Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BCRXZSxLkTmvELSQT5cg3vm2Sw0.roa
File: BCRXZSxLkTmvELSQT5cg3vm2Sw0.roa (raw, json)
Hash identifier: qegxGGng1v4Ha6ucLTi8ajjrWXh49PCwPkZ09iyzymQ=
Subject key identifier: 04:24:57:65:2C:4B:91:39:AF:10:B4:90:4F:97:20:DE:F9:B6:4B:0D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0198EFE42C04563B6C23A6C494E217606062
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BCRXZSxLkTmvELSQT5cg3vm2Sw0.roa
Signing time: Thu 28 Aug 2025 08:56:04 +0000
ROA not before: Thu 28 Aug 2025 08:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:e4:2c:04:56:3b:6c:23:a6:c4:94:e2:17:60:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 28 08:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=042457652c4b9139af10b4904f9720def9b64b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:8c:0c:39:8e:67:26:ba:c3:71:01:06:3a:
90:8d:5d:a2:bf:70:ab:dd:b5:40:d5:41:2d:f1:2d:
56:99:2a:c4:f4:f0:24:12:3c:ff:c7:fe:bc:44:41:
2d:20:9a:01:36:4c:1d:e0:86:0a:a6:8d:e8:84:1e:
93:f0:d7:46:69:f0:c0:5d:ca:9e:a1:4e:dd:47:2d:
7a:de:fd:c8:a6:eb:6b:66:3a:22:e7:de:bb:cc:51:
b8:b7:44:ff:f1:99:46:b0:f9:9d:c2:82:13:db:d1:
8c:b7:10:df:aa:01:4e:3e:e5:82:5a:d3:d8:c3:36:
a9:5c:26:00:ed:43:ba:c5:45:b6:b4:e8:75:37:a3:
f5:04:a3:5e:70:bb:02:93:56:04:6a:cf:f8:2b:1a:
d7:a3:97:d6:62:c5:e3:ee:20:0e:90:72:5e:f3:8c:
be:2c:5b:6f:54:d9:d1:94:1e:bc:7c:8b:a2:79:0e:
82:81:cf:ea:c7:c0:16:45:0d:bc:49:cd:5c:72:08:
95:f5:e8:d5:74:f7:35:d2:cb:3e:9e:5d:4b:29:f4:
f5:97:95:ef:7b:9f:ad:1f:1b:a3:0b:33:07:27:62:
be:13:f9:fb:bd:e0:f9:60:df:cf:31:24:1a:c2:65:
10:00:5b:3d:ca:3d:bf:69:dd:d9:01:12:e7:bd:a0:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:57:65:2C:4B:91:39:AF:10:B4:90:4F:97:20:DE:F9:B6:4B:0D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BCRXZSxLkTmvELSQT5cg3vm2Sw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/24
185.209.73.0/24
185.210.233.0/24
185.222.30.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
82:66:29:25:9d:a7:ab:8e:bd:74:99:f6:7c:ca:0a:7b:f8:67:
d5:0c:53:b7:1a:82:a5:79:44:5e:58:47:56:63:77:20:90:0c:
90:a2:de:99:f9:52:bc:69:d5:9e:6f:8d:45:92:cf:40:70:25:
aa:55:94:06:f6:a2:26:a6:b4:7f:89:45:3f:d4:ac:ed:9e:19:
10:6e:6f:e6:11:33:22:87:1d:18:c3:3f:53:fd:22:b9:8d:2a:
91:1c:16:a4:91:9d:fd:51:2e:d6:88:a5:9b:1f:24:1e:bb:dd:
10:29:37:85:1d:31:d7:74:18:e1:ae:79:30:e5:7c:93:67:d2:
ef:e9:f6:7d:fa:c3:1c:01:e8:f1:b0:e5:7c:c2:64:85:88:41:
26:ec:60:09:74:3c:52:64:63:f8:4b:92:0a:8a:5b:43:e4:6d:
40:d0:57:e3:80:f5:38:0e:7b:55:05:08:30:16:9c:f9:ab:1a:
49:be:48:38:f0:f8:76:ca:5c:23:8b:31:f0:28:41:54:b7:92:
3c:4d:f1:f3:0d:08:fb:96:52:10:ac:ac:8f:8c:8a:c7:5d:82:
71:3f:c9:5f:0d:0c:e7:d8:91:b9:2f:42:62:60:72:eb:1c:ea:
01:17:85:9e:8b:ab:d0:fb:1b:1e:db:79:c2:5a:5a:ed:05:cc:
10:b4:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 19:52:50 2025 by rpki-client