Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/BLPtpElZC_p2IWrsn0eYA39TSUA.roa
File: BLPtpElZC_p2IWrsn0eYA39TSUA.roa (raw, json)
Hash identifier: q8YlKe7zrrj4ZoEyny/W1gxonK4RscrAFG9IOAtgKRE=
Subject key identifier: 04:B3:ED:A4:49:59:0B:FA:76:21:6A:EC:9F:47:98:03:7F:53:49:40
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019A53CE583388D28DF08A80CF34A5A5DE6A
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/BLPtpElZC_p2IWrsn0eYA39TSUA.roa
Signing time: Wed 05 Nov 2025 11:37:03 +0000
ROA not before: Wed 05 Nov 2025 11:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202779
IP address blocks: 91.201.220.0/22 maxlen: 24
185.154.156.0/22 maxlen: 24
194.54.128.0/22 maxlen: 24
194.126.184.0/22 maxlen: 24
213.173.96.0/19 maxlen: 24
213.244.248.0/21 maxlen: 24
2a07:8ac0::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ce:58:33:88:d2:8d:f0:8a:80:cf:34:a5:a5:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Nov 5 11:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04b3eda449590bfa76216aec9f4798037f534940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:69:7b:4a:43:6a:3a:d1:8f:bd:54:c9:f1:
e4:82:a0:c0:68:e6:a6:d7:25:b3:28:76:5e:91:6c:
7e:32:d3:ee:e8:48:2e:1c:d3:70:84:47:fc:9b:5d:
14:70:ea:5e:15:b2:1b:2b:8d:0b:b1:9b:35:bf:96:
2d:95:5c:94:7e:aa:3f:be:85:a4:a1:6c:fd:eb:26:
2c:c6:06:6f:75:c8:36:d7:e7:19:24:f5:a9:22:e5:
03:73:0e:84:89:2a:45:f7:30:b1:75:b3:48:ad:47:
bc:d7:9b:fa:ed:bc:8b:c1:35:db:24:ef:6c:aa:5a:
c1:35:ec:35:de:e1:32:6f:86:0c:b3:b8:0a:05:4f:
c6:1d:44:33:7c:ec:5d:6c:23:1e:82:0d:e3:1e:7e:
cb:e5:18:6b:fa:0f:05:25:9f:59:8b:83:62:97:25:
b3:ae:30:6b:5f:dd:d4:f3:64:10:89:5e:f0:cb:6f:
71:a2:ca:8a:48:6f:4b:54:94:87:a2:c7:34:f5:de:
3b:f0:a7:34:e6:3b:fe:2e:2e:91:06:d3:b2:bb:bf:
e4:7a:b4:7a:e7:cd:0f:1d:f1:8b:43:16:11:17:be:
39:df:43:6b:65:db:9a:a0:73:79:c7:96:45:0d:19:
38:de:e0:70:00:1b:63:a2:d3:d0:4c:ee:b5:96:6f:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B3:ED:A4:49:59:0B:FA:76:21:6A:EC:9F:47:98:03:7F:53:49:40
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/BLPtpElZC_p2IWrsn0eYA39TSUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.220.0/22
185.154.156.0/22
194.54.128.0/22
194.126.184.0/22
213.173.96.0/19
213.244.248.0/21
IPv6:
2a07:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
28:47:e0:cf:3c:67:0b:6f:29:ce:2c:23:cf:89:3c:b4:17:c1:
09:61:fe:b8:8f:d4:b4:7a:95:4f:65:13:e6:3c:c1:ac:57:2d:
cc:10:db:f1:1e:f8:67:13:63:b7:45:86:67:c9:41:86:70:f8:
94:cf:58:fa:26:95:c9:ce:e5:0d:bf:92:b2:c5:a2:b2:d4:eb:
7d:3a:1b:99:60:4e:a4:b8:33:f2:86:84:ef:4e:1e:b9:1a:57:
4f:3a:12:a1:26:9e:cb:f8:9f:26:2e:3c:f5:79:9b:10:81:c3:
51:d4:0b:ff:91:ae:f1:63:9c:fe:eb:c6:4a:5f:7f:59:d7:50:
21:60:77:fd:d1:27:68:ed:9d:67:6a:7e:6b:58:36:ee:86:da:
a5:a1:f6:e0:1e:77:43:6b:b8:74:ca:54:8a:13:08:f7:0c:63:
03:21:0c:be:f5:9e:6d:ce:20:5d:b0:70:d8:23:cc:61:16:e1:
25:60:0c:35:e5:96:16:4a:6a:3c:1d:de:05:cc:89:e1:97:6f:
c5:ad:ca:8e:04:2f:f9:7b:08:36:6f:e8:e4:f3:59:3a:21:b3:
48:68:0f:90:07:56:04:95:7a:79:37:7e:cd:67:f1:bc:07:03:
38:36:55:4f:11:83:b5:e3:e5:aa:4a:4a:bf:10:7d:7c:33:f8:
a4:9b:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:32 2025 by rpki-client