Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/B6xVH4DF7LwRis5lo72xslLrmPw.roa
File: B6xVH4DF7LwRis5lo72xslLrmPw.roa (raw, json)
Hash identifier: dw28/skPjpFpXBid1J9TkAszysG4LWrojBJebFMRKDA=
Subject key identifier: 07:AC:55:1F:80:C5:EC:BC:11:8A:CE:65:A3:BD:B1:B2:52:EB:98:FC
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0199137F75134F0126A88B023CA2D6DAF6DD
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/B6xVH4DF7LwRis5lo72xslLrmPw.roa
Signing time: Thu 04 Sep 2025 06:52:24 +0000
ROA not before: Thu 04 Sep 2025 06:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.168.0/23 maxlen: 24
94.74.190.0/24 maxlen: 24
109.203.176.0/21 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:7f:75:13:4f:01:26:a8:8b:02:3c:a2:d6:da:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 4 06:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ac551f80c5ecbc118ace65a3bdb1b252eb98fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:6d:68:d6:d5:76:ab:f3:7d:1c:87:98:93:
e6:37:29:e3:91:64:e0:b6:c0:9d:90:3b:a4:54:73:
9a:5d:8b:45:e2:67:40:1a:ba:50:53:3d:54:ea:e7:
ca:0a:b7:c4:ee:d5:8d:c2:c6:fc:2f:f8:cd:25:c6:
35:ae:11:bc:30:ce:31:67:75:fe:7d:5a:96:9e:80:
d8:56:86:26:6d:a5:4a:15:37:37:d3:ef:76:bd:ad:
f0:66:d1:f7:21:61:83:df:04:fb:5b:c8:75:2a:42:
d1:df:5e:db:d7:4c:f2:cf:63:11:c0:6c:bb:d0:91:
56:5d:c4:ca:cc:33:57:b9:7f:bc:5c:85:f0:b3:9b:
ab:ee:7a:c1:90:8c:fa:7b:08:a8:74:5d:ad:29:f9:
d0:e0:d7:12:6e:d7:fa:eb:86:35:89:87:cb:1c:d6:
8f:b3:3b:c0:b1:7d:26:e2:2c:02:dd:f0:42:74:f6:
aa:e5:ad:c6:9c:a1:73:52:9d:0b:07:8d:eb:9c:d0:
8c:78:53:6a:4e:f3:51:b0:30:a4:24:72:70:1f:ba:
cb:ef:a2:5f:b4:e0:a4:c2:bd:8b:1b:7f:46:f0:66:
df:32:53:f2:5a:98:9a:43:0a:77:04:df:d0:fd:10:
4c:29:d3:1b:5b:3f:97:59:9f:83:f9:20:c3:30:fa:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:55:1F:80:C5:EC:BC:11:8A:CE:65:A3:BD:B1:B2:52:EB:98:FC
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/B6xVH4DF7LwRis5lo72xslLrmPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.176.0/21
176.46.153.0-176.46.154.255
Signature Algorithm: sha256WithRSAEncryption
68:ec:1a:40:8c:fd:76:70:ec:bf:4c:27:7c:df:a4:41:5c:e0:
1e:e8:7c:ae:15:6a:1c:fd:92:7d:d1:bb:82:41:6c:62:cd:f9:
c5:ce:84:9a:06:0a:ca:5f:d6:b0:66:ec:9a:8a:3b:4b:96:a1:
a0:3d:5d:6a:92:86:61:50:c0:9a:cc:77:7c:91:b4:d0:0d:bd:
c7:23:f0:80:72:10:88:52:90:9c:7a:68:b3:03:b5:30:cf:04:
7d:b9:11:41:44:fa:c1:ff:b8:04:08:ad:cb:51:52:0f:52:d8:
4c:cd:de:bc:26:44:15:34:51:43:c5:f3:a8:6f:ac:05:49:03:
61:b5:0c:56:71:1d:ab:07:ad:ad:b8:b3:8f:7c:4c:2e:60:c4:
48:ee:1c:93:f8:21:4b:78:73:ae:a7:e3:39:8b:00:db:4a:0a:
75:ee:0a:64:4a:4f:c6:81:63:a0:a0:da:03:91:93:90:ac:09:
97:ff:99:6f:2a:80:11:28:73:7b:ea:28:c6:26:f4:b1:b9:54:
69:96:3f:b3:b7:8e:53:49:ce:ea:5e:ce:bf:36:77:58:c6:57:
0e:1d:75:46:6d:22:50:de:b2:21:19:b2:3b:c2:55:76:e4:bb:
fe:c2:3d:80:21:2a:1c:dd:9d:26:2d:36:aa:93:80:d5:3c:d5:
2b:d5:93:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:55:21 2025 by rpki-client