Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa
File: BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa (raw, json)
Hash identifier: gr5E54KUXZ1S0kWmDwR6NxGfZr8Il97zAx8H2R2BeUg=
Subject key identifier: 04:FE:13:AA:43:AD:04:5A:74:8B:D4:48:72:C7:E9:CD:D1:71:C6:D6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197DF8C986D3EBEFBA56D8369B67F820AA3
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa
Signing time: Sun 06 Jul 2025 11:43:42 +0000
ROA not before: Sun 06 Jul 2025 11:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.226.56.0/24 maxlen: 24
194.61.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:8c:98:6d:3e:be:fb:a5:6d:83:69:b6:7f:82:0a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 6 11:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04fe13aa43ad045a748bd44872c7e9cdd171c6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:b2:0a:db:07:44:d2:ba:e3:fb:17:3e:57:
06:4a:42:de:4f:ff:54:00:93:b5:c5:6d:e5:0a:18:
78:e0:eb:a6:02:26:e6:91:f5:d6:5b:5a:b8:82:63:
a3:a0:9f:16:de:c7:bd:ff:9e:94:36:3d:a0:f9:86:
4a:d9:8e:76:fd:3f:e2:5f:51:8c:83:7b:a5:c3:dd:
4e:d6:a8:fc:53:b8:14:11:18:98:b4:62:e2:5a:a4:
2f:07:1b:74:60:bf:94:66:8a:17:6c:ac:7c:c5:e0:
f1:34:0b:a2:e3:10:68:d0:45:aa:8b:04:86:82:21:
c1:f5:ac:36:76:2d:43:57:cf:81:e8:1c:48:5a:50:
07:53:3d:26:b0:c1:bc:6b:90:29:fe:e1:50:b5:89:
c6:a5:9f:22:4a:1a:ac:aa:d7:c8:23:56:bc:29:75:
ea:f7:99:a4:06:74:ad:8b:86:6f:59:0f:0b:a4:07:
ae:ab:3b:8f:a5:07:1e:39:72:b0:45:e2:0e:60:cf:
82:de:df:2b:1f:99:c0:99:83:b4:8f:06:0f:6e:32:
e9:fc:d2:d4:1d:97:a2:26:ed:8b:08:cd:a8:77:c0:
2f:9f:84:a4:d4:0e:f4:c6:54:98:87:ae:1a:b8:63:
b6:ed:52:14:37:20:c0:c6:74:1b:1c:50:7f:0e:77:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:13:AA:43:AD:04:5A:74:8B:D4:48:72:C7:E9:CD:D1:71:C6:D6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
194.61.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1e:5b:3e:8f:0a:14:dd:2b:46:03:c2:a0:c2:60:36:c9:23:
ee:82:ad:69:68:6d:ec:82:54:14:b4:28:ef:4f:b4:fb:1b:83:
e7:f5:de:b7:6c:f5:a8:d7:99:95:4e:30:08:09:cd:92:a9:02:
dd:37:7a:bc:92:69:07:02:c0:4f:55:b2:5e:55:c6:1c:2d:dc:
59:54:bc:78:b6:7c:e1:da:b1:a6:c9:bd:e8:d0:89:4e:e9:e4:
c2:9b:82:93:af:fc:68:15:1f:77:98:fd:15:18:ea:e6:db:d5:
45:1f:01:6f:ed:8b:50:96:65:92:27:71:27:02:f2:2c:0e:89:
ea:bd:86:d2:3a:06:30:b2:ed:74:59:f6:4e:0f:18:85:b7:68:
36:f0:af:58:e1:6f:bc:f1:b1:be:45:be:1e:7a:32:86:d1:62:
68:68:64:08:b1:8f:67:9a:73:92:41:ab:99:62:82:9f:8f:d3:
88:57:aa:06:e2:79:39:50:27:89:a9:54:c0:58:44:3d:ba:cf:
36:3f:f2:4e:6e:09:54:2b:15:ba:ed:b4:28:bd:95:d3:ea:ff:
38:2d:9c:59:73:25:fd:dc:0b:7c:0d:07:0b:fb:02:5c:df:f4:
b0:5a:c2:ce:6e:b7:ec:35:bf:0b:bb:2c:0e:f7:d5:61:dc:94:
7c:30:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:49:58 2025 by rpki-client