Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bCYHpl7ypdw8KPDySXySITRXaLg.roa
File: bCYHpl7ypdw8KPDySXySITRXaLg.roa (raw, json)
Hash identifier: DhhMfVqsKimZHnOMy5v/jz4x0LcKODZXNrmv7I81PIc=
Subject key identifier: 6C:26:07:A6:5E:F2:A5:DC:3C:28:F0:F2:49:7C:92:21:34:57:68:B8
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019903D4B840B70181960C745FEE3F9BE7B4
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bCYHpl7ypdw8KPDySXySITRXaLg.roa
Signing time: Mon 01 Sep 2025 05:51:36 +0000
ROA not before: Mon 01 Sep 2025 05:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.84.0/24 maxlen: 24
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:03:d4:b8:40:b7:01:81:96:0c:74:5f:ee:3f:9b:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 1 05:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c2607a65ef2a5dc3c28f0f2497c9221345768b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:82:0f:e1:16:ac:81:48:13:04:4d:ab:23:
2e:94:85:c3:7f:b9:94:d3:90:96:9b:76:c4:ca:38:
2e:b6:b3:7c:6b:6f:bb:27:d8:3f:7c:96:d8:15:be:
4e:8e:99:fd:7b:04:f9:8c:fd:26:9c:36:58:d4:54:
3b:55:47:34:0a:ed:d0:44:fc:5e:a2:aa:29:41:d8:
ac:62:7c:d4:a6:db:ef:35:dc:78:f4:48:b4:d9:f0:
b0:79:51:c1:93:fd:4f:16:b0:5a:8e:51:b2:c0:39:
36:ae:bc:19:0d:ed:fd:53:87:43:53:42:f3:b2:5d:
46:89:03:01:21:32:ae:48:9f:df:17:7c:9e:e3:ac:
e6:da:8c:4b:77:f0:d2:b7:45:0f:83:9e:33:24:f1:
5d:b7:a7:0e:f6:9e:b1:a7:e6:b1:72:ae:84:ce:12:
30:af:01:e5:59:69:89:7e:ac:d2:c4:27:39:f4:73:
65:83:99:67:4b:93:63:b6:3c:5c:ff:9d:f3:d0:16:
2f:1a:58:6d:0d:3c:62:18:82:05:c3:4d:32:2d:9a:
54:8d:5a:9f:2f:b6:e0:e0:eb:ed:34:20:6f:38:f1:
0a:6c:14:85:5e:73:fb:37:e5:07:8f:19:11:25:79:
b6:b7:26:76:3b:ab:e2:9b:32:9f:24:27:5d:52:4d:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:07:A6:5E:F2:A5:DC:3C:28:F0:F2:49:7C:92:21:34:57:68:B8
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bCYHpl7ypdw8KPDySXySITRXaLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
11:d8:7d:d5:bc:55:d2:aa:c5:13:cc:a4:25:46:c9:8b:19:ca:
99:7f:51:b4:2f:53:df:48:b6:4c:f2:97:35:36:24:5c:47:e5:
34:58:88:0b:e8:d3:54:6f:9d:d8:75:44:a2:59:3b:95:89:e9:
1e:ea:45:cc:24:24:28:a5:4f:2c:93:2b:12:06:a9:2d:6d:b5:
be:33:4d:03:93:53:f6:79:63:44:52:e2:3a:74:1a:9a:31:d9:
24:c0:a1:14:a7:92:d8:6c:84:93:b9:81:b4:d8:66:6c:b7:44:
c6:44:25:6b:b2:08:ab:fe:96:82:82:c9:f9:a5:15:e5:07:f9:
a6:73:90:61:b5:6e:0e:85:47:13:e1:83:89:90:42:6f:53:ee:
0e:9a:c6:0a:ec:2a:b7:e1:03:36:31:32:e6:b2:c6:7a:17:2c:
92:76:fc:00:ab:b8:88:e5:7e:ca:88:50:6c:b8:3f:c3:9c:11:
02:92:2f:d0:05:e3:d3:29:dd:b9:0b:73:08:69:c1:47:63:1d:
4e:1c:5f:92:c4:82:08:74:83:f8:ae:cb:66:8b:4b:51:91:cf:
04:34:06:0e:74:f6:48:ed:bf:23:41:2f:75:fa:d5:d4:0e:3f:
86:f3:66:9b:43:46:3f:67:4b:f2:e3:2c:00:39:42:7a:50:98:
b4:3f:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:50:10 2025 by rpki-client