Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BVLkcAc2YZwJ0ce1T3ACXTtwas8.roa
File: BVLkcAc2YZwJ0ce1T3ACXTtwas8.roa (raw, json)
Hash identifier: /WX1fNWH+ibGUTImY9paFZz4H0ydQmZ05da+gVS4OrE=
Subject key identifier: 05:52:E4:70:07:36:61:9C:09:D1:C7:B5:4F:70:02:5D:3B:70:6A:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01994168E96C08B2593DC75FBC373630F2DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BVLkcAc2YZwJ0ce1T3ACXTtwas8.roa
Signing time: Sat 13 Sep 2025 04:50:18 +0000
ROA not before: Sat 13 Sep 2025 04:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21928
IP address blocks: 151.242.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:68:e9:6c:08:b2:59:3d:c7:5f:bc:37:36:30:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 13 04:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0552e4700736619c09d1c7b54f70025d3b706acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:4e:96:1e:ee:85:2b:d3:97:82:eb:e8:44:
97:16:09:8d:9c:43:5d:53:b4:f4:07:5a:b1:d0:e5:
03:5c:63:21:9a:8f:d5:c5:0a:cf:fe:6d:32:35:b9:
27:de:ef:37:32:4e:7f:4e:24:f3:94:32:78:99:a9:
51:4e:4d:cb:64:1e:9e:74:be:cb:7d:86:36:98:ca:
ef:06:de:1b:8b:2e:a2:d6:a0:00:12:ae:4b:2a:b0:
0a:b9:ab:f9:14:e1:8d:cd:48:77:e6:5e:d9:38:7e:
86:ef:53:26:f4:4b:3c:f7:41:9d:c6:0f:6f:ba:0e:
2e:d3:da:61:11:50:08:ac:a7:16:d8:ca:04:c3:8d:
a5:ba:70:d6:b4:1b:38:eb:60:08:6b:42:8c:33:fc:
60:89:c7:57:e1:f9:3e:12:fb:88:32:0e:52:3b:55:
94:05:03:b0:94:fb:3f:56:38:e1:b4:7d:3a:73:59:
dd:4f:4b:69:47:69:f3:c4:2d:64:75:01:9d:37:30:
21:15:0c:68:a9:42:20:55:80:ab:9e:26:4a:58:0c:
e1:8b:7a:6f:49:73:7f:86:b0:1c:f6:fa:b5:e0:e7:
69:74:9d:d3:33:c0:95:a9:47:92:dc:8b:cb:22:28:
88:d0:e8:46:3c:d0:49:70:69:f6:04:ba:27:5c:c3:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:E4:70:07:36:61:9C:09:D1:C7:B5:4F:70:02:5D:3B:70:6A:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BVLkcAc2YZwJ0ce1T3ACXTtwas8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7a:c8:7a:81:a7:43:de:70:f9:5f:5f:17:16:a9:52:ee:9e:
8a:b8:06:03:e8:26:35:06:c9:9d:2c:47:93:43:f7:61:31:54:
67:4c:eb:22:3b:c6:35:ab:1f:c0:61:11:23:56:18:53:44:64:
c7:cd:f7:3f:50:9d:f5:73:d3:7f:e8:c2:4a:0a:7c:95:04:77:
03:68:4d:4e:71:75:2c:25:82:7e:e4:bf:43:13:22:db:ed:cf:
39:b2:88:9c:57:2f:a1:a3:59:3f:b5:f2:86:0f:e5:ed:af:74:
af:c9:7e:e3:81:67:e7:d5:3b:9b:2e:7d:79:a9:2d:6b:5d:89:
58:8a:2d:a1:10:95:c0:ff:f0:2f:e9:83:35:c7:88:9b:4d:42:
cd:b3:43:05:06:82:ad:17:69:53:f7:67:17:7d:a4:fd:2e:bd:
61:b8:21:7e:9f:3a:33:f5:3c:8d:fa:eb:97:31:a4:b2:1a:05:
11:a2:b7:95:0b:67:a7:52:f3:05:58:f1:37:4d:f1:a3:04:82:
c7:7b:38:bb:f0:c5:06:f1:dd:59:3e:bb:3a:1d:9c:4e:2c:03:
db:30:f0:07:57:87:bb:49:d0:87:c8:a2:40:86:01:8c:2d:40:
15:7c:7e:1c:e2:30:c3:6d:95:b1:13:38:2f:8f:13:1d:85:5a:
f8:56:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:23:45 2025 by rpki-client