Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/BmWtbYk-QwrIS8RqrmIfPe74iRA.roa
File: BmWtbYk-QwrIS8RqrmIfPe74iRA.roa (raw, json)
Hash identifier: Cj2HFUY8Ug4oWOWFrAwYJVdR5F0ibf3UXr+hqqMbwOU=
Subject key identifier: 06:65:AD:6D:89:3E:43:0A:C8:4B:C4:6A:AE:62:1F:3D:EE:F8:89:10
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019951C3920094D94EBC2167E52AE5125ED5
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/BmWtbYk-QwrIS8RqrmIfPe74iRA.roa
Signing time: Tue 16 Sep 2025 09:03:15 +0000
ROA not before: Tue 16 Sep 2025 09:03:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 185.133.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:c3:92:00:94:d9:4e:bc:21:67:e5:2a:e5:12:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Sep 16 09:03:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0665ad6d893e430ac84bc46aae621f3deef88910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:ad:e1:ac:df:b9:b8:52:e6:c0:3c:b4:6b:
df:d0:1b:ca:52:cd:bf:37:85:65:45:e4:05:71:59:
6a:06:6f:e7:9d:d5:54:92:9c:ec:9b:fd:59:29:59:
b1:68:26:7c:ed:eb:8d:38:2b:20:fb:ad:38:a5:89:
7e:99:74:ec:20:33:74:a9:66:91:53:fd:78:4f:50:
ac:b9:5c:67:27:15:85:5d:fa:99:6d:67:c9:ca:7b:
b3:df:64:b9:c4:b1:f9:01:1d:c0:b5:2b:2a:a2:a9:
e4:64:5f:09:59:5c:d5:dc:d0:c3:23:e4:06:b0:42:
cf:7f:93:04:ad:d6:39:94:74:a4:ce:29:67:77:25:
ff:94:a1:73:10:f4:38:61:22:cf:75:34:e4:51:a3:
21:a2:ed:fd:82:b4:cb:e2:32:78:2f:90:04:c8:78:
67:dd:06:11:a3:09:a0:c5:6e:1b:b3:fe:28:09:cc:
9a:f2:e2:6b:06:3b:02:a7:e4:92:ec:c8:30:e3:02:
14:9d:07:28:0a:65:d4:ed:e1:71:b3:3d:ab:9a:45:
1d:3c:e4:e0:34:3a:bc:77:5e:38:09:08:39:63:50:
24:2f:a0:87:e3:9c:81:b6:88:b3:2a:1a:ea:34:b0:
d5:ae:ec:e4:f5:65:76:92:20:38:44:f8:c9:4b:14:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:AD:6D:89:3E:43:0A:C8:4B:C4:6A:AE:62:1F:3D:EE:F8:89:10
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/BmWtbYk-QwrIS8RqrmIfPe74iRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.172.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d8:3b:8e:29:bf:7b:3f:a2:38:9c:ca:a9:13:32:ea:eb:ef:
90:d2:73:88:78:7c:47:c4:39:58:e5:ec:6b:1f:b1:d4:67:b4:
51:d6:a3:9f:e4:d2:5d:2c:04:07:b6:a2:5c:a3:26:2f:1a:41:
78:3a:73:ce:02:9d:74:c1:d5:89:85:51:f6:d7:9e:8c:3c:51:
60:de:39:a5:62:7a:4b:66:c4:e8:2a:d5:84:49:fb:9a:2f:e4:
b3:2a:7b:05:3c:65:a6:a6:98:be:f4:e7:dc:2c:90:b7:4f:4e:
0d:54:20:83:29:b1:23:e9:05:d0:39:aa:99:9c:85:51:fd:08:
45:70:f2:25:d0:e0:7f:a1:82:c1:b8:67:c2:42:17:4a:99:53:
04:50:5a:f4:70:ee:a3:07:31:ba:f8:7b:6c:27:92:a9:45:23:
3b:a1:e7:2e:7b:21:4f:26:36:f7:b0:1b:88:77:71:ae:8e:05:
96:e6:8f:66:1a:23:95:87:2c:4c:1b:f6:95:22:c3:01:74:31:
47:5b:d6:05:a4:6a:4b:a0:dd:4e:29:df:1d:2f:ae:c1:7e:96:
53:75:2b:f7:44:1e:35:d6:a0:56:be:7e:c3:30:67:5c:6c:72:
4a:d0:00:80:a8:ee:5e:4e:8b:77:73:fb:ec:7f:bd:e9:2b:50:
2c:52:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:41 2025 by rpki-client