Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/BF6kk7Ioe_IANLRocL5TB8rFDXg.roa
File: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (raw, json)
Hash identifier: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=
Subject key identifier: 04:5E:A4:93:B2:28:7B:F2:00:34:B4:68:70:BE:53:07:CA:C5:0D:78
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0197F8FD22F8E2857AA2818D9B6BCC54C1BE
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/BF6kk7Ioe_IANLRocL5TB8rFDXg.roa
Signing time: Fri 11 Jul 2025 10:17:08 +0000
ROA not before: Fri 11 Jul 2025 10:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 5.133.40.0/21 maxlen: 24
144.124.128.0/18 maxlen: 24
185.173.8.0/22 maxlen: 24
194.163.224.0/20 maxlen: 24
2a04:ed00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:fd:22:f8:e2:85:7a:a2:81:8d:9b:6b:cc:54:c1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jul 11 10:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=045ea493b2287bf20034b46870be5307cac50d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:da:03:bf:9d:18:48:e2:ff:96:cf:93:25:
96:3b:5a:49:05:4f:0a:7e:b8:4c:01:7e:ea:6d:6b:
12:de:b4:59:3c:25:3d:70:dd:d9:8a:bb:ad:a8:a1:
a2:da:b0:c6:00:12:9f:a0:59:ad:48:e9:2c:fc:48:
c0:d3:95:f6:cf:15:16:5a:43:df:af:53:93:77:d8:
ea:0a:bd:08:f6:3f:ad:9e:9a:d6:d5:ee:31:dd:4e:
04:d6:49:8d:5f:93:d6:8c:a3:26:72:53:e0:6e:01:
12:c0:5b:b9:93:c0:8f:1d:82:30:2b:6a:d3:94:e8:
f7:28:c1:a2:54:a6:f3:3d:7d:fe:68:9c:ad:66:ed:
c6:27:70:72:c7:0e:de:ef:60:7f:cb:ad:55:83:8e:
b9:fd:22:9f:cc:6d:8a:5c:07:e5:ab:23:1c:4f:06:
01:53:16:16:75:d4:1d:16:b6:df:1a:4d:f7:e9:87:
e3:67:cb:c7:71:46:33:38:19:a3:10:2b:d7:bb:90:
b0:6f:f8:fa:bf:13:44:01:b0:8a:5a:db:7e:44:3f:
15:48:03:d5:da:69:5e:04:d8:80:93:f2:44:0b:df:
57:bd:b6:2d:3b:0d:51:d6:4d:c5:fa:88:aa:25:82:
cd:4b:f5:bd:fc:c2:20:01:89:5e:ee:73:4d:fd:f7:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:A4:93:B2:28:7B:F2:00:34:B4:68:70:BE:53:07:CA:C5:0D:78
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/BF6kk7Ioe_IANLRocL5TB8rFDXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
144.124.128.0/18
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
51:80:d0:fe:44:0e:ab:42:f0:a3:00:29:6a:35:f8:ab:cb:c5:
78:2e:4f:ed:82:88:d4:61:7a:ff:02:08:48:1c:48:51:ed:5a:
dd:d5:db:8c:bd:bc:99:19:9a:72:8e:c9:e1:11:a5:16:44:9e:
9d:2c:51:f5:57:6c:03:21:9d:28:c5:ce:cd:34:f1:94:10:dc:
f5:f4:01:ce:16:e6:2c:ce:38:3d:fb:31:21:a5:80:5d:06:d8:
f0:8c:08:ff:31:c8:b6:c6:01:08:3d:7b:4b:e9:36:ae:24:e5:
87:26:76:b9:82:17:24:bf:d4:9d:2d:8a:82:96:f5:be:a4:2a:
61:dd:19:e1:68:e9:a3:2d:00:bf:b8:ba:9c:4a:86:38:51:24:
e6:7b:ac:42:9e:80:b6:f1:73:af:ff:9d:6a:e3:3b:b9:7f:f3:
e4:f9:84:1b:73:d7:bf:b6:05:74:ee:7a:80:57:aa:88:db:84:
43:3c:e4:79:05:4d:e3:08:46:cd:0e:f9:4f:e6:8c:0b:04:63:
a3:62:dc:27:f6:21:f7:69:33:6f:1f:2d:f3:90:09:2d:a5:e8:
54:cd:f0:72:69:bd:4b:c5:3e:54:55:ed:63:0e:c7:f9:66:2a:
33:88:c6:cd:d2:c9:85:2c:6e:9f:ff:0b:17:29:4b:d2:af:f9:
e9:11:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:16:49 2025 by rpki-client