:86:7c:9d:ac:91:
07:04:d0:ce:12:d7:29:c7:6c:14:47:66:53:6e:b6:8a:95:2b:
e8:dd:82:c5:bb:cb:91:9b:2b:b1:d0:dd:ab:24:a2:d3:12:07:
40:0d:80:cd:b0:7e:66:7f:92:6d:93:18:7d:a4:71:62:a4:55:
fb:43:71:a1:0c:7d:91:f0:2f:0e:42:49:2e:e7:e2:03:6c:95:
6b:50:c6:73:31:2a:6b:f1:e8:01:11:73:f0:a8:5c:67:b4:e0:
65:a9:27:b0:83:b3:4b:0f:7b:67:82:00:e2:78:0c:b8:18:aa:
8d:0a:18:8b:97:41:f5:60:fb:b6:0e:73:7d:5d:0d:db:a0:eb:
81:fd:1d:c8:da:2e:55:f6:c8:f0:ff:48:9b:00:da:27:e7:89:
3b:d1:e6:b5:cd:68:f0:3c:6d:3d:78:71:77:9f:12:8e:6c:e0:
e3:cf:be:82:e2:f9:8e:ee:ca:87:ef:50:9b:06:3b:03:54:90:
4b:bf:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:31:12 2025 by rpki-client