Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/BcMMM0U66F_S0r1n65JxA8MExF0.roa
File: BcMMM0U66F_S0r1n65JxA8MExF0.roa (raw, json)
Hash identifier: H3WQFI+Saoc8E2B5BEOhesPi++dCrMFkBj7AIbeBUHI=
Subject key identifier: 05:C3:0C:33:45:3A:E8:5F:D2:D2:BD:67:EB:92:71:03:C3:04:C4:5D
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 019F2368E0458201A5BF3958AE802C2C5E7E
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/BcMMM0U66F_S0r1n65JxA8MExF0.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20679
IP address blocks: 185.75.31.0/24 maxlen: 24
2001:678:418::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:45:82:01:a5:bf:39:58:ae:80:2c:2c:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05c30c33453ae85fd2d2bd67eb927103c304c45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:a9:b1:f8:f9:a2:06:08:5d:bd:20:31:60:
1b:ea:b1:a1:65:ac:57:c8:ca:61:09:93:93:6f:6d:
be:c3:80:a8:61:eb:94:d8:93:bd:88:af:be:b3:e0:
6f:3b:3d:52:e5:cc:1a:56:96:cc:30:c9:50:1f:e4:
98:f0:97:11:34:d3:fe:bd:a3:90:9c:ad:54:55:95:
00:dd:7e:a7:ca:7c:93:63:a3:1f:e0:bb:20:fc:0f:
42:78:ed:59:b2:fd:da:7d:23:b6:8e:ae:b8:9a:9c:
ac:a8:8a:95:cf:b0:c7:21:de:2a:6a:6d:83:bc:36:
bc:2a:64:5f:c0:d5:1e:42:15:8b:2f:d5:da:4e:02:
b3:f7:40:5e:61:b7:07:d2:b8:c6:9b:e1:15:dd:37:
c8:79:81:81:4c:a4:09:d2:29:27:11:d8:80:09:78:
3b:c5:0f:59:cc:84:7e:ac:a9:31:64:5c:a9:e7:64:
89:b1:58:85:39:2a:b9:3f:f3:1b:43:95:01:39:91:
eb:13:61:df:ac:3e:36:f5:cd:c7:64:6d:a2:96:4d:
19:6d:d1:5e:f7:fc:71:05:ac:08:f0:b3:b7:44:60:
72:a2:20:9e:5a:0a:d8:90:fc:82:91:c7:43:27:98:
ec:c6:ad:fd:64:9a:d6:9a:2f:0f:c8:cd:3c:76:fd:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:0C:33:45:3A:E8:5F:D2:D2:BD:67:EB:92:71:03:C3:04:C4:5D
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/BcMMM0U66F_S0r1n65JxA8MExF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.31.0/24
IPv6:
2001:678:418::/48
Signature Algorithm: sha256WithRSAEncryption
b0:16:df:4e:12:93:f5:31:5c:e4:27:ac:fe:65:08:d7:5b:4c:
8f:ba:dc:c3:ac:aa:7f:e6:b0:5b:0b:25:7f:31:2e:a1:81:de:
ba:88:f1:dc:e7:5c:6d:b3:04:25:5e:3d:dc:47:be:e1:88:8d:
99:f9:28:d1:4a:27:09:7c:62:95:dc:93:e2:33:51:32:a9:ca:
f1:70:10:19:d9:3c:54:af:bc:b3:f8:4b:00:59:20:7f:8e:96:
b4:60:40:d0:ba:45:36:86:76:12:07:93:58:df:fd:6a:18:61:
4e:3d:a6:68:ff:9f:5c:0a:c5:06:01:e0:bd:e5:56:a7:89:94:
9d:1a:74:90:4e:b1:94:1f:a8:28:9b:bd:24:ad:72:1e:96:a8:
48:5c:e9:4a:12:97:0b:dd:fe:d7:65:05:1a:52:c5:e7:27:39:
cf:aa:88:c0:9d:2c:d2:72:78:06:5f:55:1e:95:0e:f0:2b:51:
3f:c7:0c:71:93:d5:38:fe:db:31:12:e2:9f:7f:66:69:37:0a:
23:8a:a9:f0:b2:ca:b8:47:c4:71:59:e3:47:58:8d:b7:28:24:
1d:eb:66:c4:50:21:58:ba:1c:6e:64:41:40:d4:81:6a:a1:9d:
76:74:84:79:26:a1:72:df:e8:6d:99:2f:62:56:fb:c9:da:cb:
a8:37:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 07:35:03 2026 by rpki-client