Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BjnW_XsBOAd-jb3poRQo4qZjQv4.roa
File: BjnW_XsBOAd-jb3poRQo4qZjQv4.roa (raw, json)
Hash identifier: 81szDCRKOfPgl/xOIapFG+b6NxBsddEWVczjr77MxNo=
Subject key identifier: 06:39:D6:FD:7B:01:38:07:7E:8D:BD:E9:A1:14:28:E2:A6:63:42:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A0582B50A62BDB160A0068A7F1395387B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BjnW_XsBOAd-jb3poRQo4qZjQv4.roa
Signing time: Tue 21 Oct 2025 06:44:03 +0000
ROA not before: Tue 21 Oct 2025 06:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199524
IP address blocks: 37.202.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:82:b5:0a:62:bd:b1:60:a0:06:8a:7f:13:95:38:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 21 06:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0639d6fd7b0138077e8dbde9a11428e2a66342fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:ba:d0:47:57:e6:7b:08:15:7b:8e:98:04:
e2:e7:5c:22:4f:db:cd:93:da:8c:fb:67:f6:0f:59:
33:a6:fd:33:89:58:88:f9:ff:d1:ea:26:d9:28:f4:
e8:d7:57:59:40:0f:c4:a3:8f:ca:d1:0d:cf:80:06:
49:31:bf:1e:92:28:65:67:a3:ff:de:ba:1e:86:a7:
d3:a9:e9:71:0e:89:8e:b8:e8:b1:b3:28:f1:8e:38:
01:e2:27:89:36:a8:ef:d9:a7:d8:13:3b:14:33:15:
25:4e:42:2e:84:72:c7:bc:49:f2:aa:e8:d5:dd:44:
c3:e5:c1:1f:18:2e:f1:6e:e3:0a:f2:d8:cc:e5:be:
8d:c2:32:e6:73:07:f9:3d:f7:53:d6:29:29:b4:bb:
b6:c1:59:e9:37:1d:b2:68:64:0b:ab:db:ea:81:24:
f4:37:2b:b5:69:a5:7a:57:a7:2e:39:2b:33:e8:01:
38:3c:93:32:6a:1e:3d:5d:16:2b:be:71:36:8e:6f:
65:9c:13:70:79:c0:2a:4f:46:b9:c9:c4:34:d2:a0:
fd:11:98:6c:88:47:9c:b4:9f:42:eb:1b:2c:fd:51:
e1:79:d7:c3:9b:c2:a0:06:7a:c3:1b:86:61:87:cd:
ed:d4:f4:a5:70:60:db:f9:4e:dc:c8:f8:87:94:20:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:39:D6:FD:7B:01:38:07:7E:8D:BD:E9:A1:14:28:E2:A6:63:42:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BjnW_XsBOAd-jb3poRQo4qZjQv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.196.0/24
Signature Algorithm: sha256WithRSAEncryption
30:86:e2:51:07:e9:2b:f1:47:1a:48:97:9a:d7:5b:3d:46:cf:
d1:10:d7:1f:76:be:ea:42:cf:84:a7:c0:bd:ec:20:40:da:de:
bb:4f:1b:2f:99:b5:23:39:fc:9a:d1:33:13:9f:5c:da:c6:c2:
7d:ed:9a:57:61:a7:a0:34:e5:5d:5b:ac:91:6a:a6:23:88:14:
01:3c:89:6f:76:0a:fd:db:49:69:ce:bb:5c:52:af:6c:d8:1a:
12:9d:06:af:45:c5:24:dc:0d:eb:93:c2:04:66:39:67:b6:e6:
54:8d:28:66:5b:d9:5f:13:c6:c7:fc:61:fe:8e:f0:fb:4e:95:
03:69:44:d3:49:2d:cb:9b:0f:90:34:b9:16:31:b0:04:3e:40:
eb:43:a9:fa:be:e9:83:18:dc:57:c8:45:f7:6b:8a:a7:7c:9e:
01:9b:a2:1f:f5:8b:3d:8b:4f:d5:1a:e3:1a:77:42:c2:f0:9a:
de:cf:93:ed:e8:f2:50:8d:ad:9a:29:42:d4:d5:3f:55:e2:48:
36:48:d2:59:a7:f5:14:a6:55:de:37:c6:bf:0c:44:a6:23:ef:
a4:02:5e:0a:34:6a:2c:31:ec:58:46:db:25:3b:b0:2b:64:2d:
3b:fd:f8:bf:3a:6f:70:85:48:dc:73:80:90:93:23:d8:33:f8:
08:16:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:16:23 2025 by rpki-client