Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bXQvMJdRvmcUzRNvoqSuw7KSJaI.roa
File: bXQvMJdRvmcUzRNvoqSuw7KSJaI.roa (raw, json)
Hash identifier: OF3gybs28jNFmyaDGdnV5jfjw4tjWaXLTmF+CjZXGrM=
Subject key identifier: 6D:74:2F:30:97:51:BE:67:14:CD:13:6F:A2:A4:AE:C3:B2:92:25:A2
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0199245D16619C199813550A5313B574B2C5
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bXQvMJdRvmcUzRNvoqSuw7KSJaI.roa
Signing time: Sun 07 Sep 2025 13:28:24 +0000
ROA not before: Sun 07 Sep 2025 13:28:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201691
IP address blocks: 109.122.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:5d:16:61:9c:19:98:13:55:0a:53:13:b5:74:b2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Sep 7 13:28:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d742f309751be6714cd136fa2a4aec3b29225a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:13:c7:09:bc:01:ed:89:d3:bd:c4:ee:f1:
6b:ce:8d:7d:5a:55:90:cf:99:a6:ca:12:ff:ba:09:
b2:0a:ce:4a:7c:79:05:d9:44:2a:a7:03:b8:01:2f:
90:aa:c2:b8:22:63:fd:56:1e:6a:86:da:4a:69:4f:
9a:30:ef:19:56:99:04:f4:5f:1e:03:11:2a:4a:b4:
3e:f9:45:87:81:e9:d4:87:96:d5:84:3e:84:22:f0:
d2:2f:42:4e:d9:d7:57:e4:44:be:9f:de:0e:8a:2f:
a1:ae:3c:5f:f2:11:2b:9e:55:58:e8:01:05:67:64:
ce:ba:b4:4c:eb:be:96:2a:13:69:93:46:a5:bb:1c:
a3:f8:49:35:f6:e6:f2:3c:8d:f1:97:ba:8d:bc:49:
f7:15:8e:ff:91:8e:41:bf:97:bb:72:37:01:2a:92:
16:05:c9:85:5e:17:49:31:ad:0d:aa:07:c8:01:f2:
71:f8:9f:d8:83:7d:d3:3a:51:ce:b6:00:ed:24:86:
ca:e8:34:c4:6c:45:99:ef:ec:28:d1:25:39:00:bf:
4c:2a:76:1c:4a:e8:3c:60:f5:d5:58:e1:df:23:cf:
84:60:83:fe:7a:6f:45:97:6c:40:cc:bf:5c:5e:a3:
65:6c:45:29:ce:19:f4:62:60:38:e5:01:b5:7a:37:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:2F:30:97:51:BE:67:14:CD:13:6F:A2:A4:AE:C3:B2:92:25:A2
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bXQvMJdRvmcUzRNvoqSuw7KSJaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.241.0/24
Signature Algorithm: sha256WithRSAEncryption
83:23:2c:73:c8:d3:d0:3b:29:55:21:67:b0:97:35:da:2a:94:
7c:6f:8d:ac:12:94:f8:ca:0a:10:df:bf:36:c2:ff:ba:ac:97:
86:db:c2:fe:37:e8:79:92:d1:ff:a4:95:42:bc:0c:97:e8:44:
f0:0d:5a:48:5d:e3:d5:be:bc:79:36:bd:a4:13:8b:2d:cf:30:
89:30:1b:98:30:29:cf:e1:2f:a6:c6:35:c6:79:11:da:75:1e:
f3:42:ec:c0:8e:68:d1:f3:72:0c:27:4a:be:b9:9b:02:2b:d5:
98:8d:b2:73:f3:11:c3:04:aa:db:3b:f3:21:30:96:e3:1b:d3:
d3:69:6a:dd:12:8e:01:d1:78:d2:36:71:12:33:5d:0c:c7:44:
c4:ee:15:b9:1a:7d:74:67:47:f8:2e:8e:ee:b2:b1:e5:5e:08:
18:91:8a:54:a8:f3:f5:2d:5d:f2:95:f7:38:2b:aa:eb:7f:d2:
7d:af:0d:55:19:97:ea:5e:f1:11:35:3b:aa:31:84:fd:a4:ac:
8d:16:5a:a5:78:db:75:00:fc:df:74:3e:36:b8:02:ea:09:05:
78:c8:f4:14:71:3d:65:63:19:23:5b:99:41:40:9a:86:84:fc:
0e:54:6b:31:bc:ed:c7:94:e7:ec:39:06:6a:c5:12:6e:71:3c:
3a:c6:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:04:19 2025 by rpki-client