Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa
File: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (raw, json)
Hash identifier: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=
Subject key identifier: 6E:C5:08:AF:34:08:B8:75:5C:83:24:5A:83:8A:B3:59:18:10:DD:03
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0197F3EAA8816A3BD1B3AC3C4664CBDB9E3A
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa
Signing time: Thu 10 Jul 2025 10:38:51 +0000
ROA not before: Thu 10 Jul 2025 10:38:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 94.131.24.0/22 maxlen: 24
94.131.48.0/20 maxlen: 24
94.131.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:ea:a8:81:6a:3b:d1:b3:ac:3c:46:64:cb:db:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 10 10:38:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec508af3408b8755c83245a838ab3591810dd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:d8:e6:8b:01:59:f0:9f:21:c5:11:34:8d:
50:f3:7a:7b:1a:67:ca:dc:57:d8:48:c2:ed:9a:ff:
30:01:0a:eb:7e:3a:9a:61:b6:85:a8:fb:e3:00:43:
98:7f:39:d9:87:a0:b8:2e:34:84:7c:9d:e9:74:cb:
28:8c:0c:f6:9c:bf:ea:62:b3:1b:e6:8f:2c:5f:a7:
bd:38:f1:c5:b5:4f:09:0b:58:6e:42:22:09:b0:f3:
ec:42:b8:81:db:8d:c4:cf:12:56:60:6e:01:c7:00:
14:5d:22:e5:c6:64:e9:13:9f:08:1d:23:64:68:30:
5c:4d:11:f6:b3:89:57:2c:73:c3:92:52:db:7b:30:
76:5e:47:21:57:db:79:5a:b0:ad:a2:68:35:02:a9:
df:30:59:17:24:4a:e4:e8:e1:3e:c7:f0:51:d3:92:
ac:b2:b9:9b:f4:c5:d7:ac:92:9e:61:69:e4:ae:3d:
ac:e4:47:02:f5:46:e1:c4:8f:2e:0c:d6:d4:ac:d7:
10:2f:82:c9:0b:f5:0b:60:2d:dc:ee:d5:72:d5:6f:
39:95:f1:23:14:ab:f1:35:d8:97:b4:fa:e3:48:ae:
8f:be:f3:06:6d:4c:ca:41:6e:41:a1:d2:86:e3:7a:
48:7c:bd:a4:d2:45:f8:a4:bd:c8:e1:27:6d:e3:8b:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:08:AF:34:08:B8:75:5C:83:24:5A:83:8A:B3:59:18:10:DD:03
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.24.0/22
94.131.48.0-94.131.79.255
Signature Algorithm: sha256WithRSAEncryption
9f:1f:1a:33:0f:56:22:71:e1:40:bc:df:cf:31:6f:cc:70:26:
23:e2:c5:7d:ac:2a:4c:0d:be:7c:21:f6:2f:61:20:be:94:b5:
b0:2e:54:c0:35:fc:b3:67:2a:34:78:40:09:2e:db:c9:fe:fe:
bf:f6:97:5d:2e:2e:b5:55:e7:95:6f:13:3d:09:03:bf:a8:e4:
30:4b:20:6e:f7:a5:cf:e5:c0:21:18:ee:b4:bb:7e:b3:f7:b9:
e2:b2:95:6d:f6:89:30:77:eb:87:29:00:29:f7:9d:19:ee:5e:
0d:f3:cb:b5:67:94:44:3c:47:1e:28:48:43:8c:da:4b:46:51:
e9:e9:d3:5f:8d:57:79:8f:3e:d2:a1:f9:06:d1:51:89:f8:34:
06:da:73:c6:d2:1c:5d:c7:11:4c:b8:68:ce:0c:6b:69:85:fa:
4d:90:ab:bd:f1:53:3b:03:59:2f:71:d6:94:03:13:d0:c8:cc:
76:29:ae:2e:fc:47:ba:ca:68:5c:0d:22:ed:72:8e:36:db:4b:
bd:0e:44:ee:6f:21:10:58:9d:76:4b:14:6f:c9:37:72:8f:df:
c8:5a:6e:6f:53:01:b8:61:02:3c:4c:3d:54:45:b4:4b:61:e4:
3c:e0:4f:f8:56:0b:73:61:6e:2a:d0:94:15:05:b7:ac:1b:75:
c1:81:0e:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:16:26 2025 by rpki-client