Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BnuRCNG1wcVZgzYhH3AO0QDn6nc.roa
File: BnuRCNG1wcVZgzYhH3AO0QDn6nc.roa (raw, json)
Hash identifier: MelnLA0AceokIL7fTEiXdw1iO6Uw+ZhvD5k8pRZYCyE=
Subject key identifier: 06:7B:91:08:D1:B5:C1:C5:59:83:36:21:1F:70:0E:D1:00:E7:EA:77
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F43D551A17456495799A1A97BA52E86B
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BnuRCNG1wcVZgzYhH3AO0QDn6nc.roa
Signing time: Thu 10 Jul 2025 12:09:09 +0000
ROA not before: Thu 10 Jul 2025 12:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.128.0/21 maxlen: 21
95.164.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:3d:55:1a:17:45:64:95:79:9a:1a:97:ba:52:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=067b9108d1b5c1c5598336211f700ed100e7ea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:b6:10:5b:c3:6a:97:0a:62:b7:cb:9e:07:
8a:df:b4:00:8c:6f:d6:d3:f5:8a:fe:a8:fb:09:0c:
d2:67:07:e9:75:90:c2:2c:ee:02:53:d0:0b:9f:6b:
aa:61:e8:38:e0:15:73:0e:9f:22:9b:54:ae:56:ee:
e9:6b:ba:b7:a4:e0:b8:81:fa:33:dc:2e:91:38:1a:
b6:4e:e2:f8:fb:92:3c:20:4f:b8:4b:c5:3d:3d:ea:
ca:8c:91:8d:18:96:59:6e:7d:f9:8f:12:e0:93:3e:
f4:22:a8:77:a5:3e:82:7a:6d:96:90:b8:fc:1b:35:
b9:dd:cd:95:a0:2f:64:25:d8:67:df:f2:bc:71:a2:
27:18:0c:b9:17:98:83:05:f8:3c:bd:cc:6b:21:e3:
9a:a8:60:a2:5a:46:43:ac:89:8d:26:ee:7b:64:7f:
b8:80:a0:78:9c:e1:a2:17:c1:99:30:ac:5f:46:ec:
d7:2a:d2:9e:be:36:1f:c4:e8:1e:ed:f9:d3:44:95:
ab:85:96:68:06:70:2a:9b:b0:ee:b3:93:7b:25:b6:
f7:3e:bb:20:3f:22:16:42:a8:a4:73:48:7f:4d:3f:
a4:56:eb:86:da:3e:a7:d8:80:ab:bc:0c:89:a4:9e:
44:8f:d3:21:16:7f:76:bd:a2:0c:74:14:8b:82:15:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:91:08:D1:B5:C1:C5:59:83:36:21:1F:70:0E:D1:00:E7:EA:77
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BnuRCNG1wcVZgzYhH3AO0QDn6nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:5c:b2:16:26:99:e6:0d:28:54:35:43:1b:90:d9:05:75:9d:
14:bc:a2:a0:9b:61:41:46:76:28:70:08:be:c7:af:9a:c9:12:
08:6d:a7:48:1c:1e:93:48:11:d9:41:c7:f3:08:71:f8:54:10:
a8:86:4a:81:f0:62:45:7f:33:b9:0e:46:5d:0b:c7:79:3c:5a:
95:7b:45:47:4c:ad:65:85:6e:a1:77:00:33:cb:02:eb:b5:ab:
3e:69:29:84:85:4b:64:7c:7a:70:b9:d6:b8:20:3d:4b:93:16:
b3:92:a2:b3:20:88:69:d2:83:03:d8:1b:f7:41:7d:d9:2d:be:
71:80:42:d0:ba:ae:0a:69:cf:04:64:ad:1e:79:ba:15:6f:f0:
90:c8:f8:b6:43:1c:31:8c:02:b7:21:ac:5e:80:25:6c:08:9f:
fc:0f:41:76:d2:b8:61:7f:61:1f:c5:68:0a:58:4f:40:71:fd:
96:50:28:b0:d7:22:96:c0:da:45:11:9b:ee:41:5c:b3:da:fd:
42:7f:e9:85:b8:d3:f1:a7:b5:0c:52:3b:87:3c:65:61:2e:db:
fe:da:04:86:9e:e7:94:c8:1c:2c:9e:59:fd:ca:e2:ac:f7:83:
e5:33:f3:dd:30:3d:16:d3:c2:8c:ec:ec:5f:fc:8e:f7:9b:5b:
0c:4e:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:01:53 2025 by rpki-client