Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/BTXgC98Arq4VpE8p2rzGlekkKks.roa
File: BTXgC98Arq4VpE8p2rzGlekkKks.roa (raw, json)
Hash identifier: D0boEuEqJCqNZCUXYO9bIurCXG18fnwk28p+ov4i+/I=
Subject key identifier: 05:35:E0:0B:DF:00:AE:AE:15:A4:4F:29:DA:BC:C6:95:E9:24:2A:4B
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 0196FCC4722840FA98C40A4C10F93402F215
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/BTXgC98Arq4VpE8p2rzGlekkKks.roa
Signing time: Fri 23 May 2025 10:50:54 +0000
ROA not before: Fri 23 May 2025 10:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 91.207.60.0/24 maxlen: 24
91.217.91.0/24 maxlen: 24
91.226.212.0/24 maxlen: 24
91.226.213.0/24 maxlen: 24
176.103.48.0/20 maxlen: 20
176.103.48.0/21 maxlen: 21
176.103.56.0/22 maxlen: 22
176.103.60.0/23 maxlen: 23
176.103.62.0/23 maxlen: 23
193.169.86.0/23 maxlen: 23
2001:678:334::/48 maxlen: 48
2a13:f580:1::/48 maxlen: 48
2a13:f580:2::/48 maxlen: 48
2a13:f580:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:c4:72:28:40:fa:98:c4:0a:4c:10:f9:34:02:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: May 23 10:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0535e00bdf00aeae15a44f29dabcc695e9242a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:ac:9f:23:2a:5a:35:a8:bf:52:13:de:07:
ac:99:22:9c:d0:95:c9:36:46:99:a9:f7:ad:24:b6:
88:a5:7a:3f:6d:10:23:f2:13:7c:79:59:20:10:41:
bd:1c:5f:e3:8d:2a:00:75:82:ba:62:a6:82:8d:30:
2c:3a:93:80:bb:33:be:71:94:de:73:72:18:22:f7:
81:83:b3:b6:68:50:8c:8f:a1:6f:65:8a:c5:d2:be:
a4:67:9f:ad:31:87:59:6d:fc:42:34:54:15:31:5f:
fb:95:71:0a:82:06:f5:8e:31:34:6d:23:a3:62:1f:
36:6c:9c:5e:2f:6d:87:3f:9d:33:d5:55:0d:e9:41:
41:6a:5e:5e:27:37:15:33:24:f2:09:60:f9:a7:40:
a8:ad:82:07:6a:46:4b:8f:c5:64:13:98:44:3a:cf:
88:da:53:be:d2:dc:23:26:36:2f:02:75:08:ef:9f:
df:20:73:7e:c2:c5:ac:3c:63:9d:31:40:76:cb:1d:
39:9b:39:10:b4:00:15:4d:39:6a:67:04:dd:df:b5:
c6:b8:59:21:a4:18:b5:4d:a9:8f:b9:65:0b:14:98:
a6:d6:b0:66:14:a7:3b:14:71:d6:6f:28:c6:cd:56:
6d:49:29:01:6f:f7:91:85:8b:5b:02:f9:be:86:ff:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:E0:0B:DF:00:AE:AE:15:A4:4F:29:DA:BC:C6:95:E9:24:2A:4B
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/BTXgC98Arq4VpE8p2rzGlekkKks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/24
91.217.91.0/24
91.226.212.0/23
176.103.48.0/20
193.169.86.0/23
IPv6:
2001:678:334::/48
2a13:f580:1::-2a13:f580:2:ffff:ffff:ffff:ffff:ffff
2a13:f580:4::/48
Signature Algorithm: sha256WithRSAEncryption
1a:a5:d6:f1:5c:e8:55:39:dd:ba:88:72:27:ea:6d:5d:9d:f4:
28:35:37:39:f7:ae:36:8a:18:99:97:94:69:11:5d:67:66:7a:
01:63:0b:f6:e6:ec:7e:a2:7a:9d:69:ea:63:9c:ea:67:a4:0d:
d0:a4:ad:12:73:5e:39:cf:d2:7a:61:d2:22:67:79:1a:3c:76:
25:9c:62:0c:3e:f6:74:97:81:d4:7b:8d:d9:31:f9:e6:a0:00:
0e:1f:85:cf:cf:a0:48:6b:13:d9:01:f1:be:e6:7a:a2:a3:ad:
ce:df:e4:9a:76:ac:45:c1:e0:c4:cf:9b:fd:75:d1:03:15:24:
f2:c6:bf:ff:38:f5:e0:1c:f2:fe:71:2e:f2:bc:b0:93:9a:38:
e8:8a:a4:a3:d7:27:13:7f:3f:e6:ac:75:ba:e9:02:2c:3d:86:
e7:69:d9:ec:c0:69:fe:12:73:c4:54:77:b8:db:17:b7:fc:81:
cc:dc:fb:96:34:58:2c:24:09:2f:c8:5a:3f:83:35:23:fd:ea:
62:cc:70:40:a3:e1:bd:cb:b4:c6:52:a2:4c:12:75:d6:bf:5f:
ed:26:99:7a:78:a0:b4:fa:03:aa:10:19:ed:09:02:74:1e:e0:
d3:9c:ff:78:b9:63:bd:3b:c8:53:30:92:f1:13:5c:e4:a9:61:
19:e3:f2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:31:14 2025 by rpki-client