Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa
File: bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa (raw, json)
Hash identifier: +pvmNAe4DVU0G8NksRdtjc76cKcR1QvaqfbXLphvYek=
Subject key identifier: 6C:BC:81:6B:E6:14:E4:24:D4:11:47:C2:73:28:CC:AB:22:96:B4:2A
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 01994F97D8C4F2439FF604A690405BBBE2E6
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa
Signing time: Mon 15 Sep 2025 22:56:15 +0000
ROA not before: Mon 15 Sep 2025 22:56:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 157.23.248.0/24 maxlen: 24
157.23.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:97:d8:c4:f2:43:9f:f6:04:a6:90:40:5b:bb:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Sep 15 22:56:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cbc816be614e424d41147c27328ccab2296b42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:43:11:0b:ae:4a:ff:0c:af:9a:90:a7:19:
f3:b9:c5:17:3d:1d:b6:72:f2:cd:59:ea:43:3a:51:
d9:d0:db:46:4b:27:19:08:d3:1a:ba:63:78:6b:28:
e9:bb:f5:b2:11:8a:66:e4:f9:32:4e:1e:75:b0:dd:
6f:86:c6:28:49:a9:30:20:1e:c0:bb:88:1f:e0:13:
81:3f:e1:1e:66:53:85:89:34:97:2a:72:79:4a:1d:
4b:99:52:47:e6:ba:23:20:b7:28:95:e8:83:14:dc:
01:6b:cb:6f:be:40:66:bc:90:37:02:37:5b:2c:50:
bc:03:2c:e9:4e:92:1e:6a:58:5e:b4:48:2b:7f:a0:
75:70:a8:15:a7:f9:f3:0a:d3:da:6b:48:c1:6b:d0:
dc:85:fd:4b:b5:97:19:e0:bc:0e:13:6a:49:56:6e:
77:2e:cc:b3:7a:05:07:9e:80:49:af:bd:71:2b:75:
cc:9a:ea:c6:06:5d:9f:10:67:82:80:52:88:c5:83:
fe:17:58:44:00:b4:7d:73:1d:ea:f7:e4:f7:44:2e:
b3:be:06:48:a9:12:c8:5f:e1:84:16:27:c8:61:4e:
49:16:75:9f:e6:b9:6f:dd:7e:fd:e5:f4:10:e4:dd:
91:0c:88:c1:ee:75:79:fc:89:55:97:63:58:f2:e5:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:81:6B:E6:14:E4:24:D4:11:47:C2:73:28:CC:AB:22:96:B4:2A
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.248.0/24
157.23.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f2:b8:6d:4c:2f:f7:bd:cf:f8:04:6c:98:18:5c:19:df:e6:
a0:be:2c:5a:47:2c:bf:d4:75:96:54:d0:90:64:2f:45:17:03:
97:40:4e:18:df:1e:9b:2d:93:64:cb:45:f6:5a:3e:48:7e:48:
ed:d5:16:39:43:2e:fc:1f:13:fe:78:44:38:44:3b:ca:98:6d:
75:08:f7:66:04:bc:c3:06:89:6d:c7:27:19:ac:3e:e3:9e:8e:
21:11:87:82:26:08:2c:5c:25:46:44:34:1f:25:da:60:01:a2:
aa:57:6e:2d:ea:61:ba:cd:a7:28:fd:72:ea:da:4e:9a:00:47:
bd:80:af:95:42:89:20:2e:db:97:d8:7d:8c:f0:b6:50:b4:a5:
b8:17:02:28:55:7e:ea:0d:a3:58:54:13:66:c5:f8:92:fd:78:
8a:d7:31:23:a7:62:df:61:c2:5c:ff:b2:8a:de:dc:82:43:76:
0f:f5:2a:4a:2a:96:06:7e:d1:65:53:bc:67:7c:f6:b6:1a:85:
62:4e:cd:aa:f0:d6:e9:ba:d0:7b:a5:9c:bc:ed:0c:f9:62:f7:
23:f2:74:c1:2b:a5:16:a5:1c:82:cd:e5:aa:33:3e:d7:fa:43:
27:c1:59:4d:f0:bf:46:04:ba:ec:30:31:fb:eb:5f:08:5a:0c:
97:d2:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:49:15 2025 by rpki-client