Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/BvPQLDIcycqRhZ09TdNPihJH664.roa
File: BvPQLDIcycqRhZ09TdNPihJH664.roa (raw, json)
Hash identifier: yJUDVk+ZOQSc+kVZmceFDKkwlvc3+38IywU/ry0jyBg=
Subject key identifier: 06:F3:D0:2C:32:1C:C9:CA:91:85:9D:3D:4D:D3:4F:8A:12:47:EB:AE
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019908E5A9D00375A8C57478933F54AA8C0A
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/BvPQLDIcycqRhZ09TdNPihJH664.roa
Signing time: Tue 02 Sep 2025 05:28:12 +0000
ROA not before: Tue 02 Sep 2025 05:28:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136714
IP address blocks: 178.248.112.0/22 maxlen: 24
178.248.112.0/23 maxlen: 23
178.248.114.0/23 maxlen: 23
178.248.116.0/23 maxlen: 23
178.248.116.0/24 maxlen: 24
178.248.117.0/24 maxlen: 24
178.248.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:08:e5:a9:d0:03:75:a8:c5:74:78:93:3f:54:aa:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Sep 2 05:28:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f3d02c321cc9ca91859d3d4dd34f8a1247ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:9e:7a:74:1e:72:9e:c8:2b:25:85:46:d1:
7f:43:17:04:1f:45:e6:d1:fa:35:5e:a0:d7:6d:b9:
fe:22:16:14:ff:cf:6b:15:a5:3d:70:7e:b1:72:26:
57:dc:40:53:07:ec:1b:a2:8f:7c:fc:45:e9:81:5f:
0d:23:dd:8e:25:61:85:54:22:f1:f0:20:ab:02:31:
4e:18:fd:d2:fc:2b:f4:57:f9:ec:cb:bc:0d:19:92:
0b:f5:fd:d1:01:aa:b4:66:bb:e9:81:50:0d:68:b9:
f5:4e:19:fa:7b:79:36:bf:3a:84:2c:c9:74:9a:03:
78:70:0e:4f:04:e8:36:ac:b0:a2:1e:f0:75:a2:ff:
55:36:37:2d:c6:29:2d:78:e5:a6:4e:6a:61:26:a1:
e7:46:b4:0c:40:0e:9a:9e:95:0f:a8:a7:af:16:93:
d6:18:10:f6:ed:94:0a:2b:fb:d7:46:f8:26:fd:46:
a2:80:83:2b:dc:9e:44:98:a0:10:1f:59:bf:0d:77:
07:f9:a2:00:3b:1b:18:0e:26:3e:31:72:38:17:9a:
8e:90:22:db:da:88:2d:7b:f1:d5:71:db:00:35:0c:
bb:94:38:c5:58:24:f1:fb:8b:56:94:ec:b9:83:b6:
0c:60:cf:5d:e2:ca:d0:65:32:49:58:4f:fd:c9:f9:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F3:D0:2C:32:1C:C9:CA:91:85:9D:3D:4D:D3:4F:8A:12:47:EB:AE
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/BvPQLDIcycqRhZ09TdNPihJH664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.112.0/21
Signature Algorithm: sha256WithRSAEncryption
35:83:3e:fd:71:d4:60:32:76:d6:0c:a9:fa:cc:35:65:d3:4c:
99:40:25:7d:4c:fd:e0:30:99:a9:a2:0c:d9:fe:30:9a:84:9a:
85:ab:aa:96:7b:5a:11:df:a2:ad:ec:be:2a:b1:e6:d7:4a:f4:
cc:71:27:bd:b6:31:4c:61:43:d9:98:57:82:07:57:12:e3:b5:
49:6c:7f:cf:f9:a3:3b:21:a8:8c:0f:23:ee:70:ca:72:4e:bd:
ff:9e:5a:bb:a4:d7:75:52:bc:21:95:0b:82:54:aa:54:e0:54:
5a:95:36:fd:43:1a:55:7b:56:96:89:e3:bc:30:b9:48:a3:e1:
2b:6c:86:8c:db:5c:a6:2e:ac:0a:ac:6b:4d:1a:ad:b8:8d:ef:
4a:5b:ba:6a:49:32:ed:7d:df:7d:ba:f3:26:19:f2:b2:e7:cd:
75:b2:71:ad:6b:cb:b4:a2:83:d3:e1:d1:12:1f:60:4d:b6:c1:
0e:53:62:0f:40:69:6a:89:7f:bf:8b:a4:80:95:3f:e6:3e:14:
7d:08:68:c6:22:65:4b:cf:6e:df:c6:c9:21:30:d5:6a:48:68:
4a:4c:35:5b:91:e0:8e:c2:a0:9d:c3:8d:72:3c:68:cb:75:a1:
89:14:9e:14:cf:8d:f4:b2:27:99:11:a3:fb:57:75:a4:60:e5:
c5:5d:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 02:55:43 2025 by rpki-client