Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/BPp-br1m8twWuKnnT9fY7MJwn_Y.roa
File: BPp-br1m8twWuKnnT9fY7MJwn_Y.roa (raw, json)
Hash identifier: jSYthsXuRkdrCtZydE+6ZCFDw/F0UdXQcHDK5mHn62A=
Subject key identifier: 04:FA:7E:6E:BD:66:F2:DC:16:B8:A9:E7:4F:D7:D8:EC:C2:70:9F:F6
Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial: 0196ED9CEC403BF61BD8648661EB19B05218
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/BPp-br1m8twWuKnnT9fY7MJwn_Y.roa
Signing time: Tue 20 May 2025 12:13:26 +0000
ROA not before: Tue 20 May 2025 12:13:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197025
IP address blocks: 178.212.48.0/24 maxlen: 24
178.212.49.0/24 maxlen: 24
178.212.50.0/24 maxlen: 24
178.212.51.0/24 maxlen: 24
178.212.52.0/24 maxlen: 24
178.212.53.0/24 maxlen: 24
178.212.54.0/24 maxlen: 24
178.212.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:9c:ec:40:3b:f6:1b:d8:64:86:61:eb:19:b0:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Validity
Not Before: May 20 12:13:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04fa7e6ebd66f2dc16b8a9e74fd7d8ecc2709ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:cf:b1:10:20:f7:48:21:67:83:9f:be:09:
d4:07:01:53:dd:95:f0:34:4c:b9:b7:ae:18:46:47:
05:99:46:9c:d5:22:07:da:9e:4a:68:35:d4:3d:26:
44:3c:c4:6c:bd:f2:94:9a:62:af:ee:df:19:0d:7a:
74:6d:cb:67:d0:ed:1b:dd:fa:72:49:6d:e7:3e:b1:
8b:f3:90:08:d5:9b:6e:3f:90:dd:ad:43:b8:42:3e:
98:d4:e9:41:e1:f5:2c:b7:ab:1a:c8:d6:f5:fb:c3:
d0:3e:80:e9:71:31:a5:39:ab:cf:b5:1c:ce:0c:e2:
3a:d6:54:43:15:be:87:fe:d9:8f:a7:9f:f9:0d:4c:
e4:f5:d7:fe:1e:83:b5:70:7f:90:03:ae:0d:ab:4a:
0d:d9:bb:ca:16:04:fa:63:42:71:7c:e2:bf:f2:0d:
f7:74:eb:43:7b:e7:d4:9f:db:5c:51:d2:84:3c:b4:
90:46:a9:9c:2d:26:02:54:f6:16:97:3d:dd:78:8f:
92:d7:6a:02:9b:ab:84:7f:59:26:e2:0e:97:ab:b7:
7a:91:1a:66:80:16:aa:98:27:91:86:61:59:c9:a8:
93:f5:99:c7:ea:3c:67:b5:eb:13:61:9d:b8:ca:dc:
ba:7e:49:73:b8:d3:77:37:35:7f:0b:25:6b:e5:bc:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:7E:6E:BD:66:F2:DC:16:B8:A9:E7:4F:D7:D8:EC:C2:70:9F:F6
X509v3 Authority Key Identifier:
keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/BPp-br1m8twWuKnnT9fY7MJwn_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.48.0/21
Signature Algorithm: sha256WithRSAEncryption
90:54:80:b4:57:5b:e3:99:a7:30:67:63:1d:ca:a6:5d:f6:b6:
cc:d3:48:17:84:fb:a4:1f:10:00:f9:cc:22:cd:0f:7f:bd:a9:
62:f3:15:bb:48:0b:a7:66:e1:51:76:88:31:32:79:4d:7a:d2:
2e:48:6a:f7:21:ef:f6:9e:2a:5d:44:e4:18:01:59:7f:2d:bb:
d3:d8:c2:2a:84:15:40:ef:b8:3e:99:d9:1a:13:1e:74:20:4f:
b3:27:57:9a:53:69:a8:a8:9c:8e:97:99:b7:d8:1d:0c:0d:c2:
ec:e3:be:ac:b7:6c:8c:86:c0:03:29:69:79:ea:fd:f8:eb:5f:
47:e9:ff:8b:eb:68:53:ca:97:41:68:19:24:14:03:d8:74:84:
62:3d:8e:50:21:30:3c:52:ab:70:e5:a6:d2:db:ed:7a:4c:48:
f6:fc:48:b6:d8:5c:0d:a0:f3:ef:d2:82:44:3f:75:82:64:6b:
db:78:33:cf:4e:51:84:33:76:89:78:0e:c4:59:2e:86:7f:18:
91:ef:4b:73:f4:bd:a6:1b:48:fb:02:71:93:f7:cd:76:65:2f:
1e:e6:52:29:1c:72:8d:b1:39:48:ee:6c:83:c6:1d:6b:b4:8d:
2e:3e:48:27:ff:c9:37:7d:d6:cd:d0:6d:3b:f5:8e:46:71:bb:
ab:66:11:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbtnOxAO/Yb2GSGYesZsFIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzc1MmE3MTliNzQwYTBlMDI0NGRkMjljNjUzMmY3OTE1
MTY0NmIwHhcNMjUwNTIwMTIxMzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGZhN2U2ZWJkNjZmMmRjMTZiOGE5ZTc0ZmQ3ZDhlY2MyNzA5ZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvTPsRAg90ghZ4OfvgnUBwFT3ZXw
NEy5t64YRkcFmUac1SIH2p5KaDXUPSZEPMRsvfKUmmKv7t8ZDXp0bctn0O0b3fpy
SW3nPrGL85AI1ZtuP5DdrUO4Qj6Y1OlB4fUst6sayNb1+8PQPoDpcTGlOavPtRzO
DOI61lRDFb6H/tmPp5/5DUzk9df+HoO1cH+QA64Nq0oN2bvKFgT6Y0JxfOK/8g33
dOtDe+fUn9tcUdKEPLSQRqmcLSYCVPYWlz3deI+S12oCm6uEf1km4g6Xq7d6kRpm
gBaqmCeRhmFZyaiT9ZnH6jxntesTYZ24yty6fklzuNN3NzV/CyVr5bxN1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAT6fm69ZvLcFrip50/X2OzCcJ/2MB8GA1UdIwQY
MBaAFLt3UqcZt0Cg4CRN0pxlMveRUWRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYt
MzM1NGFkYmExMWIxLzEvQlBwLWJyMW04dHdXdUtublQ5Zlk3TUp3bl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYtMzM1NGFkYmExMWIx
LzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstQwMA0G
CSqGSIb3DQEBCwUAA4IBAQCQVIC0V1vjmacwZ2MdyqZd9rbM00gXhPukHxAA+cwi
zQ9/vali8xW7SAunZuFRdogxMnlNetIuSGr3Ie/2nipdROQYAVl/LbvT2MIqhBVA
77g+mdkaEx50IE+zJ1eaU2moqJyOl5m32B0MDcLs476st2yMhsADKWl56v34619H
6f+L62hTypdBaBkkFAPYdIRiPY5QITA8Uqtw5abS2+16TEj2/Ei22FwNoPPv0oJE
P3WCZGvbeDPPTlGEM3aJeA7EWS6GfxiR70tz9L2mG0j7AnGT9812ZS8e5lIpHHKN
sTlI7myDxh1rtI0uPkgn/8k3fdbN0G079Y5GcburZhGJ
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:18 2025 by rpki-client