Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/bkGe9tQdxpLS2cqWQLRLK9orZrk.roa
File: bkGe9tQdxpLS2cqWQLRLK9orZrk.roa (raw, json)
Hash identifier: 4rDt9B+7ip/jxoWojspAP65a3LvuTqN0uNarGS2oh5E=
Subject key identifier: 6E:41:9E:F6:D4:1D:C6:92:D2:D9:CA:96:40:B4:4B:2B:DA:2B:66:B9
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0197F0A9C9F892C92D37AAD4A610D20F9E7D
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/bkGe9tQdxpLS2cqWQLRLK9orZrk.roa
Signing time: Wed 09 Jul 2025 19:29:08 +0000
ROA not before: Wed 09 Jul 2025 19:29:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213953
IP address blocks: 88.218.16.0/24 maxlen: 24
88.218.18.0/24 maxlen: 24
88.218.19.0/24 maxlen: 24
193.228.91.0/24 maxlen: 24
193.228.168.0/24 maxlen: 24
193.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:a9:c9:f8:92:c9:2d:37:aa:d4:a6:10:d2:0f:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jul 9 19:29:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e419ef6d41dc692d2d9ca9640b44b2bda2b66b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:14:cd:25:48:dc:6f:40:74:f2:b6:1b:bd:
fe:c0:9d:30:b3:b4:6f:0e:05:61:ef:7c:73:cf:03:
0c:63:9a:6c:0d:95:8b:20:49:da:d3:eb:89:0f:a1:
28:94:9c:a7:75:2a:b3:7d:36:7f:00:d5:5c:37:2c:
9d:d5:69:5e:96:26:02:02:21:69:e6:21:c9:90:53:
d4:ec:df:ac:a3:02:cd:7f:32:29:b4:16:4e:57:22:
49:57:b1:25:6a:bc:22:5a:0f:e8:e5:d6:1f:c2:95:
a9:80:88:6b:f4:84:d1:1b:8a:16:d1:50:ea:44:0c:
cf:0f:c9:8e:39:91:6e:da:a2:8a:c1:d6:9c:bf:81:
60:dc:04:53:4c:75:ed:d2:54:cb:8f:44:ed:72:1b:
5e:fa:4f:f6:25:d7:47:b8:ed:68:61:0f:0a:60:5d:
4a:33:4c:ea:2a:eb:8c:62:db:e4:db:9c:e6:49:f8:
13:32:34:04:b7:2b:8c:07:0d:c0:aa:cc:2a:0d:38:
28:d2:1f:8a:a4:33:96:4e:7d:be:4a:8f:a5:0c:90:
cb:6b:b1:d1:53:27:c7:ea:ef:cd:81:88:69:0f:e7:
cd:0c:bf:f5:7a:f9:3e:12:11:26:6b:b1:40:26:39:
08:fe:e5:8a:7c:7f:50:28:41:bd:28:ec:96:58:40:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:41:9E:F6:D4:1D:C6:92:D2:D9:CA:96:40:B4:4B:2B:DA:2B:66:B9
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/bkGe9tQdxpLS2cqWQLRLK9orZrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/24
88.218.18.0/23
193.228.91.0/24
193.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:a0:af:17:22:0a:bd:e3:d4:dd:40:4f:aa:12:73:1f:a4:04:
45:09:45:28:01:02:f3:d2:8c:93:ad:7d:cb:63:24:05:98:68:
a2:61:6b:2a:4d:7a:74:aa:62:bd:c7:b4:93:d7:7c:f2:30:e1:
7b:6b:84:51:ec:22:55:41:43:67:0b:21:b5:74:61:b0:87:ec:
4a:7f:d7:8c:14:5a:db:65:f5:94:7e:91:c4:31:ca:a8:17:75:
db:c2:15:24:8d:4d:9c:c7:00:d2:b5:b5:ea:b4:ff:45:9e:e7:
52:fd:6d:2b:74:0b:ea:40:6e:c4:38:46:da:73:47:ee:ce:b3:
f8:57:40:f4:fe:b3:7f:fc:20:6e:02:6a:a5:6e:a4:6d:8b:cd:
7b:ea:af:21:ee:bb:8d:59:0f:b9:62:33:04:8c:24:77:21:1f:
d3:72:18:eb:8d:db:5a:5d:f6:80:a1:00:5f:c9:b1:44:c7:62:
9c:a2:d7:90:81:c4:90:4f:b3:d6:ab:f0:0b:1e:1b:84:41:14:
a1:3c:c3:33:f0:d1:21:8d:b1:22:21:e5:06:2f:b9:c0:70:f6:
9b:4a:1f:f8:59:5f:ec:b2:5c:18:03:d2:28:f7:66:9a:5e:19:
93:9a:c0:dc:40:b9:a7:7f:1e:31:45:63:05:0c:e8:88:9f:95:
1a:de:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:39 2025 by rpki-client