Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/BLL7KvTCffO6tp4kIOP_sSt6WzU.roa
File: BLL7KvTCffO6tp4kIOP_sSt6WzU.roa (raw, json)
Hash identifier: K2KxT9evveKUcS3Zp6W/L1otqyWrsiDb4Q4jrBUnW7c=
Subject key identifier: 04:B2:FB:2A:F4:C2:7D:F3:BA:B6:9E:24:20:E3:FF:B1:2B:7A:5B:35
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAF959B457FEC7F0A5145F87B3A06A4
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/BLL7KvTCffO6tp4kIOP_sSt6WzU.roa
Signing time: Sat 12 Jul 2025 12:50:09 +0000
ROA not before: Sat 12 Jul 2025 12:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 87.248.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:af:95:9b:45:7f:ec:7f:0a:51:45:f8:7b:3a:06:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04b2fb2af4c27df3bab69e2420e3ffb12b7a5b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:6d:a0:7f:a2:9a:78:43:e3:3e:98:7f:66:
bb:09:f8:ec:e1:26:a5:dd:fa:74:c9:4b:b6:f3:ca:
6e:77:72:e0:4a:bc:4d:6c:a8:bf:de:22:c6:eb:11:
a5:5d:da:58:8b:92:9b:09:49:34:e6:88:0d:f0:c0:
21:90:a3:dc:a4:de:04:11:d3:ee:70:ab:ca:0e:87:
e1:8b:e0:5d:3f:12:6c:db:50:e3:63:fe:bb:1a:55:
f2:e0:6d:c6:73:88:40:0a:03:03:22:91:70:13:18:
d9:8a:86:5b:87:6a:7c:99:46:be:74:a8:31:cd:d0:
0a:57:f4:4a:26:04:66:52:ed:42:e0:58:af:5b:df:
5a:9f:84:51:3d:1d:a3:90:1f:30:8e:75:7e:19:cd:
bd:7d:3c:a7:97:b4:da:9e:3a:da:dc:0d:57:6b:41:
03:54:32:f1:c2:59:36:57:6c:d1:4f:cc:67:f6:1f:
39:ae:ac:b0:2e:78:0c:85:9b:57:0a:1c:dc:98:04:
4f:29:3f:9a:c5:78:38:0d:e0:93:da:7f:23:53:72:
9b:6d:f7:a8:28:c9:2d:08:f8:c3:9f:f0:4d:21:47:
69:1f:e5:5f:88:8f:41:5b:4f:84:bd:e9:63:88:e5:
70:e6:86:13:38:dd:f0:62:d7:ab:04:f6:2c:45:5f:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:FB:2A:F4:C2:7D:F3:BA:B6:9E:24:20:E3:FF:B1:2B:7A:5B:35
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/BLL7KvTCffO6tp4kIOP_sSt6WzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4b:15:b4:1d:67:3e:d2:e5:24:20:c6:ca:a0:40:67:19:4d:
28:95:dc:61:1b:89:51:b7:e8:ec:2a:37:c7:d7:61:b1:f7:23:
62:9d:bc:94:e6:f0:15:49:5c:eb:f3:6f:4f:37:b6:12:76:4d:
5f:ea:92:fc:7f:c6:aa:3d:e0:6d:b7:90:a4:40:e2:2c:ae:a7:
d0:60:26:0b:24:73:24:10:e3:bf:17:77:86:09:47:0d:90:09:
e6:da:8f:0f:02:c4:36:41:04:51:c4:01:f0:42:9c:0d:cb:d6:
a2:4f:ce:a8:58:7d:53:32:0d:44:12:59:fc:ba:f6:c6:3a:cc:
a7:f0:8b:45:8e:e9:05:f4:b6:bd:fd:3b:68:04:72:5a:03:54:
65:27:d7:70:70:6f:6b:b1:0e:5d:d1:14:70:07:90:92:af:b2:
84:3b:50:b7:8d:51:ee:f0:b9:e4:11:ab:a2:18:e2:cd:75:8f:
f5:8d:55:16:b0:4e:ff:a3:59:06:c3:0a:1f:28:8b:37:6e:01:
6f:39:d8:f7:98:e3:1b:93:92:8d:39:2b:22:5d:90:b2:ff:22:
09:25:eb:4e:2e:08:34:4b:8e:1e:76:8c:75:e2:3c:d8:8a:02:
09:cf:ba:8d:6c:d6:95:f3:ba:32:a1:fe:e1:7f:06:c3:87:fa:
cd:8e:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:12 2025 by rpki-client