Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bbQ_I4rqKCs5T4nLEcZa3dS5Gvg.roa
File: bbQ_I4rqKCs5T4nLEcZa3dS5Gvg.roa (raw, json)
Hash identifier: UeE1GkTu9Nidw8ugvhpLw2OdtmnAcpOGj7ZSnhOPB88=
Subject key identifier: 6D:B4:3F:23:8A:EA:28:2B:39:4F:89:CB:11:C6:5A:DD:D4:B9:1A:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A157421D4E2F76988F06AE4F46CCFD04A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bbQ_I4rqKCs5T4nLEcZa3dS5Gvg.roa
Signing time: Fri 24 Oct 2025 09:02:03 +0000
ROA not before: Fri 24 Oct 2025 09:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51558
IP address blocks: 45.12.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:74:21:d4:e2:f7:69:88:f0:6a:e4:f4:6c:cf:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 24 09:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6db43f238aea282b394f89cb11c65addd4b91af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:29:09:d5:01:88:8d:e8:ff:54:44:c3:01:
e7:5e:c6:ce:57:c5:8c:0d:90:1d:33:2e:2c:4e:2a:
9c:6e:22:35:5f:5f:30:bb:e8:1b:a5:4b:de:99:05:
99:48:12:6a:90:d6:85:24:08:1f:4a:87:b2:28:08:
a1:13:5d:72:7e:d2:71:18:1b:0e:ef:7f:90:1d:82:
fc:41:50:58:37:33:3d:46:15:c8:61:37:5a:80:a8:
a0:c9:b8:80:f8:15:a9:69:fe:cf:f4:81:05:72:a9:
f8:6e:42:e9:1d:aa:fe:8f:4b:a8:d9:7e:7b:66:92:
ca:09:9d:4b:1f:45:ae:fb:43:e1:43:cb:99:23:c1:
53:21:d1:72:41:f8:7d:f3:55:10:e6:b2:78:a7:2f:
2e:b3:93:1f:9d:ab:74:46:81:77:cd:4d:af:16:cd:
2b:d5:1b:d2:07:13:76:99:bb:41:3d:e7:e2:f8:16:
2f:d6:15:a6:1b:29:ba:0f:2c:df:0c:4e:48:c8:fc:
2d:9d:50:cc:7c:b5:3e:c6:fa:fd:da:af:c8:e9:20:
20:d4:e5:8b:8d:81:b1:2c:bb:1f:cf:43:b4:d4:e3:
bf:5e:bf:2f:49:fc:a0:3e:3e:13:88:b4:78:a2:09:
19:80:7c:71:af:3d:d4:27:41:55:b9:57:75:b4:43:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:3F:23:8A:EA:28:2B:39:4F:89:CB:11:C6:5A:DD:D4:B9:1A:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bbQ_I4rqKCs5T4nLEcZa3dS5Gvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a2:c5:27:1b:a8:72:11:10:5b:90:dd:e9:3a:2e:e3:8e:cc:
87:cb:4a:ef:8e:d0:6a:20:29:00:0f:1b:7c:89:fb:16:17:8e:
f1:20:65:50:54:7f:65:38:30:a9:af:ca:28:a7:f1:15:88:78:
31:ba:41:c8:e5:52:d1:a1:46:74:95:53:df:4e:97:94:ff:7b:
46:d9:e0:b5:01:8e:0d:da:63:9a:48:67:45:97:39:39:98:5c:
30:9a:1a:fc:69:b4:ee:3b:4a:6b:e0:9a:11:60:d2:4c:6f:18:
e5:9f:c1:3c:c1:26:c1:34:05:08:6f:22:60:39:fc:da:f9:e0:
26:99:84:6a:c1:84:27:7f:8f:27:8c:db:1c:97:68:bc:8a:d2:
40:20:1b:3b:80:e8:39:3e:7a:3d:ef:17:44:d9:2f:59:9e:1a:
41:66:43:44:0e:0b:23:ff:6c:d9:96:e3:96:1a:df:af:a8:8d:
e8:7c:03:fa:61:d6:e9:b4:76:3d:74:94:a0:d2:a1:44:92:08:
8b:fa:a6:31:b7:12:70:76:42:2b:f9:3e:19:24:bc:23:95:4b:
25:8e:31:05:ab:09:3f:6a:e5:0a:82:c9:aa:3a:5d:49:ed:80:
af:69:60:00:e8:5a:89:b6:f3:fc:0f:33:12:77:a8:06:f4:a2:
cc:37:c7:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoVdCHU4vdpiPBq5PRsz9BKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUxMDI0MDkwMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGI0M2YyMzhhZWEyODJiMzk0Zjg5Y2IxMWM2NWFkZGQ0YjkxYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h4pCdUBiI3o/1REwwHnXsbOV8WM
DZAdMy4sTiqcbiI1X18wu+gbpUvemQWZSBJqkNaFJAgfSoeyKAihE11yftJxGBsO
73+QHYL8QVBYNzM9RhXIYTdagKigybiA+BWpaf7P9IEFcqn4bkLpHar+j0uo2X57
ZpLKCZ1LH0Wu+0PhQ8uZI8FTIdFyQfh981UQ5rJ4py8us5Mfnat0RoF3zU2vFs0r
1RvSBxN2mbtBPefi+BYv1hWmGym6DyzfDE5IyPwtnVDMfLU+xvr92q/I6SAg1OWL
jYGxLLsfz0O01OO/Xr8vSfygPj4TiLR4ogkZgHxxrz3UJ0FVuVd1tEOTrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG20PyOK6igrOU+JyxHGWt3UuRr4MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYmJRX0k0cnFLQ3M1VDRuTEVjWmEzZFM1R3ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxHMA0G
CSqGSIb3DQEBCwUAA4IBAQArosUnG6hyERBbkN3pOi7jjsyHy0rvjtBqICkADxt8
ifsWF47xIGVQVH9lODCpr8oop/EViHgxukHI5VLRoUZ0lVPfTpeU/3tG2eC1AY4N
2mOaSGdFlzk5mFwwmhr8abTuO0pr4JoRYNJMbxjln8E8wSbBNAUIbyJgOfza+eAm
mYRqwYQnf48njNscl2i8itJAIBs7gOg5Pno97xdE2S9ZnhpBZkNEDgsj/2zZluOW
Gt+vqI3ofAP6YdbptHY9dJSg0qFEkgiL+qYxtxJwdkIr+T4ZJLwjlUsljjEFqwk/
auUKgsmqOl1J7YCvaWAA6FqJtvP8DzMSd6gG9KLMN8f9
-----END CERTIFICATE-----
Generated at Sat Oct 25 09:22:06 2025 by rpki-client