Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/bA4kFQQRycjAl1bMeTQ0UI0e0bk.roa
File: bA4kFQQRycjAl1bMeTQ0UI0e0bk.roa (raw, json)
Hash identifier: IGXYfsz5v3Z0t0tWcFhuLhYIsbf6mqomCWhihdQhSWY=
Subject key identifier: 6C:0E:24:15:04:11:C9:C8:C0:97:56:CC:79:34:34:50:8D:1E:D1:B9
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0199164C505E2EEE721F5EBFC6861FAFAC6B
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/bA4kFQQRycjAl1bMeTQ0UI0e0bk.roa
Signing time: Thu 04 Sep 2025 19:55:24 +0000
ROA not before: Thu 04 Sep 2025 19:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 45.80.228.0/22 maxlen: 24
45.93.62.0/23 maxlen: 23
45.95.129.0/24 maxlen: 24
178.159.94.0/24 maxlen: 24
185.221.196.0/23 maxlen: 24
185.232.18.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
185.246.216.0/24 maxlen: 24
185.246.217.0/24 maxlen: 24
185.253.24.0/24 maxlen: 24
194.113.238.0/24 maxlen: 24
194.113.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:4c:50:5e:2e:ee:72:1f:5e:bf:c6:86:1f:af:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Sep 4 19:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c0e24150411c9c8c09756cc793434508d1ed1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:0e:fa:91:7c:2b:1a:4d:6d:35:51:ac:c5:
55:84:17:d3:00:07:bb:7d:82:6f:78:bc:55:62:06:
eb:18:0e:ca:f3:7f:08:44:a3:af:18:93:2a:57:92:
c9:24:5a:c6:95:e9:61:c5:d0:88:bb:1d:d3:12:5c:
51:24:b9:f3:24:af:ab:46:45:15:16:f8:0d:56:f2:
76:4b:bf:cd:e6:bd:ab:b5:70:9e:2e:25:e0:dc:cd:
4c:5d:65:24:40:54:7e:3e:61:c2:87:52:41:48:7b:
ab:62:d3:b0:71:e3:4c:4a:6f:db:b0:00:75:cd:9c:
15:e8:bf:42:d9:09:41:16:c6:ea:88:6f:fe:4f:92:
46:97:e1:9f:bc:83:ff:72:79:55:7c:3e:32:08:07:
dd:50:ec:f4:b6:d4:57:70:99:e2:16:33:cc:fa:32:
4d:f5:9b:fa:0b:f2:26:00:de:81:fc:e1:fe:52:5a:
96:60:82:b5:e3:3d:f0:4a:4d:f5:18:3d:d2:45:bf:
8a:53:85:4a:9f:d9:2d:53:b9:e8:00:21:ae:05:a2:
2e:e4:3f:15:60:f7:d0:a5:4c:65:1f:a0:8b:f3:88:
6b:28:97:51:d5:10:5a:fe:6c:47:30:d6:92:1f:17:
c3:41:ce:d7:d9:24:7d:b5:04:76:0c:f8:cb:b2:c0:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0E:24:15:04:11:C9:C8:C0:97:56:CC:79:34:34:50:8D:1E:D1:B9
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/bA4kFQQRycjAl1bMeTQ0UI0e0bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
45.93.62.0/23
45.95.129.0/24
178.159.94.0/24
185.221.196.0/23
185.232.18.0/23
185.238.88.0/22
185.246.216.0/23
185.253.24.0/24
194.113.238.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:e7:12:c7:29:a3:6d:b3:63:ff:cd:6a:97:73:55:79:a9:51:
9f:f4:dd:00:2e:b7:db:55:00:b0:a4:7b:bc:89:9f:ea:97:8d:
81:37:ac:0e:c8:26:0c:b4:85:d5:ab:57:04:4e:0b:70:aa:da:
c4:1d:8f:92:fe:8d:b6:1d:c7:4d:83:63:a6:36:bd:de:a8:a3:
be:99:1c:0c:cd:81:d7:b7:6b:83:b7:74:6a:5b:b4:10:f4:ab:
b9:b5:1b:2b:b9:f0:c7:39:f7:28:2a:2e:38:dd:90:e6:b4:29:
8d:07:3f:1b:84:d7:9f:45:f4:6b:64:40:a6:2c:0c:71:5c:75:
ea:a8:e3:c9:26:94:b9:3b:e0:a6:3f:61:4e:98:44:2c:c5:45:
70:1f:d3:64:8d:73:8f:dc:0e:97:b9:38:11:e1:33:e4:16:94:
61:0f:30:93:8f:dd:0c:9c:9e:83:d3:2c:42:60:02:22:ca:c1:
07:4e:17:4a:b0:f0:49:44:87:f6:0f:de:45:e4:3e:20:3b:45:
53:c1:9c:ed:52:96:51:07:c7:59:54:bc:44:31:d0:8d:54:cc:
5a:39:b5:57:9d:ad:77:46:e2:d2:f5:21:d7:fb:93:4c:70:7d:
43:eb:a6:75:4d:11:cc:0f:1e:ac:30:f6:50:97:b6:e3:68:c5:
71:b3:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:08:21 2025 by rpki-client