Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa
File: WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa (raw, json)
Hash identifier: Nv/Imvyk9dKOiF0TKduhR4D3FxweHs4gpbY5BnEHT2A=
Subject key identifier: 5A:10:B9:CB:A1:E9:63:0E:A6:FC:C1:A2:43:A5:DF:22:C2:DD:BF:67
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0199A91B4DD531B7F612D78C17BEBAFE6B5B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa
Signing time: Fri 03 Oct 2025 08:06:02 +0000
ROA not before: Fri 03 Oct 2025 08:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 185.118.78.0/24 maxlen: 24
193.68.91.0/24 maxlen: 24
193.68.95.0/24 maxlen: 24
213.21.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:1b:4d:d5:31:b7:f6:12:d7:8c:17:be:ba:fe:6b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 3 08:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a10b9cba1e9630ea6fcc1a243a5df22c2ddbf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:b5:3a:71:61:43:ca:4c:2b:de:dd:69:86:
9a:56:75:a2:56:85:18:4f:5a:be:06:3f:fa:19:33:
4f:db:57:bf:69:d8:88:62:52:3a:b0:fe:3e:ce:28:
4e:86:05:09:72:0a:b5:94:6b:08:33:51:f7:9d:76:
90:c0:78:bf:1e:db:55:ca:3d:29:be:d2:60:f1:31:
43:a8:7c:f5:4d:29:60:7a:63:2d:bb:ef:59:67:c4:
dc:ed:8c:f8:ce:7d:08:fe:ab:f4:86:bf:a8:78:e1:
66:a0:c7:23:88:ed:7e:d7:9c:ee:1d:9e:d7:7b:4f:
4b:4e:ba:97:1c:0c:af:23:da:0b:9d:51:49:ec:2e:
a5:40:c5:45:b4:46:f0:38:87:44:91:f1:5f:c6:6a:
47:fd:dd:e5:46:22:09:70:83:a5:5b:18:70:84:6f:
b0:9e:0d:36:62:29:d8:97:b9:5f:27:d4:c1:5b:b9:
be:dd:84:68:ec:88:cb:94:4f:57:95:5f:a7:95:13:
4e:46:f6:82:55:aa:bd:85:eb:d5:99:95:48:0f:90:
4d:a8:7e:50:48:7f:db:fe:7b:57:62:ba:21:cc:cc:
1a:54:31:a4:10:6a:f4:36:46:66:eb:92:cc:7f:8e:
27:da:2c:98:32:2f:34:89:d1:4b:b7:c1:92:89:f7:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:10:B9:CB:A1:E9:63:0E:A6:FC:C1:A2:43:A5:DF:22:C2:DD:BF:67
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.78.0/24
193.68.91.0/24
193.68.95.0/24
213.21.247.0/24
Signature Algorithm: sha256WithRSAEncryption
07:01:94:b1:e3:51:1f:d2:ee:aa:6b:34:0e:b7:7b:a3:cd:13:
0e:89:96:f3:8e:db:f1:3f:a4:66:a4:cf:ab:5a:bd:1b:6f:3e:
39:0f:9c:d8:9b:f9:73:9c:66:42:c2:e0:d2:70:94:2d:80:ce:
4d:c7:8e:f7:4a:5c:44:f9:a6:85:21:de:a1:31:18:66:d0:77:
80:fb:8b:d4:41:66:1d:69:df:73:6a:8b:69:10:34:6e:6a:a3:
d3:47:ea:7e:e3:50:44:54:ae:0d:8d:13:86:7a:d5:25:0b:8d:
4c:2d:c0:71:19:40:91:c2:bc:96:1a:47:2f:d8:3b:42:32:0f:
39:67:93:c9:a5:f7:1d:08:04:a8:34:cc:03:41:25:5c:60:a9:
78:57:54:f9:66:8a:0e:21:7b:75:9c:a4:65:97:a8:47:d7:04:
6d:a1:29:5a:a8:68:eb:c7:bb:ce:2c:71:36:fc:d1:6a:8f:25:
1f:6e:5f:a3:52:19:8a:16:48:0b:08:46:de:0e:2d:76:07:16:
6f:c5:a0:b9:3e:e8:f2:e6:8c:2b:66:33:6b:54:6c:9d:47:e4:
3f:5a:24:6c:fb:33:d8:3f:00:dc:fb:c8:85:e1:dc:ba:1e:4d:
97:b0:a4:55:e5:87:d4:41:93:b2:08:66:b9:ef:b7:0a:f9:f3:
b6:b8:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 05:45:43 2025 by rpki-client