Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa
File: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (raw, json)
Hash identifier: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=
Subject key identifier: 05:2F:6D:28:1F:B2:13:34:EE:4A:57:2B:D2:C3:65:34:CA:65:27:E5
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0196F221A73EB7E8C844739EB5A8C37F4118
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa
Signing time: Wed 21 May 2025 09:16:53 +0000
ROA not before: Wed 21 May 2025 09:16:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198537
IP address blocks: 37.221.100.0/22 maxlen: 24
45.159.236.0/22 maxlen: 24
77.83.40.0/22 maxlen: 24
91.209.115.0/24 maxlen: 24
91.209.149.0/24 maxlen: 24
91.209.151.0/24 maxlen: 24
91.236.32.0/22 maxlen: 24
185.146.52.0/22 maxlen: 24
194.50.253.0/24 maxlen: 24
194.53.1.0/24 maxlen: 24
194.53.2.0/24 maxlen: 24
194.53.61.0/24 maxlen: 24
195.14.26.0/23 maxlen: 24
195.14.112.0/23 maxlen: 24
2a07:4bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:21:a7:3e:b7:e8:c8:44:73:9e:b5:a8:c3:7f:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: May 21 09:16:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=052f6d281fb21334ee4a572bd2c36534ca6527e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:82:be:8a:0a:21:54:c4:b6:a7:de:6d:54:
06:ea:0f:45:27:17:c6:02:d6:cb:37:ad:e7:86:f9:
45:88:34:55:2d:8d:2e:31:75:f8:c7:24:43:45:da:
f2:99:e2:a7:ea:7e:6a:c4:8f:7c:23:ad:de:83:be:
9f:e5:dd:89:a8:51:f3:f4:9a:a6:0d:8b:63:6d:83:
04:ed:6e:16:4a:54:4a:5c:31:07:48:f8:69:e7:95:
1b:88:a9:5f:8b:2b:f3:0a:b7:ac:19:d5:86:1f:c6:
0b:96:29:4a:2a:7a:01:7a:ff:12:0a:4e:0e:2a:61:
aa:c7:77:c0:b4:3d:66:32:3c:b7:ec:d7:c6:f1:07:
12:11:df:f8:91:5f:d7:e5:af:57:ea:8d:a2:b3:f7:
70:78:4e:7b:04:86:27:40:a0:69:a5:68:c8:e7:da:
5a:13:f1:8f:84:53:74:30:64:fa:2f:de:7c:78:4a:
97:17:8a:10:74:d9:d4:69:29:bd:f7:2b:bc:60:e4:
d6:65:50:38:1b:fc:17:f7:64:10:ab:dc:c9:6d:ed:
18:1d:d4:56:53:14:9f:b5:04:ef:38:41:e0:6b:7d:
53:c3:3f:0a:07:a8:43:75:23:51:e7:c5:6d:42:3f:
16:37:8e:c5:6c:4b:47:a2:ec:44:e5:58:de:38:ca:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:6D:28:1F:B2:13:34:EE:4A:57:2B:D2:C3:65:34:CA:65:27:E5
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.100.0/22
45.159.236.0/22
77.83.40.0/22
91.209.115.0/24
91.209.149.0/24
91.209.151.0/24
91.236.32.0/22
185.146.52.0/22
194.50.253.0/24
194.53.1.0-194.53.2.255
194.53.61.0/24
195.14.26.0/23
195.14.112.0/23
IPv6:
2a07:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:90:50:04:08:2a:3c:c0:15:d1:1a:89:a9:2a:7b:90:3c:d5:
16:0a:01:c4:54:15:a7:09:30:ee:f4:38:f8:91:61:84:f8:e5:
9e:e4:fe:65:35:b8:67:20:f2:19:84:11:1e:be:39:e1:98:e2:
53:da:40:4e:6a:05:0b:9f:99:cb:c9:f4:72:92:e7:d9:f0:88:
b4:fd:52:21:53:aa:ea:16:fd:90:3e:a8:79:6e:b9:ae:eb:51:
dc:6f:75:e7:d8:47:b7:cd:a5:3b:2f:d2:02:eb:66:4b:44:0b:
26:bc:05:6a:ea:97:1b:f4:f5:76:72:7a:1b:7d:56:1c:69:56:
9d:7f:26:10:9b:c8:a5:e5:7f:89:14:9d:83:5c:49:91:0d:05:
4c:c1:65:f4:ce:75:55:d5:31:ea:e8:9d:2b:c7:a9:79:72:81:
15:09:fc:4a:55:9f:44:8e:1e:2a:6f:0f:b2:db:db:4f:dd:27:
9f:7d:db:61:71:2a:3b:f9:c0:3c:f8:0a:26:bb:49:8f:ac:33:
34:14:22:d3:c8:8c:6f:b1:0a:63:c0:44:ce:67:1e:17:46:75:
e0:46:cd:12:d2:00:54:d7:74:ce:33:70:53:97:88:dc:08:1c:
e9:00:38:8d:f3:d9:60:c5:1d:f6:ed:bc:5f:a4:e5:8c:d1:e0:
45:82:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:34:30 2025 by rpki-client