Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BNk7M8BtQvPJ2kIt93_8fl9kAB8.roa
File: BNk7M8BtQvPJ2kIt93_8fl9kAB8.roa (raw, json)
Hash identifier: pmafH9t3mScp1EZEG5EzDs4oFmFkEzQSAZ1MvZ95+eI=
Subject key identifier: 04:D9:3B:33:C0:6D:42:F3:C9:DA:42:2D:F7:7F:FC:7E:5F:64:00:1F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01970DE8925E59A12CB53B1F85B84F2EB092
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BNk7M8BtQvPJ2kIt93_8fl9kAB8.roa
Signing time: Mon 26 May 2025 18:43:54 +0000
ROA not before: Mon 26 May 2025 18:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 45.151.142.0/24 maxlen: 24
103.63.28.0/24 maxlen: 24
103.63.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:e8:92:5e:59:a1:2c:b5:3b:1f:85:b8:4f:2e:b0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 26 18:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04d93b33c06d42f3c9da422df77ffc7e5f64001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:c4:e8:a6:8b:35:9a:28:fd:37:f9:27:49:
59:59:cf:4b:bc:a3:77:33:8b:9b:12:1c:55:fe:da:
c5:99:42:eb:58:68:84:30:df:ff:d4:ce:5a:b8:44:
e7:82:79:62:bb:61:e1:59:93:b2:22:f4:0c:a5:c9:
ff:b9:bc:c5:ef:1e:09:bf:d3:2d:50:34:3a:c2:d3:
48:71:0b:5d:8e:42:92:3e:d7:b9:a6:1d:9e:a9:64:
98:70:33:d7:3f:fb:43:4f:9f:92:43:65:c3:1f:03:
c8:79:f6:2a:d3:01:2c:c1:8f:8a:0a:75:93:2a:55:
ea:af:2b:8b:1f:77:d1:9f:1a:54:00:1f:50:08:65:
91:e8:b4:de:bc:b9:16:48:87:9c:1d:de:61:71:aa:
c5:9c:33:dc:6b:76:4c:3a:e7:39:32:34:48:5e:e1:
3f:7c:aa:2c:c2:cb:4b:8e:3e:fd:15:32:b3:ed:aa:
2a:f7:8a:ef:be:7b:e2:b9:94:c9:c8:75:c6:27:f4:
83:ab:bb:8b:66:38:88:0d:56:6e:26:01:e7:df:6b:
d5:74:0a:4c:7b:67:42:f9:98:aa:fb:e0:de:73:f5:
70:56:34:29:72:64:c5:70:db:76:ce:a4:2b:1d:f1:
03:53:f8:99:4e:b0:f9:1a:1b:df:6c:88:6b:ad:17:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:3B:33:C0:6D:42:F3:C9:DA:42:2D:F7:7F:FC:7E:5F:64:00:1F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BNk7M8BtQvPJ2kIt93_8fl9kAB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
103.63.28.0/24
103.63.30.0/24
Signature Algorithm: sha256WithRSAEncryption
af:9a:31:62:f7:2e:3a:b2:0b:be:dc:c0:f3:48:e5:b6:4e:11:
61:9d:97:65:7f:6e:a4:ed:43:5c:3b:c6:d5:e5:4b:9a:10:26:
9a:9c:a8:d2:38:ea:47:1b:66:24:16:83:6c:f7:f5:e1:36:0d:
bd:4a:b3:4b:f5:e4:a0:80:49:af:68:8e:f2:3f:67:cd:e2:a9:
2e:b2:22:6b:46:04:49:0b:7a:fc:b2:f4:5a:55:5a:35:69:3a:
83:6f:df:a1:16:32:df:2c:6a:fd:84:74:46:2f:67:09:83:f7:
8e:48:5e:a1:93:34:c2:61:90:f1:53:73:0c:96:ff:a8:cc:13:
c8:79:26:ff:64:77:b1:d0:26:cb:f4:94:64:10:42:74:9b:f0:
e1:7f:6b:04:61:e6:46:f3:05:ad:e5:1a:61:82:52:51:7c:95:
56:62:3c:5f:92:be:c3:50:bd:14:c6:ca:c5:37:ef:43:7d:44:
4b:a8:57:61:7f:5f:af:d8:da:03:08:f5:b7:79:00:b4:b8:9f:
c2:61:ce:5e:ba:c6:2c:ae:66:3e:df:20:33:a6:fa:f8:89:c4:
54:b0:c6:ff:18:c8:aa:d8:bd:93:11:6b:17:1a:bf:33:59:5a:
2e:a4:16:eb:b1:d4:f6:8e:bc:d8:89:13:d0:b1:0d:0a:04:32:
d5:af:ed:3b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZcN6JJeWaEstTsfhbhPLrCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNTI2MTg0MzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGQ5M2IzM2MwNmQ0MmYzYzlkYTQyMmRmNzdmZmM3ZTVmNjQwMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyLE6KaLNZoo/Tf5J0lZWc9LvKN3
M4ubEhxV/trFmULrWGiEMN//1M5auETngnliu2HhWZOyIvQMpcn/ubzF7x4Jv9Mt
UDQ6wtNIcQtdjkKSPte5ph2eqWSYcDPXP/tDT5+SQ2XDHwPIefYq0wEswY+KCnWT
KlXqryuLH3fRnxpUAB9QCGWR6LTevLkWSIecHd5hcarFnDPca3ZMOuc5MjRIXuE/
fKoswstLjj79FTKz7aoq94rvvnviuZTJyHXGJ/SDq7uLZjiIDVZuJgHn32vVdApM
e2dC+Ziq++Dec/VwVjQpcmTFcNt2zqQrHfEDU/iZTrD5GhvfbIhrrRf9DQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFATZOzPAbULzydpCLfd//H5fZAAfMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQk5rN004QnRRdlBKMmtJdDkzXzhmbDlrQUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZeOAwQA
Zz8cAwQAZz8eMA0GCSqGSIb3DQEBCwUAA4IBAQCvmjFi9y46sgu+3MDzSOW2ThFh
nZdlf26k7UNcO8bV5UuaECaanKjSOOpHG2YkFoNs9/XhNg29SrNL9eSggEmvaI7y
P2fN4qkusiJrRgRJC3r8svRaVVo1aTqDb9+hFjLfLGr9hHRGL2cJg/eOSF6hkzTC
YZDxU3MMlv+ozBPIeSb/ZHex0CbL9JRkEEJ0m/Dhf2sEYeZG8wWt5RphglJRfJVW
Yjxfkr7DUL0UxsrFN+9DfURLqFdhf1+v2NoDCPW3eQC0uJ/CYc5eusYsrmY+3yAz
pvr4icRUsMb/GMiq2L2TEWsXGr8zWVoupBbrsdT2jrzYiRPQsQ0KBDLVr+07
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:09:54 2025 by rpki-client